last executing test programs: 24.859548298s ago: executing program 2 (id=54): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r1}, &(0x7f0000000340)=0x8) 23.992300204s ago: executing program 2 (id=95): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 23.956598594s ago: executing program 2 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0x3}, 0x2a) r1 = msgget$private(0x0, 0x790) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(r1, 0x0) 23.867917154s ago: executing program 2 (id=105): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000440)={0x5}, &(0x7f0000000480)) 23.760895805s ago: executing program 2 (id=109): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 23.506230727s ago: executing program 2 (id=125): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 23.495546067s ago: executing program 32 (id=125): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.321206006s ago: executing program 5 (id=907): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r0, 0x1b) 1.441038791s ago: executing program 5 (id=916): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xd76}, 0x18) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 1.378440502s ago: executing program 5 (id=917): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x2, r0, 0x0, 0x80000}) 779.714535ms ago: executing program 1 (id=942): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_GETINFO(0x2, &(0x7f0000000740)=@md0, 0x0, 0x0) 778.868246ms ago: executing program 0 (id=943): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) 746.370906ms ago: executing program 0 (id=944): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xd192}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x8102, 0x0) sendfile(r2, r2, 0x0, 0x6) 734.470226ms ago: executing program 1 (id=945): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 719.999766ms ago: executing program 0 (id=948): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 684.041916ms ago: executing program 1 (id=950): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) 629.541696ms ago: executing program 0 (id=962): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 527.307447ms ago: executing program 5 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xd76}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 475.410557ms ago: executing program 0 (id=955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a0001"], 0x110}}, 0x0) 475.194287ms ago: executing program 5 (id=956): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 284.937729ms ago: executing program 3 (id=959): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f0000000080)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 250.096899ms ago: executing program 3 (id=961): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 239.235839ms ago: executing program 0 (id=975): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 231.786089ms ago: executing program 1 (id=965): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032bbd70000000000001"], 0x28}}, 0x44) 209.628809ms ago: executing program 3 (id=967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 179.100509ms ago: executing program 1 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xd76}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 178.234259ms ago: executing program 4 (id=969): r0 = memfd_create(&(0x7f00000001c0)='/duv/udmabuf\x00', 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), 0x0, 0x0, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 153.178669ms ago: executing program 1 (id=970): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 105.69782ms ago: executing program 4 (id=971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 105.33803ms ago: executing program 4 (id=972): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) 104.860099ms ago: executing program 5 (id=982): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 100.418499ms ago: executing program 4 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a0001"], 0x110}}, 0x0) 91.72439ms ago: executing program 3 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') 69.11933ms ago: executing program 3 (id=976): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x8, 0xfffbfffe, 0x984, 0x79, "bea0881200040300000800", 0x4, 0x5}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x4) 28.98665ms ago: executing program 3 (id=977): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240), 0x3, 0x575, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r1, 0x10, 0x3, 0x105ff) 1.06965ms ago: executing program 4 (id=988): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getrusage(0x0, &(0x7f0000000900)) 0s ago: executing program 4 (id=989): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x318, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1000, 'system_u:object_r:apt_var_log_t:s0\x00'}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'ip_vti0\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x7ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 24.722798][ T29] audit: type=1400 audit(1762743303.450:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.746003][ T29] audit: type=1400 audit(1762743303.480:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.746674][ T3303] cgroup: Unknown subsys name 'net' [ 24.773777][ T29] audit: type=1400 audit(1762743303.500:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.916140][ T3303] cgroup: Unknown subsys name 'cpuset' [ 24.922321][ T3303] cgroup: Unknown subsys name 'rlimit' [ 25.012393][ T29] audit: type=1400 audit(1762743303.740:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.036029][ T29] audit: type=1400 audit(1762743303.740:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.056606][ T29] audit: type=1400 audit(1762743303.740:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.063180][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.076989][ T29] audit: type=1400 audit(1762743303.740:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.094073][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.105887][ T29] audit: type=1400 audit(1762743303.740:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.105921][ T29] audit: type=1400 audit(1762743303.740:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.162725][ T29] audit: type=1400 audit(1762743303.820:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.036104][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.120483][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.158236][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.165388][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.172526][ T3314] bridge_slave_0: entered allmulticast mode [ 27.178945][ T3314] bridge_slave_0: entered promiscuous mode [ 27.185457][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.193942][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.201035][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.208199][ T3314] bridge_slave_1: entered allmulticast mode [ 27.214654][ T3314] bridge_slave_1: entered promiscuous mode [ 27.234331][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.252018][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.272523][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 27.281527][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.326362][ T3314] team0: Port device team_slave_0 added [ 27.345054][ T3314] team0: Port device team_slave_1 added [ 27.371884][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.378985][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.386171][ T3313] bridge_slave_0: entered allmulticast mode [ 27.392474][ T3313] bridge_slave_0: entered promiscuous mode [ 27.399227][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.406290][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.413449][ T3313] bridge_slave_1: entered allmulticast mode [ 27.419973][ T3313] bridge_slave_1: entered promiscuous mode [ 27.437231][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.444194][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.470228][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.492565][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.499765][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.506927][ T3320] bridge_slave_0: entered allmulticast mode [ 27.513363][ T3320] bridge_slave_0: entered promiscuous mode [ 27.520212][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.527197][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.553162][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.569088][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.576190][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.583443][ T3316] bridge_slave_0: entered allmulticast mode [ 27.589933][ T3316] bridge_slave_0: entered promiscuous mode [ 27.601182][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.608310][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.615487][ T3320] bridge_slave_1: entered allmulticast mode [ 27.621760][ T3320] bridge_slave_1: entered promiscuous mode [ 27.636465][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.645776][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.652830][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.660049][ T3316] bridge_slave_1: entered allmulticast mode [ 27.666379][ T3316] bridge_slave_1: entered promiscuous mode [ 27.677187][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.684247][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.691490][ T3323] bridge_slave_0: entered allmulticast mode [ 27.697961][ T3323] bridge_slave_0: entered promiscuous mode [ 27.705051][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.712226][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.719660][ T3323] bridge_slave_1: entered allmulticast mode [ 27.726180][ T3323] bridge_slave_1: entered promiscuous mode [ 27.737584][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.757122][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.784586][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.799593][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.809373][ T3313] team0: Port device team_slave_0 added [ 27.824707][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.839307][ T3313] team0: Port device team_slave_1 added [ 27.845916][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.856999][ T3314] hsr_slave_0: entered promiscuous mode [ 27.862994][ T3314] hsr_slave_1: entered promiscuous mode [ 27.869860][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.879743][ T3320] team0: Port device team_slave_0 added [ 27.912245][ T3320] team0: Port device team_slave_1 added [ 27.918160][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.925118][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.951048][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.962117][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.969201][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.995124][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.011608][ T3316] team0: Port device team_slave_0 added [ 28.018353][ T3316] team0: Port device team_slave_1 added [ 28.029006][ T3323] team0: Port device team_slave_0 added [ 28.058585][ T3323] team0: Port device team_slave_1 added [ 28.069211][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.076203][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.102094][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.119868][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.126867][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.152896][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.173097][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.180110][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.206181][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.217058][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.224024][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.249974][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.265359][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.272354][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.298445][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.323831][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.330917][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.356833][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.374994][ T3313] hsr_slave_0: entered promiscuous mode [ 28.381035][ T3313] hsr_slave_1: entered promiscuous mode [ 28.387025][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 28.392749][ T3313] Cannot create hsr debugfs directory [ 28.450475][ T3320] hsr_slave_0: entered promiscuous mode [ 28.456650][ T3320] hsr_slave_1: entered promiscuous mode [ 28.462493][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 28.468302][ T3320] Cannot create hsr debugfs directory [ 28.475860][ T3316] hsr_slave_0: entered promiscuous mode [ 28.481772][ T3316] hsr_slave_1: entered promiscuous mode [ 28.487790][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.493505][ T3316] Cannot create hsr debugfs directory [ 28.501198][ T3323] hsr_slave_0: entered promiscuous mode [ 28.507316][ T3323] hsr_slave_1: entered promiscuous mode [ 28.513104][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 28.518852][ T3323] Cannot create hsr debugfs directory [ 28.574319][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.596749][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.618029][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.628862][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.730963][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.741497][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.757296][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.768223][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.784834][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.794678][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.805951][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.815102][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.838829][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.847528][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.862624][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.872383][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.911896][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.922502][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.931616][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.946558][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.957948][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.979194][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.992739][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.999866][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.016377][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.023502][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.036664][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.054875][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.087899][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.096935][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.107349][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.134165][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.147529][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.154592][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.163312][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.170373][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.186484][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.193547][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.202276][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.209444][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.229419][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.239437][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.254702][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.261912][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.273525][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.280577][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.289566][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.296740][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.326974][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.334184][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.348003][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.361425][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.371946][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.452373][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.464411][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.473960][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.537510][ T3314] veth0_vlan: entered promiscuous mode [ 29.553992][ T3314] veth1_vlan: entered promiscuous mode [ 29.588329][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.603315][ T3314] veth0_macvtap: entered promiscuous mode [ 29.626901][ T3314] veth1_macvtap: entered promiscuous mode [ 29.649011][ T3323] veth0_vlan: entered promiscuous mode [ 29.661776][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.684089][ T3323] veth1_vlan: entered promiscuous mode [ 29.695182][ T3313] veth0_vlan: entered promiscuous mode [ 29.711764][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.725851][ T3320] veth0_vlan: entered promiscuous mode [ 29.744133][ T3320] veth1_vlan: entered promiscuous mode [ 29.750660][ T564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.764221][ T564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.775647][ T3313] veth1_vlan: entered promiscuous mode [ 29.783115][ T3323] veth0_macvtap: entered promiscuous mode [ 29.789544][ T564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.798722][ T564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.821177][ T3323] veth1_macvtap: entered promiscuous mode [ 29.832272][ T3313] veth0_macvtap: entered promiscuous mode [ 29.839358][ T3320] veth0_macvtap: entered promiscuous mode [ 29.849790][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.849805][ T29] audit: type=1400 audit(1762743308.580:81): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.djVgjZ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.854813][ T3316] veth0_vlan: entered promiscuous mode [ 29.867458][ T29] audit: type=1400 audit(1762743308.580:82): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.905450][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.907545][ T29] audit: type=1400 audit(1762743308.580:83): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.djVgjZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.916589][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.939901][ T29] audit: type=1400 audit(1762743308.580:84): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.968921][ T29] audit: type=1400 audit(1762743308.580:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.djVgjZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.995605][ T29] audit: type=1400 audit(1762743308.580:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.djVgjZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.022941][ T29] audit: type=1400 audit(1762743308.580:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.044324][ T29] audit: type=1400 audit(1762743308.610:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.067108][ T29] audit: type=1400 audit(1762743308.610:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.068615][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.094189][ T3313] veth1_macvtap: entered promiscuous mode [ 30.113638][ T1789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.129666][ T3316] veth1_vlan: entered promiscuous mode [ 30.138656][ T29] audit: type=1400 audit(1762743308.870:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.155290][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.170088][ T1789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.187422][ T3320] veth1_macvtap: entered promiscuous mode [ 30.204816][ T1789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.219663][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.234180][ T3316] veth0_macvtap: entered promiscuous mode [ 30.253420][ T1789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.263594][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.273590][ T3316] veth1_macvtap: entered promiscuous mode [ 30.287538][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.304652][ T1789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.323262][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.330550][ T1789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.361183][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.369632][ T1789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.398998][ T1789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.434718][ T1789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.458849][ T1789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.508240][ T1789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.538149][ T1789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.567379][ T3497] loop0: detected capacity change from 0 to 512 [ 30.579993][ T3493] mmap: syz.2.3 (3493) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.581941][ T1789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.625609][ T3497] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.638809][ T3497] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.670253][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.703854][ T3497] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.716857][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 30.719379][ T3005] udevd[3005]: worker [3297] terminated by signal 33 (Unknown signal 33) [ 30.747874][ T3005] udevd[3005]: worker [3297] failed while handling '/devices/virtual/block/loop1' [ 30.757293][ T3497] EXT4-fs (loop0): 1 truncate cleaned up [ 30.763395][ T3497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.781174][ T3510] bond1: Invalid ad_actor_system MAC address. [ 30.787369][ T3510] bond1: option ad_actor_system: invalid value (1) [ 30.819011][ T3510] bond1 (unregistering): Released all slaves [ 30.839978][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.857455][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.895998][ T3510] Zero length message leads to an empty skb [ 30.956536][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.118447][ T3552] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.406399][ T3577] netlink: 'syz.3.42': attribute type 3 has an invalid length. [ 31.410655][ T3580] sctp: [Deprecated]: syz.4.44 (pid 3580) Use of int in max_burst socket option deprecated. [ 31.410655][ T3580] Use struct sctp_assoc_value instead [ 31.533910][ T3590] veth0: entered promiscuous mode [ 31.565929][ T3589] veth0: left promiscuous mode [ 31.710925][ T3617] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET) [ 31.862844][ T3640] syzkaller1: entered promiscuous mode [ 31.868494][ T3640] syzkaller1: entered allmulticast mode [ 32.140910][ T3661] 9pnet_fd: Insufficient options for proto=fd [ 32.620091][ T3711] sd 0:0:1:0: device reset [ 32.634081][ T3714] loop2: detected capacity change from 0 to 512 [ 32.643812][ T3716] 9p: Unknown access argument ¿: -22 [ 32.653823][ T3714] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.105: inode has both inline data and extents flags [ 32.667861][ T3714] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.105: couldn't read orphan inode 15 (err -117) [ 32.680698][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.716031][ T3313] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory hole found for htree leaf block 0 [ 32.741587][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.110'. [ 32.956214][ T3720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.968016][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.011977][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.059497][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.081219][ T3742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.095853][ T3742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.218311][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.419791][ T31] bridge_slave_1: left allmulticast mode [ 33.425646][ T31] bridge_slave_1: left promiscuous mode [ 33.431370][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.440249][ T31] bridge_slave_0: left allmulticast mode [ 33.445982][ T31] bridge_slave_0: left promiscuous mode [ 33.451747][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.599133][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.610477][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.623894][ T31] bond0 (unregistering): Released all slaves [ 33.649225][ T3796] sctp: [Deprecated]: syz.3.133 (pid 3796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 33.649225][ T3796] Use struct sctp_sack_info instead [ 33.727085][ T31] hsr_slave_0: left promiscuous mode [ 33.734226][ T31] hsr_slave_1: left promiscuous mode [ 33.740130][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.747686][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.761632][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.769162][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.783728][ T31] veth1_macvtap: left promiscuous mode [ 33.783863][ T3811] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.807019][ T31] veth0_macvtap: left promiscuous mode [ 33.815940][ T31] veth1_vlan: left promiscuous mode [ 33.821266][ T31] veth0_vlan: left promiscuous mode [ 33.976243][ T3835] capability: warning: `syz.1.138' uses deprecated v2 capabilities in a way that may be insecure [ 34.011237][ T31] team0 (unregistering): Port device team_slave_1 removed [ 34.025844][ T31] team0 (unregistering): Port device team_slave_0 removed [ 34.174924][ T3755] chnl_net:caif_netlink_parms(): no params data found [ 34.266112][ T3927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 34.346193][ T3755] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.353449][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.376112][ T3755] bridge_slave_0: entered allmulticast mode [ 34.393350][ T3755] bridge_slave_0: entered promiscuous mode [ 34.400414][ T3755] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.407555][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.414883][ T3755] bridge_slave_1: entered allmulticast mode [ 34.422459][ T3755] bridge_slave_1: entered promiscuous mode [ 34.486052][ T4010] Illegal XDP return value 4294967262 on prog (id 108) dev syz_tun, expect packet loss! [ 34.506460][ T3755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.530311][ T3755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.549012][ T4036] loop3: detected capacity change from 0 to 256 [ 34.576915][ T3755] team0: Port device team_slave_0 added [ 34.589464][ T3755] team0: Port device team_slave_1 added [ 34.613407][ T4036] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.635094][ T3755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.642291][ T3755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.668354][ T3755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.682354][ T3755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.689442][ T3755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.715717][ T3755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.799148][ T3755] hsr_slave_0: entered promiscuous mode [ 34.810494][ T3755] hsr_slave_1: entered promiscuous mode [ 34.824140][ T3755] debugfs: 'hsr0' already exists in 'hsr' [ 34.829999][ T3755] Cannot create hsr debugfs directory [ 34.830035][ T4142] loop1: detected capacity change from 0 to 256 [ 34.861803][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 34.861821][ T29] audit: type=1326 audit(1762743314.589:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f3ff6c9 code=0x7ffc0000 [ 34.950507][ T29] audit: type=1326 audit(1762743314.619:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f3ff6c9 code=0x7ffc0000 [ 35.040294][ T29] audit: type=1400 audit(1762743314.739:375): avc: denied { read write } for pid=4186 comm="syz.4.182" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 35.064429][ T29] audit: type=1400 audit(1762743314.739:376): avc: denied { open } for pid=4186 comm="syz.4.182" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 35.089413][ T29] audit: type=1400 audit(1762743314.769:377): avc: denied { create } for pid=4200 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 35.089442][ T29] audit: type=1400 audit(1762743314.769:378): avc: denied { write } for pid=4200 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 35.165418][ T29] audit: type=1400 audit(1762743314.839:379): avc: denied { bind } for pid=4225 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.165451][ T29] audit: type=1400 audit(1762743314.889:380): avc: denied { create } for pid=4243 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 35.165536][ T29] audit: type=1400 audit(1762743314.889:381): avc: denied { connect } for pid=4243 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 35.165563][ T29] audit: type=1400 audit(1762743314.889:382): avc: denied { ioctl } for pid=4243 comm="syz.3.184" path="socket:[5794]" dev="sockfs" ino=5794 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 35.231445][ T3755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.253579][ T3755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.317856][ T3755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.320119][ T3755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.443001][ T3755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.480849][ T3755] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.503547][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.510682][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.537581][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.544707][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.754320][ T3755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.899596][ T4359] loop4: detected capacity change from 0 to 512 [ 35.916605][ T4359] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.960592][ T3755] veth0_vlan: entered promiscuous mode [ 35.972618][ T3755] veth1_vlan: entered promiscuous mode [ 35.989279][ T4359] EXT4-fs (loop4): 1 truncate cleaned up [ 36.000070][ T3755] veth0_macvtap: entered promiscuous mode [ 36.012840][ T4359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.026350][ T3755] veth1_macvtap: entered promiscuous mode [ 36.041405][ T3755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.053271][ T3755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.072645][ T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.099056][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.114557][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.134713][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.159559][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.245739][ T4400] netlink: 80 bytes leftover after parsing attributes in process `syz.4.215'. [ 36.327068][ T4417] loop5: detected capacity change from 0 to 512 [ 36.353016][ T4417] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.221: bg 0: block 393: padding at end of block bitmap is not set [ 36.369724][ T4423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 36.402774][ T4382] loop3: detected capacity change from 0 to 32768 [ 36.411604][ T4417] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 36.427958][ T4417] EXT4-fs (loop5): 2 truncates cleaned up [ 36.434664][ T4417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.459232][ T3777] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 36.467758][ T3777] loop3: p1 start 460800 is beyond EOD, truncated [ 36.474229][ T3777] loop3: p2 size 83886080 extends beyond EOD, truncated [ 36.482633][ T3755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.503704][ T3777] loop3: p5 start 460800 is beyond EOD, truncated [ 36.510270][ T3777] loop3: p6 size 83886080 extends beyond EOD, truncated [ 36.552200][ T4382] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 36.558000][ T4382] loop3: p1 start 460800 is beyond EOD, truncated [ 36.564487][ T4382] loop3: p2 size 83886080 extends beyond EOD, truncated [ 36.572642][ T4443] netlink: 'syz.4.227': attribute type 21 has an invalid length. [ 36.581602][ T4443] netlink: 132 bytes leftover after parsing attributes in process `syz.4.227'. [ 36.590695][ T4443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.227'. [ 36.620439][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.228'. [ 36.621177][ T4382] loop3: p5 start 460800 is beyond EOD, truncated [ 36.635960][ T4382] loop3: p6 size 83886080 extends beyond EOD, truncated [ 36.742373][ T4455] syz.5.228 (4455) used greatest stack depth: 10160 bytes left [ 36.751629][ T4482] loop0: detected capacity change from 0 to 512 [ 36.774881][ T4482] EXT4-fs: Ignoring removed nobh option [ 36.797528][ T4482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.811692][ T4482] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.840274][ T4482] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 3: comm syz.0.231: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 36.852357][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 36.875924][ T3777] udevd[3777]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 36.883561][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 36.911304][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.919622][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 36.931712][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 36.942830][ T3588] udevd[3588]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 36.954102][ T3777] udevd[3777]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 36.965714][ T4509] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 37.101589][ T4526] loop4: detected capacity change from 0 to 1024 [ 37.123034][ T4526] EXT4-fs: Ignoring removed orlov option [ 37.165814][ T4526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.321571][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 37.330986][ T4569] loop3: detected capacity change from 0 to 512 [ 37.353839][ T4569] EXT4-fs: Ignoring removed bh option [ 37.390998][ T4569] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 37.434349][ T4569] EXT4-fs (loop3): 1 truncate cleaned up [ 37.473536][ T4569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.519464][ T4569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.833150][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.180432][ T4700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 38.189557][ T4700] netlink: 23 bytes leftover after parsing attributes in process `syz.4.262'. [ 38.198503][ T4700] netlink: 'syz.4.262': attribute type 5 has an invalid length. [ 38.206200][ T4700] netlink: 23 bytes leftover after parsing attributes in process `syz.4.262'. [ 38.397181][ T4743] process 'syz.5.268' launched './file1' with NULL argv: empty string added [ 38.530223][ T4774] syzkaller1: entered promiscuous mode [ 38.535955][ T4774] syzkaller1: entered allmulticast mode [ 38.548844][ T4782] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.708707][ T4808] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.051874][ T4854] netlink: 188 bytes leftover after parsing attributes in process `syz.3.293'. [ 39.527645][ T4906] SELinux: Context Ü is not valid (left unmapped). [ 39.598958][ T4916] loop4: detected capacity change from 0 to 1764 [ 40.049147][ T3425] IPVS: starting estimator thread 0... [ 40.056208][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 40.056223][ T29] audit: type=1400 audit(1762743319.789:486): avc: denied { setopt } for pid=4985 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.155492][ T4987] IPVS: using max 2880 ests per chain, 144000 per kthread [ 40.242781][ T29] audit: type=1400 audit(1762743319.969:487): avc: denied { ioctl } for pid=5017 comm="syz.1.341" path="socket:[7567]" dev="sockfs" ino=7567 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.663889][ T5044] syzkaller1: entered promiscuous mode [ 40.669619][ T5044] syzkaller1: entered allmulticast mode [ 40.838595][ T29] audit: type=1326 audit(1762743320.569:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5059 comm="syz.5.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499542f6c9 code=0x7ffc0000 [ 40.895983][ T29] audit: type=1326 audit(1762743320.569:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5059 comm="syz.5.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f499542f6c9 code=0x7ffc0000 [ 40.919384][ T29] audit: type=1326 audit(1762743320.569:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5059 comm="syz.5.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499542f6c9 code=0x7ffc0000 [ 40.942994][ T29] audit: type=1326 audit(1762743320.609:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5059 comm="syz.5.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499542f6c9 code=0x7ffc0000 [ 41.032487][ T29] audit: type=1400 audit(1762743320.759:492): avc: denied { connect } for pid=5066 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 41.051452][ T29] audit: type=1326 audit(1762743320.759:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdba9cf6c9 code=0x7ffc0000 [ 41.074358][ T29] audit: type=1326 audit(1762743320.759:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbdba9cf6c9 code=0x7ffc0000 [ 41.097333][ T29] audit: type=1326 audit(1762743320.759:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdba9cf6c9 code=0x7ffc0000 [ 41.480375][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 41.504594][ T5131] netlink: 44 bytes leftover after parsing attributes in process `syz.0.374'. [ 41.513675][ T5128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.521291][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.530779][ T5128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.538299][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.686855][ T5163] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 41.693552][ T5163] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 41.701349][ T5163] vhci_hcd vhci_hcd.0: Device attached [ 41.741311][ T5164] vhci_hcd: connection closed [ 41.741488][ T564] vhci_hcd: stop threads [ 41.750661][ T564] vhci_hcd: release socket [ 41.755121][ T564] vhci_hcd: disconnect device [ 41.763940][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 41.919555][ T5199] loop3: detected capacity change from 0 to 764 [ 42.020277][ T5214] loop3: detected capacity change from 0 to 1024 [ 42.070489][ T5214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.196153][ T5230] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.402'. [ 42.210116][ T5214] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 42.226097][ T5230] netlink: zone id is out of range [ 42.231274][ T5230] netlink: zone id is out of range [ 42.236477][ T5230] netlink: zone id is out of range [ 42.241909][ T5214] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 42.254141][ T5214] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.254141][ T5214] [ 42.263940][ T5214] EXT4-fs (loop3): Total free blocks count 0 [ 42.265418][ T5230] netlink: zone id is out of range [ 42.269997][ T5214] EXT4-fs (loop3): Free/Dirty block details [ 42.280993][ T5214] EXT4-fs (loop3): free_blocks=68451041280 [ 42.286854][ T5214] EXT4-fs (loop3): dirty_blocks=80 [ 42.291999][ T5214] EXT4-fs (loop3): Block reservation details [ 42.298025][ T5214] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 42.303551][ T5230] netlink: set zone limit has 8 unknown bytes [ 42.348799][ T53] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 58 with error 28 [ 42.430592][ T5252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.406'. [ 42.474876][ T5256] random: crng reseeded on system resumption [ 42.509752][ T5262] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.588455][ T5281] loop5: detected capacity change from 0 to 512 [ 42.604512][ T5281] ======================================================= [ 42.604512][ T5281] WARNING: The mand mount option has been deprecated and [ 42.604512][ T5281] and is ignored by this kernel. Remove the mand [ 42.604512][ T5281] option from the mount to silence this warning. [ 42.604512][ T5281] ======================================================= [ 42.658778][ T5281] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.415: bad orphan inode 15 [ 42.659101][ T5262] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.679708][ T5281] ext4_test_bit(bit=14, block=5) = 0 [ 42.686137][ T5281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.764407][ T3755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.796559][ T5262] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.885073][ T5262] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.951401][ T5320] syz.4.425 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.999757][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.086854][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.111618][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.131754][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.162428][ T5356] netlink: 3 bytes leftover after parsing attributes in process `syz.5.433'. [ 43.178741][ T5356] 0ªX¹¦À: renamed from caif0 [ 43.186833][ T5356] 0ªX¹¦À: entered allmulticast mode [ 43.192232][ T5356] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 43.265954][ T5365] loop5: detected capacity change from 0 to 512 [ 43.276849][ T5365] EXT4-fs: Ignoring removed orlov option [ 43.285507][ T5365] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 43.300723][ T5365] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.436: corrupted in-inode xattr: e_value size too large [ 43.316837][ T5365] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.436: couldn't read orphan inode 15 (err -117) [ 43.329429][ T5365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.358672][ T3755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.520728][ T5397] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.444'. [ 43.536930][ T5397] netlink: zone id is out of range [ 43.542101][ T5397] netlink: zone id is out of range [ 43.558398][ T5397] netlink: set zone limit has 8 unknown bytes [ 43.605998][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 43.723472][ T5435] rdma_op ffff8881036d5980 conn xmit_rdma 0000000000000000 [ 43.853300][ T36] kernel read not supported for file /vcs (pid: 36 comm: kworker/1:1) [ 43.888627][ T5465] netlink: 20 bytes leftover after parsing attributes in process `syz.5.468'. [ 43.954711][ T5481] netlink: 57 bytes leftover after parsing attributes in process `syz.3.470'. [ 43.974085][ T5485] netlink: 'syz.1.471': attribute type 7 has an invalid length. [ 43.981944][ T5485] netlink: 'syz.1.471': attribute type 8 has an invalid length. [ 44.080418][ T5504] hsr_slave_0: left promiscuous mode [ 44.093905][ T5504] hsr_slave_1: left promiscuous mode [ 44.115781][ T5507] loop1: detected capacity change from 0 to 128 [ 44.122841][ T5507] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 44.152999][ T5507] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 44.160891][ T5507] FAT-fs (loop1): Filesystem has been set read-only [ 44.167701][ T5507] syz.1.483: attempt to access beyond end of device [ 44.167701][ T5507] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 44.183529][ T5507] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 44.191461][ T5507] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 44.200420][ T5507] syz.1.483: attempt to access beyond end of device [ 44.200420][ T5507] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.217112][ T5507] syz.1.483: attempt to access beyond end of device [ 44.217112][ T5507] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 44.639193][ T5576] netlink: 'syz.3.512': attribute type 1 has an invalid length. [ 45.126459][ T5637] loop3: detected capacity change from 0 to 1024 [ 45.136529][ T5637] EXT4-fs: Ignoring removed orlov option [ 45.164244][ T5637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.186999][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 45.187016][ T29] audit: type=1400 audit(1762743324.919:712): avc: denied { load_policy } for pid=5638 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 45.214665][ T5640] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 1216) [ 45.221740][ T29] audit: type=1400 audit(1762743324.949:713): avc: denied { setattr } for pid=5636 comm="syz.3.541" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.230471][ T5640] SELinux: failed to load policy [ 45.269385][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.297781][ T29] audit: type=1400 audit(1762743325.029:714): avc: denied { mount } for pid=5654 comm="syz.3.544" name="/" dev="hugetlbfs" ino=9202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 45.370160][ T5663] netlink: 'syz.5.548': attribute type 1 has an invalid length. [ 45.394127][ T5668] loop4: detected capacity change from 0 to 256 [ 45.407526][ T29] audit: type=1400 audit(1762743325.139:715): avc: denied { accept } for pid=5666 comm="syz.3.549" path="socket:[9264]" dev="sockfs" ino=9264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.442655][ T5668] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.466353][ T29] audit: type=1400 audit(1762743325.189:716): avc: denied { bind } for pid=5677 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.486035][ T29] audit: type=1400 audit(1762743325.199:717): avc: denied { write } for pid=5677 comm="syz.1.553" path="socket:[9277]" dev="sockfs" ino=9277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.510098][ T29] audit: type=1400 audit(1762743325.199:718): avc: denied { ioctl } for pid=5679 comm="syz.3.556" path="socket:[10277]" dev="sockfs" ino=10277 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 45.560660][ T29] audit: type=1326 audit(1762743325.289:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f3ff6c9 code=0x7ffc0000 [ 45.599351][ T29] audit: type=1326 audit(1762743325.319:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f5b9f3ff6c9 code=0x7ffc0000 [ 45.623068][ T29] audit: type=1326 audit(1762743325.319:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5688 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9f3ff6c9 code=0x7ffc0000 [ 45.755112][ T5712] loop1: detected capacity change from 0 to 1024 [ 45.767511][ T5712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.783129][ T5712] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 45.839092][ T5720] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 1216) [ 45.848316][ T5720] SELinux: failed to load policy [ 46.034022][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 46.046578][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 46.046578][ T52] [ 46.056298][ T52] EXT4-fs (loop1): Total free blocks count 0 [ 46.062322][ T52] EXT4-fs (loop1): Free/Dirty block details [ 46.068260][ T52] EXT4-fs (loop1): free_blocks=20480 [ 46.073547][ T52] EXT4-fs (loop1): dirty_blocks=10896 [ 46.078978][ T52] EXT4-fs (loop1): Block reservation details [ 46.084969][ T52] EXT4-fs (loop1): i_reserved_data_blocks=681 [ 46.136394][ T5736] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 46.140878][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 46.512057][ T5787] __nla_validate_parse: 14 callbacks suppressed [ 46.512075][ T5787] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 46.637630][ T5807] IPv6: Can't replace route, no match found [ 46.765548][ T5823] netlink: 'syz.3.615': attribute type 13 has an invalid length. [ 46.773340][ T5823] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.615'. [ 47.036415][ T5868] loop0: detected capacity change from 0 to 1024 [ 47.047013][ T5868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.061647][ T5868] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 47.251696][ T52] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 47.264313][ T52] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.264313][ T52] [ 47.274126][ T52] EXT4-fs (loop0): Total free blocks count 0 [ 47.280322][ T52] EXT4-fs (loop0): Free/Dirty block details [ 47.286305][ T52] EXT4-fs (loop0): free_blocks=20480 [ 47.291717][ T52] EXT4-fs (loop0): dirty_blocks=11136 [ 47.297141][ T52] EXT4-fs (loop0): Block reservation details [ 47.303140][ T52] EXT4-fs (loop0): i_reserved_data_blocks=696 [ 47.347798][ T52] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 48.144810][ T5974] loop3: detected capacity change from 0 to 512 [ 48.154628][ T5974] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.160193][ T5975] syzkaller1: entered promiscuous mode [ 48.168907][ T5975] syzkaller1: entered allmulticast mode [ 48.176966][ T5974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.189800][ T5974] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.212052][ T5982] loop5: detected capacity change from 0 to 1024 [ 48.228039][ T5982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.253386][ T3755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.281342][ T5989] netlink: 'syz.0.656': attribute type 21 has an invalid length. [ 48.311902][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.325521][ T5995] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 48.404200][ T6007] loop3: detected capacity change from 0 to 2048 [ 48.457016][ T6007] loop3: p1 p3 < > p4 < p5 > [ 48.461763][ T6007] loop3: partition table partially beyond EOD, truncated [ 48.475965][ T6007] loop3: p3 start 4284289 is beyond EOD, truncated [ 48.563252][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 48.615622][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 48.642677][ T3370] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.650719][ T3370] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.750764][ T6071] wireguard0: entered promiscuous mode [ 48.756322][ T6071] wireguard0: entered allmulticast mode [ 48.766215][ T6076] netlink: 'syz.4.683': attribute type 29 has an invalid length. [ 48.775236][ T6076] netlink: 'syz.4.683': attribute type 29 has an invalid length. [ 48.785239][ T6076] netlink: 500 bytes leftover after parsing attributes in process `syz.4.683'. [ 48.794424][ T6076] unsupported nla_type 58 [ 48.857365][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.686'. [ 48.877495][ T6090] loop4: detected capacity change from 0 to 128 [ 49.137381][ T6098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.137538][ T6098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.470814][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 49.527367][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 49.576854][ T6148] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 49.584723][ T6148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.710'. [ 49.599527][ T6148] dummy0: entered promiscuous mode [ 49.601991][ T6148] bridge0: port 3(dummy0) entered blocking state [ 49.611365][ T6148] bridge0: port 3(dummy0) entered disabled state [ 49.622228][ T6148] dummy0: entered allmulticast mode [ 49.622975][ T6148] bridge0: port 3(dummy0) entered blocking state [ 49.634165][ T6148] bridge0: port 3(dummy0) entered forwarding state [ 49.806327][ T6164] loop1: detected capacity change from 0 to 1764 [ 49.900598][ T6179] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 50.003701][ T6190] loop5: detected capacity change from 0 to 1024 [ 50.010850][ T6190] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.010882][ T6190] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.012694][ T6190] JBD2: no valid journal superblock found [ 50.012706][ T6190] EXT4-fs (loop5): Could not load journal inode [ 50.027932][ T6190] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 50.326434][ T6220] loop0: detected capacity change from 0 to 1764 [ 50.333857][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 50.333873][ T29] audit: type=1400 audit(1762743330.059:856): avc: denied { block_suspend } for pid=6221 comm="syz.1.749" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.434918][ T29] audit: type=1326 audit(1762743330.159:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499542f6c9 code=0x7ffc0000 [ 50.488348][ T29] audit: type=1326 audit(1762743330.189:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f499542f6c9 code=0x7ffc0000 [ 50.511942][ T29] audit: type=1326 audit(1762743330.189:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499542f6c9 code=0x7ffc0000 [ 50.535201][ T29] audit: type=1326 audit(1762743330.189:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.5.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499542f6c9 code=0x7ffc0000 [ 50.559035][ T6240] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.576567][ T29] audit: type=1326 audit(1762743330.309:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1787baf6c9 code=0x7ffc0000 [ 50.599884][ T29] audit: type=1326 audit(1762743330.309:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1787baf6c9 code=0x7ffc0000 [ 50.623227][ T29] audit: type=1326 audit(1762743330.309:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f1787baf6c9 code=0x7ffc0000 [ 50.647619][ T6246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6246 comm=syz.5.748 [ 50.689412][ T29] audit: type=1326 audit(1762743330.309:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1787baf6c9 code=0x7ffc0000 [ 50.712785][ T29] audit: type=1326 audit(1762743330.379:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1787baf6c9 code=0x7ffc0000 [ 50.886535][ T6285] syzkaller1: entered promiscuous mode [ 50.892129][ T6285] syzkaller1: entered allmulticast mode [ 51.023118][ T6306] netlink: 232 bytes leftover after parsing attributes in process `syz.5.770'. [ 51.434683][ T6351] loop5: detected capacity change from 0 to 1024 [ 51.445793][ T6351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.471058][ T3755] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.555265][ T6368] __nla_validate_parse: 1 callbacks suppressed [ 51.561591][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 51.570571][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.578169][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.586431][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.593919][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.766397][ T6385] vhci_hcd: invalid port number 96 [ 51.771558][ T6385] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 51.800439][ T6401] loop0: detected capacity change from 0 to 1024 [ 51.819175][ T6401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.823602][ T6401] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 51.823726][ T6401] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.823750][ T6401] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.823750][ T6401] [ 51.823780][ T6401] EXT4-fs (loop0): Total free blocks count 0 [ 51.823795][ T6401] EXT4-fs (loop0): Free/Dirty block details [ 51.823808][ T6401] EXT4-fs (loop0): free_blocks=68451041280 [ 51.823822][ T6401] EXT4-fs (loop0): dirty_blocks=80 [ 51.823888][ T6401] EXT4-fs (loop0): Block reservation details [ 51.823899][ T6401] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 51.835283][ T6401] syz.0.805 (6401) used greatest stack depth: 10064 bytes left [ 51.858954][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.810'. [ 51.946244][ T53] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 58 with error 28 [ 52.041060][ T6422] random: crng reseeded on system resumption [ 52.116925][ T6432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.812'. [ 52.305193][ T6449] loop5: detected capacity change from 0 to 1024 [ 52.336370][ T6449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.364681][ T6449] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 52.364956][ T6449] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 52.365056][ T6449] EXT4-fs (loop5): This should not happen!! Data will be lost [ 52.365056][ T6449] [ 52.365071][ T6449] EXT4-fs (loop5): Total free blocks count 0 [ 52.365086][ T6449] EXT4-fs (loop5): Free/Dirty block details [ 52.365100][ T6449] EXT4-fs (loop5): free_blocks=68451041280 [ 52.365115][ T6449] EXT4-fs (loop5): dirty_blocks=80 [ 52.365129][ T6449] EXT4-fs (loop5): Block reservation details [ 52.365141][ T6449] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 52.432109][ T53] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 58 with error 28 [ 52.672980][ T6464] syz.5.827 (6464) used greatest stack depth: 9360 bytes left [ 52.822855][ T6500] loop3: detected capacity change from 0 to 1024 [ 52.830570][ T6500] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.841615][ T6500] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.854901][ T6500] JBD2: no valid journal superblock found [ 52.860714][ T6500] EXT4-fs (loop3): Could not load journal inode [ 52.876982][ T6500] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 53.324951][ T6550] loop4: detected capacity change from 0 to 1024 [ 53.338165][ T6550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.357623][ T6550] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 53.373398][ T6550] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 53.385665][ T6550] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.385665][ T6550] [ 53.395283][ T6550] EXT4-fs (loop4): Total free blocks count 0 [ 53.401364][ T6550] EXT4-fs (loop4): Free/Dirty block details [ 53.407315][ T6550] EXT4-fs (loop4): free_blocks=68451041280 [ 53.413294][ T6550] EXT4-fs (loop4): dirty_blocks=80 [ 53.418443][ T6550] EXT4-fs (loop4): Block reservation details [ 53.424427][ T6550] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 53.444023][ T580] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 58 with error 28 [ 53.461092][ T6558] loop3: detected capacity change from 0 to 512 [ 53.469635][ T6558] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.871: bad orphan inode 15 [ 53.479835][ T6558] ext4_test_bit(bit=14, block=5) = 0 [ 53.485773][ T6558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.512852][ T6566] netlink: 63 bytes leftover after parsing attributes in process `syz.4.873'. [ 53.522842][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.595963][ T6580] veth0: entered promiscuous mode [ 53.601746][ T6579] veth0: left promiscuous mode [ 53.665183][ T6587] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.678114][ T6585] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.685516][ T6585] vhci_hcd: invalid port number 96 [ 53.690801][ T6585] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 53.736988][ T6587] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.779375][ T6587] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.852987][ T6601] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.886'. [ 53.867752][ T6587] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.911427][ T6608] loop1: detected capacity change from 0 to 512 [ 53.920983][ T6608] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 53.939391][ T580] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.960929][ T580] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.965839][ T6614] atomic_op ffff88811aa10d28 conn xmit_atomic 0000000000000000 [ 53.982929][ T580] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.998985][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.097752][ T6645] rdma_op ffff88811c79c580 conn xmit_rdma 0000000000000000 [ 54.683986][ T6667] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.748888][ T6667] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.808650][ T6667] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.859529][ T6667] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.894279][ T6678] loop0: detected capacity change from 0 to 512 [ 54.902161][ T6678] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.909561][ T6678] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.913: bg 0: block 248: padding at end of block bitmap is not set [ 54.924105][ T6678] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.913: Failed to acquire dquot type 1 [ 54.940738][ T6678] EXT4-fs (loop0): 1 truncate cleaned up [ 54.948159][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.964626][ T6678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.988560][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.002502][ T6678] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 55.011314][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.045855][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.065573][ T6678] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 55.073950][ T6678] ext4 filesystem being remounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.114724][ T6726] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.123140][ T6678] syz.0.913 (6678) used greatest stack depth: 9200 bytes left [ 55.132390][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.162307][ T6735] loop0: detected capacity change from 0 to 512 [ 55.170069][ T6735] EXT4-fs: Ignoring removed orlov option [ 55.176380][ T6735] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 55.186491][ T6735] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.920: corrupted in-inode xattr: e_value size too large [ 55.200944][ T6735] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.920: couldn't read orphan inode 15 (err -117) [ 55.214133][ T6735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.268643][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.397994][ T29] kauditd_printk_skb: 904 callbacks suppressed [ 55.398013][ T29] audit: type=1326 audit(1762743335.129:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44999df6c9 code=0x7ffc0000 [ 55.443243][ T29] audit: type=1326 audit(1762743335.159:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44999df6c9 code=0x7ffc0000 [ 55.466645][ T29] audit: type=1326 audit(1762743335.159:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44999df6c9 code=0x7ffc0000 [ 55.490071][ T29] audit: type=1326 audit(1762743335.159:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44999df6c9 code=0x7ffc0000 [ 55.513664][ T29] audit: type=1326 audit(1762743335.159:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44999df6c9 code=0x7ffc0000 [ 55.536996][ T29] audit: type=1326 audit(1762743335.159:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44999df6c9 code=0x7ffc0000 [ 55.560459][ T29] audit: type=1326 audit(1762743335.159:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44999df6c9 code=0x7ffc0000 [ 55.583955][ T29] audit: type=1326 audit(1762743335.159:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44999df6c9 code=0x7ffc0000 [ 55.607307][ T29] audit: type=1326 audit(1762743335.159:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f44999df6c9 code=0x7ffc0000 [ 55.630727][ T29] audit: type=1326 audit(1762743335.159:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44999df6c9 code=0x7ffc0000 [ 55.689890][ T6805] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.940'. [ 55.699638][ T6805] netlink: zone id is out of range [ 55.704775][ T6805] netlink: zone id is out of range [ 55.719215][ T6805] netlink: set zone limit has 8 unknown bytes [ 55.813833][ T6822] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.859485][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 55.879323][ T6822] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.891498][ T6831] hsr_slave_0: left promiscuous mode [ 55.897362][ T6831] hsr_slave_1: left promiscuous mode [ 55.928767][ T6822] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.024359][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'. [ 56.033320][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'. [ 56.042425][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'. [ 56.079611][ T6822] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.104639][ T6859] netlink: zone id is out of range [ 56.109822][ T6859] netlink: zone id is out of range [ 56.124713][ T6859] netlink: set zone limit has 8 unknown bytes [ 56.144664][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.162927][ T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.183403][ T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.192179][ T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.297300][ T6882] pim6reg1: entered promiscuous mode [ 56.302706][ T6882] pim6reg1: entered allmulticast mode [ 56.332689][ T6892] hsr_slave_0: left promiscuous mode [ 56.349677][ T6892] hsr_slave_1: left promiscuous mode [ 56.439272][ T6906] loop5: detected capacity change from 0 to 8192 [ 56.455894][ T6916] loop3: detected capacity change from 0 to 1024 [ 56.467000][ T6916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.483178][ T6923] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 56.518863][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.545264][ T1789] ================================================================== [ 56.553380][ T1789] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 56.561618][ T1789] [ 56.563941][ T1789] write to 0xffff88811ad8441c of 2 bytes by task 6924 on cpu 0: [ 56.571576][ T1789] fat16_ent_put+0x28/0x60 [ 56.576003][ T1789] fat_alloc_clusters+0x4d1/0xa80 [ 56.581023][ T1789] fat_get_block+0x258/0x5e0 [ 56.585611][ T1789] __block_write_begin_int+0x400/0xf90 [ 56.591159][ T1789] cont_write_begin+0x5fc/0x970 [ 56.596006][ T1789] fat_write_begin+0x4f/0xe0 [ 56.600597][ T1789] generic_perform_write+0x184/0x490 [ 56.605878][ T1789] __generic_file_write_iter+0x9e/0x120 [ 56.611413][ T1789] generic_file_write_iter+0x8d/0x2f0 [ 56.616778][ T1789] do_iter_readv_writev+0x4a1/0x540 [ 56.621977][ T1789] vfs_writev+0x2df/0x8b0 [ 56.626320][ T1789] __se_sys_pwritev2+0xfc/0x1c0 [ 56.631166][ T1789] __x64_sys_pwritev2+0x67/0x80 [ 56.636019][ T1789] x64_sys_call+0x2c59/0x3000 [ 56.640694][ T1789] do_syscall_64+0xd2/0x200 [ 56.645190][ T1789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.651073][ T1789] [ 56.653395][ T1789] read to 0xffff88811ad84400 of 512 bytes by task 1789 on cpu 1: [ 56.661099][ T1789] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 56.666994][ T1789] generic_perform_write+0x2c2/0x490 [ 56.672275][ T1789] shmem_file_write_iter+0xc5/0xf0 [ 56.677378][ T1789] lo_rw_aio+0x6a0/0x760 [ 56.681620][ T1789] loop_process_work+0x52d/0xa60 [ 56.686561][ T1789] loop_workfn+0x31/0x40 [ 56.690821][ T1789] process_scheduled_works+0x4ce/0x9d0 [ 56.696280][ T1789] worker_thread+0x582/0x770 [ 56.700860][ T1789] kthread+0x489/0x510 [ 56.704920][ T1789] ret_from_fork+0x122/0x1b0 [ 56.709544][ T1789] ret_from_fork_asm+0x1a/0x30 [ 56.714397][ T1789] [ 56.716714][ T1789] Reported by Kernel Concurrency Sanitizer on: [ 56.722863][ T1789] CPU: 1 UID: 0 PID: 1789 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.732752][ T1789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.742820][ T1789] Workqueue: loop5 loop_workfn [ 56.747588][ T1789] ==================================================================