last executing test programs: 5.5935894s ago: executing program 1 (id=907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) 5.568139383s ago: executing program 1 (id=909): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 5.530440286s ago: executing program 1 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4008054) 5.450484374s ago: executing program 1 (id=914): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1, 0x0, 0x8000000002}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 5.404910179s ago: executing program 1 (id=917): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 5.334638255s ago: executing program 1 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 918.36692ms ago: executing program 3 (id=1060): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 822.749679ms ago: executing program 4 (id=1065): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 783.833243ms ago: executing program 3 (id=1066): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 753.427716ms ago: executing program 4 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x24, &(0x7f00000031c0)={0x1, 0x0, 0x200}) 750.561496ms ago: executing program 0 (id=1068): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x130007b3) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 708.73587ms ago: executing program 4 (id=1069): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000940)={@broadcast, @random="46a84d70144a", @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\x00', "fd27a7", 0x21}}}}}, 0x0) 679.356304ms ago: executing program 0 (id=1071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 675.130874ms ago: executing program 3 (id=1072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 664.515435ms ago: executing program 4 (id=1073): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000002500)='./file7\x00', &(0x7f0000002540), 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=f']) 644.916376ms ago: executing program 2 (id=1074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a6558", 0x0, 0x1000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) 601.085361ms ago: executing program 0 (id=1075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 544.061387ms ago: executing program 3 (id=1076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 500.071961ms ago: executing program 4 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f88a86067", 0x14}, {&(0x7f0000000200)="37a8a6c4", 0x4}], 0x2) 452.666856ms ago: executing program 2 (id=1078): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 452.248596ms ago: executing program 3 (id=1079): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0xbc3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a000100"], 0x118}}, 0x0) 431.464198ms ago: executing program 0 (id=1080): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x7, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xbd}) 408.26865ms ago: executing program 2 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffeffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) 386.220692ms ago: executing program 4 (id=1082): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200001, &(0x7f00000001c0)={[{@data_err_ignore}, {@nobarrier}, {@stripe={'stripe', 0x3d, 0xb12}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7a}}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 334.248177ms ago: executing program 0 (id=1083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='io_uring_register\x00', r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6042, 0x10000, 0x8, 0x1, 0x8, 0x2020085, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x53b5, &(0x7f0000000280)={0x0, 0xbf6b, 0x1000, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000000000), 0x1) 282.939702ms ago: executing program 2 (id=1084): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x3c0a, &(0x7f0000000400)={0x0, 0xc890, 0x4002, 0x4}, 0x0, 0x0) 282.655452ms ago: executing program 2 (id=1085): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 276.094033ms ago: executing program 0 (id=1086): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c600"], 0x0) fadvise64(r0, 0x807f, 0x1000000, 0x4) 126.81µs ago: executing program 2 (id=1087): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) setns(r2, 0x10000000) 0s ago: executing program 3 (id=1088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 35.730079][ T29] audit: type=1400 audit(1761352223.244:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.753332][ T29] audit: type=1400 audit(1761352223.264:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.754345][ T3303] cgroup: Unknown subsys name 'net' [ 35.781146][ T29] audit: type=1400 audit(1761352223.294:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.895780][ T3303] cgroup: Unknown subsys name 'cpuset' [ 35.902162][ T3303] cgroup: Unknown subsys name 'rlimit' [ 36.013388][ T29] audit: type=1400 audit(1761352223.524:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.036730][ T29] audit: type=1400 audit(1761352223.524:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.057204][ T29] audit: type=1400 audit(1761352223.524:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.077705][ T29] audit: type=1400 audit(1761352223.524:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.094937][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 36.098185][ T29] audit: type=1400 audit(1761352223.554:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.131377][ T29] audit: type=1400 audit(1761352223.554:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.143197][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.154610][ T29] audit: type=1400 audit(1761352223.624:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.872393][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 37.958442][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.965629][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.972838][ T3313] bridge_slave_0: entered allmulticast mode [ 37.979764][ T3313] bridge_slave_0: entered promiscuous mode [ 37.998361][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.005562][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.012763][ T3313] bridge_slave_1: entered allmulticast mode [ 38.019178][ T3313] bridge_slave_1: entered promiscuous mode [ 38.051658][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.069649][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.144828][ T3313] team0: Port device team_slave_0 added [ 38.153626][ T3313] team0: Port device team_slave_1 added [ 38.204782][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.211806][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.237905][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.251448][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 38.265903][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 38.279529][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.286561][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.312469][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.389350][ T3313] hsr_slave_0: entered promiscuous mode [ 38.395552][ T3313] hsr_slave_1: entered promiscuous mode [ 38.427797][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 38.437059][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.444236][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.451472][ T3322] bridge_slave_0: entered allmulticast mode [ 38.458002][ T3322] bridge_slave_0: entered promiscuous mode [ 38.472429][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.479597][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.486832][ T3325] bridge_slave_0: entered allmulticast mode [ 38.493396][ T3325] bridge_slave_0: entered promiscuous mode [ 38.503521][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.510704][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.517952][ T3322] bridge_slave_1: entered allmulticast mode [ 38.524402][ T3322] bridge_slave_1: entered promiscuous mode [ 38.537965][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 38.546788][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.553890][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.561109][ T3325] bridge_slave_1: entered allmulticast mode [ 38.567593][ T3325] bridge_slave_1: entered promiscuous mode [ 38.607918][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.626680][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.644025][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.661711][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.695966][ T3325] team0: Port device team_slave_0 added [ 38.717251][ T3325] team0: Port device team_slave_1 added [ 38.723071][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.730195][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.737508][ T3324] bridge_slave_0: entered allmulticast mode [ 38.744030][ T3324] bridge_slave_0: entered promiscuous mode [ 38.753462][ T3322] team0: Port device team_slave_0 added [ 38.768722][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.775963][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.783107][ T3324] bridge_slave_1: entered allmulticast mode [ 38.789823][ T3324] bridge_slave_1: entered promiscuous mode [ 38.798896][ T3322] team0: Port device team_slave_1 added [ 38.832580][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.839747][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.846938][ T3326] bridge_slave_0: entered allmulticast mode [ 38.853583][ T3326] bridge_slave_0: entered promiscuous mode [ 38.860446][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.867453][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.893647][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.918030][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.925161][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.932301][ T3326] bridge_slave_1: entered allmulticast mode [ 38.938954][ T3326] bridge_slave_1: entered promiscuous mode [ 38.945584][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.952548][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.978511][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.997157][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.006806][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.013861][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.039873][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.053363][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.060359][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.086496][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.105846][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.140250][ T3324] team0: Port device team_slave_0 added [ 39.157299][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.167740][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.183415][ T3324] team0: Port device team_slave_1 added [ 39.191571][ T3325] hsr_slave_0: entered promiscuous mode [ 39.197826][ T3325] hsr_slave_1: entered promiscuous mode [ 39.203606][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 39.209359][ T3325] Cannot create hsr debugfs directory [ 39.240978][ T3322] hsr_slave_0: entered promiscuous mode [ 39.247083][ T3322] hsr_slave_1: entered promiscuous mode [ 39.253104][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 39.258900][ T3322] Cannot create hsr debugfs directory [ 39.269591][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.276616][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.302580][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.321635][ T3326] team0: Port device team_slave_0 added [ 39.328627][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.335628][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.361629][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.381432][ T3326] team0: Port device team_slave_1 added [ 39.398681][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.405693][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.431650][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.463168][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.470231][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.496157][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.537531][ T3324] hsr_slave_0: entered promiscuous mode [ 39.543597][ T3324] hsr_slave_1: entered promiscuous mode [ 39.549793][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 39.555651][ T3324] Cannot create hsr debugfs directory [ 39.561271][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.579928][ T3326] hsr_slave_0: entered promiscuous mode [ 39.586068][ T3326] hsr_slave_1: entered promiscuous mode [ 39.592109][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 39.597875][ T3326] Cannot create hsr debugfs directory [ 39.623546][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.651189][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.660183][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.760608][ T3325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.774081][ T3325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.796927][ T3325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.816604][ T3325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.829066][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.838121][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.847248][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.861520][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.899919][ T3326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.911513][ T3326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.927096][ T3326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.936385][ T3326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.974728][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.986996][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.997308][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.008428][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.017498][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.028379][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.053455][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.063283][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.077534][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.092550][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.099641][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.108453][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.115617][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.124076][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.131184][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.147159][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.154252][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.172385][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.198712][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.205844][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.220703][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.227960][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.266926][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.292584][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.306870][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.317410][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.336636][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.348013][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.369352][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.376478][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.386824][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.393979][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.406712][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.413777][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.445721][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.452859][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.472187][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.509980][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.542062][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.591527][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.613195][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.682161][ T3313] veth0_vlan: entered promiscuous mode [ 40.715165][ T3313] veth1_vlan: entered promiscuous mode [ 40.743271][ T3313] veth0_macvtap: entered promiscuous mode [ 40.771908][ T3325] veth0_vlan: entered promiscuous mode [ 40.782915][ T3325] veth1_vlan: entered promiscuous mode [ 40.792513][ T3313] veth1_macvtap: entered promiscuous mode [ 40.809736][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.830206][ T3325] veth0_macvtap: entered promiscuous mode [ 40.840168][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.854491][ T3324] veth0_vlan: entered promiscuous mode [ 40.861175][ T3326] veth0_vlan: entered promiscuous mode [ 40.873697][ T3326] veth1_vlan: entered promiscuous mode [ 40.881184][ T3325] veth1_macvtap: entered promiscuous mode [ 40.891632][ T3324] veth1_vlan: entered promiscuous mode [ 40.899115][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.917364][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.928624][ T3322] veth0_vlan: entered promiscuous mode [ 40.935674][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.950291][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.963471][ T3322] veth1_vlan: entered promiscuous mode [ 40.970717][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.970732][ T29] audit: type=1400 audit(1761352228.484:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.BUtMEX/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.983555][ T3322] veth0_macvtap: entered promiscuous mode [ 41.006913][ T29] audit: type=1400 audit(1761352228.484:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.023495][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.028940][ T29] audit: type=1400 audit(1761352228.484:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.BUtMEX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.038540][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.061543][ T29] audit: type=1400 audit(1761352228.484:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.090511][ T29] audit: type=1400 audit(1761352228.484:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.BUtMEX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.117059][ T29] audit: type=1400 audit(1761352228.484:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.BUtMEX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.144377][ T29] audit: type=1400 audit(1761352228.484:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.166982][ T29] audit: type=1400 audit(1761352228.524:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.189758][ T29] audit: type=1400 audit(1761352228.524:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.196437][ T3326] veth0_macvtap: entered promiscuous mode [ 41.220021][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.230179][ T556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.246718][ T3326] veth1_macvtap: entered promiscuous mode [ 41.257505][ T29] audit: type=1400 audit(1761352228.764:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.263308][ T3324] veth0_macvtap: entered promiscuous mode [ 41.289970][ T3322] veth1_macvtap: entered promiscuous mode [ 41.309272][ T556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.319906][ T3324] veth1_macvtap: entered promiscuous mode [ 41.331291][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.341713][ T556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.355134][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.367733][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.378058][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.385955][ T556] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.403032][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.405847][ T3489] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 41.418609][ T556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.431941][ T556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.441050][ T556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.451655][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.463707][ T556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.493820][ T556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.525927][ T295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.544006][ T295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.578520][ T295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.616057][ T295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.645014][ T295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.656221][ T3505] random: crng reseeded on system resumption [ 41.665990][ T295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.682972][ T295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.764423][ T3517] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 41.902955][ T3537] loop0: detected capacity change from 0 to 512 [ 41.927204][ T3537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.940125][ T3537] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.990582][ T3537] syz.0.22 (3537) used greatest stack depth: 10536 bytes left [ 42.011098][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.037726][ T3547] netlink: 3 bytes leftover after parsing attributes in process `syz.2.25'. [ 42.047655][ T3551] dummy0: entered promiscuous mode [ 42.053717][ T3551] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 42.062182][ T3551] hsr1: entered allmulticast mode [ 42.067833][ T3551] dummy0: entered allmulticast mode [ 42.073120][ T3551] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 42.081781][ T3547] 0X: renamed from caif0 [ 42.088808][ T3547] 0X: entered allmulticast mode [ 42.094135][ T3547] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 42.336316][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 42.374865][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 42.517918][ T3598] syz.1.49 uses obsolete (PF_INET,SOCK_PACKET) [ 42.542114][ T3591] syz.2.46 (3591) used greatest stack depth: 10160 bytes left [ 42.795748][ T3625] serio: Serial port ptm1 [ 43.091373][ T3662] loop2: detected capacity change from 0 to 512 [ 43.100695][ T3662] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 43.109659][ T3662] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.128031][ T3662] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.145144][ T3662] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 43.155311][ T3662] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.76: bg 0: block 40: padding at end of block bitmap is not set [ 43.192320][ T3662] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 43.241688][ T3662] EXT4-fs (loop2): 1 truncate cleaned up [ 43.248409][ T3662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.319571][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.576430][ T3701] loop0: detected capacity change from 0 to 1024 [ 43.583181][ T3701] EXT4-fs: Ignoring removed orlov option [ 43.602559][ T3701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.638278][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.665596][ T3707] Driver unsupported XDP return value 0 on prog (id 71) dev N/A, expect packet loss! [ 43.738780][ T3715] netlink: 19 bytes leftover after parsing attributes in process `syz.0.101'. [ 43.749286][ T3717] loop2: detected capacity change from 0 to 256 [ 43.884298][ T3735] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 43.892567][ T3735] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 44.137525][ T3761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.146448][ T3761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.240855][ T3771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.127'. [ 44.249837][ T3771] netlink: 108 bytes leftover after parsing attributes in process `syz.3.127'. [ 44.259420][ T3771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.127'. [ 44.269147][ T3771] netlink: 108 bytes leftover after parsing attributes in process `syz.3.127'. [ 44.278300][ T3771] netlink: 84 bytes leftover after parsing attributes in process `syz.3.127'. [ 44.378384][ T3779] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 44.403018][ T3781] loop0: detected capacity change from 0 to 512 [ 44.410671][ T3781] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.426326][ T3781] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 44.434405][ T3781] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.442095][ T3781] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.132: corrupted inode contents [ 44.454203][ T3781] EXT4-fs (loop0): Remounting filesystem read-only [ 44.460991][ T3781] EXT4-fs (loop0): 1 truncate cleaned up [ 44.466969][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.477591][ T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.488487][ T31] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 44.499985][ T3781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.527068][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.607842][ T3795] sd 0:0:1:0: device reset [ 44.644169][ T3797] loop3: detected capacity change from 0 to 128 [ 44.650818][ T3797] ======================================================= [ 44.650818][ T3797] WARNING: The mand mount option has been deprecated and [ 44.650818][ T3797] and is ignored by this kernel. Remove the mand [ 44.650818][ T3797] option from the mount to silence this warning. [ 44.650818][ T3797] ======================================================= [ 44.745766][ T3538] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.752015][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 44.969000][ T3838] rdma_op ffff88811a00ed80 conn xmit_rdma 0000000000000000 [ 44.979952][ T3848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 44.996645][ T3848] Zero length message leads to an empty skb [ 45.243536][ T3886] tipc: Started in network mode [ 45.248609][ T3886] tipc: Node identity ac14142f, cluster identity 4711 [ 45.271997][ T3886] tipc: New replicast peer: 0.0.0.0 [ 45.277629][ T3886] tipc: Enabled bearer , priority 10 [ 45.287013][ T3886] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 45.456095][ T3907] IPVS: Error connecting to the multicast addr [ 45.535767][ T3918] loop4: detected capacity change from 0 to 512 [ 45.555985][ T3918] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 45.575843][ T3918] EXT4-fs (loop4): invalid journal inode [ 45.581634][ T3918] EXT4-fs (loop4): can't get journal size [ 45.598358][ T3918] EXT4-fs (loop4): 1 truncate cleaned up [ 45.606075][ T3918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.651603][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.787794][ T3954] loop3: detected capacity change from 0 to 2048 [ 45.800472][ T3945] SELinux: failed to load policy [ 45.856499][ T3954] loop3: p1 < > p4 [ 45.864316][ T3954] loop3: p4 size 8388608 extends beyond EOD, truncated [ 45.876439][ T3954] EXT4-fs (loop3p1): unable to read superblock [ 45.921446][ T3970] team0 (unregistering): Port device team_slave_0 removed [ 45.945775][ T3970] team0 (unregistering): Port device team_slave_1 removed [ 45.994554][ T3977] random: crng reseeded on system resumption [ 46.114385][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 46.114403][ T29] audit: type=1400 audit(1761352233.624:321): avc: denied { read } for pid=3989 comm="syz.0.220" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 46.183261][ T3999] process 'syz.0.223' launched './file1' with NULL argv: empty string added [ 46.200917][ T29] audit: type=1400 audit(1761352233.624:322): avc: denied { open } for pid=3989 comm="syz.0.220" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 46.224510][ T29] audit: type=1400 audit(1761352233.634:323): avc: denied { ioctl } for pid=3989 comm="syz.0.220" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 46.249884][ T29] audit: type=1400 audit(1761352233.694:324): avc: denied { execute } for pid=3996 comm="syz.0.223" name="file1" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.277563][ T29] audit: type=1400 audit(1761352233.794:325): avc: denied { execute_no_trans } for pid=3996 comm="syz.0.223" path="/57/file1" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.319408][ T4004] batadv_slave_0: entered promiscuous mode [ 46.326209][ T4003] batadv_slave_0: left promiscuous mode [ 46.374262][ T4010] loop0: detected capacity change from 0 to 256 [ 46.387401][ T4012] tipc: Enabling of bearer rejected, media not registered [ 46.395386][ T10] tipc: Node number set to 2886997039 [ 46.427031][ T29] audit: type=1400 audit(1761352233.944:326): avc: denied { create } for pid=4015 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.446735][ T29] audit: type=1400 audit(1761352233.944:327): avc: denied { bind } for pid=4015 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.478217][ T29] audit: type=1326 audit(1761352233.984:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4017 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb15efc9 code=0x7ffc0000 [ 46.501878][ T29] audit: type=1326 audit(1761352233.984:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4017 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa1eb15efc9 code=0x7ffc0000 [ 46.525321][ T29] audit: type=1326 audit(1761352233.984:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4017 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb15efc9 code=0x7ffc0000 [ 46.819156][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.864072][ T4052] bridge_slave_0: left allmulticast mode [ 46.869889][ T4052] bridge_slave_0: left promiscuous mode [ 46.875707][ T4052] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.899311][ T4052] bridge_slave_1: left allmulticast mode [ 46.905803][ T4052] bridge_slave_1: left promiscuous mode [ 46.911579][ T4052] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.933175][ T4052] bond0: (slave bond_slave_0): Releasing backup interface [ 46.948655][ T4058] syz.1.251 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.959993][ T4052] bond0: (slave bond_slave_1): Releasing backup interface [ 46.982808][ T4052] team0: Port device team_slave_0 removed [ 46.994870][ T4052] team0: Port device team_slave_1 removed [ 47.001989][ T4052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.009437][ T4052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.020205][ T4052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.027737][ T4052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.054098][ T4052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.204437][ T4075] 9p: Unknown access argument : -22 [ 47.275553][ T4089] rdma_op ffff88811b888180 conn xmit_rdma 0000000000000000 [ 47.418310][ T4108] loop2: detected capacity change from 0 to 512 [ 47.450022][ T4111] loop2: detected capacity change from 0 to 512 [ 47.473563][ T4111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 47.486884][ T4111] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.576405][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.774194][ T4128] loop4: detected capacity change from 0 to 512 [ 47.801185][ T4128] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.821970][ T4128] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 47.836846][ T4128] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.850804][ T4128] EXT4-fs (loop4): 1 truncate cleaned up [ 47.856878][ T4128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.888719][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.006758][ T4144] netlink: 'syz.3.284': attribute type 3 has an invalid length. [ 48.014473][ T4144] __nla_validate_parse: 6 callbacks suppressed [ 48.014535][ T4144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.284'. [ 48.031287][ T4146] netlink: 80 bytes leftover after parsing attributes in process `syz.4.285'. [ 48.050523][ T4148] 9pnet_fd: Insufficient options for proto=fd [ 48.217330][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 48.429940][ T4207] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.447633][ T4209] nfs4: Bad value for 'source' [ 48.755569][ T4248] xt_policy: too many policy elements [ 48.824998][ T3538] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.883740][ T4256] netlink: 'syz.0.339': attribute type 3 has an invalid length. [ 49.292857][ T4297] syz.0.360 (4297) used greatest stack depth: 9360 bytes left [ 49.472228][ T4327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.373'. [ 49.481609][ T4327] IPVS: Error connecting to the multicast addr [ 49.528116][ T4333] loop0: detected capacity change from 0 to 512 [ 49.574708][ T4333] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.376: error while reading EA inode 32 err=-116 [ 49.595308][ T4333] EXT4-fs (loop0): Remounting filesystem read-only [ 49.603364][ T4342] netlink: 128 bytes leftover after parsing attributes in process `syz.3.380'. [ 49.612650][ T4342] netlink: 128 bytes leftover after parsing attributes in process `syz.3.380'. [ 49.645133][ T4333] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 49.663317][ T4333] EXT4-fs (loop0): 1 orphan inode deleted [ 49.688959][ T4333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.734127][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.807796][ T4359] loop0: detected capacity change from 0 to 256 [ 49.825540][ T4359] FAT-fs (loop0): bogus number of FAT sectors [ 49.831854][ T4359] FAT-fs (loop0): Can't find a valid FAT filesystem [ 50.356997][ T4423] syzkaller1: entered promiscuous mode [ 50.362531][ T4423] syzkaller1: entered allmulticast mode [ 50.438374][ T4434] SELinux: Context system_u:object is not valid (left unmapped). [ 50.752759][ T4468] loop2: detected capacity change from 0 to 1024 [ 50.760286][ T4468] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.772466][ T4468] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 50.780613][ T4468] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.788073][ T4468] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.438: Invalid inode table block 0 in block_group 0 [ 50.801664][ T4468] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 50.811310][ T4468] EXT4-fs error (device loop2): ext4_quota_write:7334: inode #3: comm syz.2.438: mark_inode_dirty error [ 50.822791][ T4468] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.438: Failed to acquire dquot type 0 [ 50.834726][ T4468] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.438: Invalid inode table block 0 in block_group 0 [ 50.848477][ T4468] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 50.859957][ T4468] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #15: comm syz.2.438: mark_inode_dirty error [ 50.871978][ T4468] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.438: Invalid inode table block 0 in block_group 0 [ 50.885146][ T4468] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 50.894924][ T4468] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 50.903940][ T4468] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.438: Invalid inode table block 0 in block_group 0 [ 50.916909][ T4468] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 50.926795][ T4468] EXT4-fs error (device loop2): ext4_truncate:4637: inode #15: comm syz.2.438: mark_inode_dirty error [ 50.938414][ T4468] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 50.947625][ T4468] EXT4-fs (loop2): 1 truncate cleaned up [ 50.953897][ T4468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.985225][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.111082][ T4486] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.129152][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 51.129168][ T29] audit: type=1326 audit(1761352238.644:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f03fefc9 code=0x7ffc0000 [ 51.173019][ T29] audit: type=1326 audit(1761352238.644:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f03fefc9 code=0x7ffc0000 [ 51.196359][ T29] audit: type=1326 audit(1761352238.674:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75f03fefc9 code=0x7ffc0000 [ 51.219709][ T29] audit: type=1326 audit(1761352238.674:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f03fefc9 code=0x7ffc0000 [ 51.243269][ T29] audit: type=1326 audit(1761352238.684:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75f03fefc9 code=0x7ffc0000 [ 51.266767][ T29] audit: type=1326 audit(1761352238.684:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f03fefc9 code=0x7ffc0000 [ 51.290220][ T29] audit: type=1326 audit(1761352238.684:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f03fefc9 code=0x7ffc0000 [ 51.313543][ T29] audit: type=1326 audit(1761352238.684:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f75f03fefc9 code=0x7ffc0000 [ 51.336911][ T29] audit: type=1326 audit(1761352238.684:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f03fefc9 code=0x7ffc0000 [ 51.360228][ T29] audit: type=1326 audit(1761352238.684:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4487 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f03fefc9 code=0x7ffc0000 [ 51.473604][ T4500] all (unregistering): Released all slaves [ 51.498704][ T4507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.456'. [ 51.605434][ T4518] netlink: 'syz.1.462': attribute type 13 has an invalid length. [ 51.631001][ T4518] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 51.670500][ T4518] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 51.691383][ T4518] gretap1: entered promiscuous mode [ 51.696670][ T4518] gretap1: entered allmulticast mode [ 51.703824][ T4528] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 51.712375][ T4528] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 51.721217][ T4528] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 51.771595][ T4536] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 51.916837][ T4555] sit1: entered promiscuous mode [ 52.091862][ T4576] loop3: detected capacity change from 0 to 512 [ 52.116761][ T4576] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 52.136167][ T4576] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.490: invalid indirect mapped block 2683928664 (level 1) [ 52.150540][ T4576] EXT4-fs (loop3): 1 truncate cleaned up [ 52.156795][ T4576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.174730][ T4586] sit1: entered promiscuous mode [ 52.196792][ T4576] 9pnet_fd: Insufficient options for proto=fd [ 52.236914][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.315839][ T4593] loop0: detected capacity change from 0 to 1024 [ 52.366836][ T4593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 52.451402][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 52.664829][ T4590] loop3: detected capacity change from 0 to 32768 [ 52.734233][ T4616] mmap: syz.0.504 (4616) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.101236][ T4632] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 53.204168][ T4636] loop3: detected capacity change from 0 to 1024 [ 53.236451][ T4636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.237598][ T4646] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.286310][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.548991][ T4675] bond1: entered promiscuous mode [ 53.554094][ T4675] bond1: entered allmulticast mode [ 53.559035][ T4678] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 53.575045][ T4675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.587456][ T4675] bond1 (unregistering): Released all slaves [ 54.445230][ T4753] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.547369][ T4759] __nla_validate_parse: 7 callbacks suppressed [ 54.547433][ T4759] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.540'. [ 54.595295][ T4759] netlink: zone id is out of range [ 54.600512][ T4759] netlink: zone id is out of range [ 54.620262][ T4761] loop2: detected capacity change from 0 to 512 [ 54.643496][ T4759] netlink: set zone limit has 8 unknown bytes [ 54.691399][ T4761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.705066][ T4761] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.754891][ T4761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.882742][ T4785] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 54.911467][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 54.916969][ T3423] kernel write not supported for file bpf-prog (pid: 3423 comm: kworker/0:3) [ 54.943988][ T4792] xt_hashlimit: max too large, truncated to 1048576 [ 54.955692][ T4792] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 54.978825][ T4797] x_tables: duplicate underflow at hook 1 [ 54.982818][ T4799] loop4: detected capacity change from 0 to 512 [ 55.040513][ T4799] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.057012][ T4799] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.557: EA inode hash validation failed [ 55.069991][ T4799] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.083584][ T4799] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.557: corrupted inode contents [ 55.096362][ T4799] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.557: mark_inode_dirty error [ 55.122873][ T4799] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.557: corrupted inode contents [ 55.136097][ T4799] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.557: mark_inode_dirty error [ 55.151405][ T4799] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.557: mark inode dirty (error -117) [ 55.166478][ T4799] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 55.180394][ T4799] EXT4-fs (loop4): 1 orphan inode deleted [ 55.186844][ T4799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.247683][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.286441][ T4833] loop3: detected capacity change from 0 to 2048 [ 55.293823][ T4831] capability: warning: `gtp' uses deprecated v2 capabilities in a way that may be insecure [ 55.308871][ T4839] loop4: detected capacity change from 0 to 1024 [ 55.318242][ T4839] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.326798][ T4833] loop3: p1 < > p4 [ 55.331508][ T4833] loop3: p4 size 8388608 extends beyond EOD, truncated [ 55.336418][ T4839] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.572: Failed to acquire dquot type 0 [ 55.364318][ T4839] EXT4-fs (loop4): 1 truncate cleaned up [ 55.372526][ T4839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.402267][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.650341][ T4862] wireguard0: entered promiscuous mode [ 55.656003][ T4862] wireguard0: entered allmulticast mode [ 55.720532][ T4869] netlink: 'syz.3.587': attribute type 2 has an invalid length. [ 55.826456][ T4890] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 55.847009][ T4890] team0: Port device dummy0 added [ 55.858539][ T4890] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 55.875868][ T4890] team0: Port device dummy0 removed [ 55.884130][ T4890] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.051798][ T4914] all (unregistering): Released all slaves [ 56.088988][ T4921] wireguard0: entered promiscuous mode [ 56.094617][ T4921] wireguard0: entered allmulticast mode [ 56.108191][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 56.133014][ T4928] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.609'. [ 56.159668][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 56.159685][ T29] audit: type=1326 audit(1761352243.674:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f66b2efc9 code=0x7ffc0000 [ 56.201924][ T29] audit: type=1326 audit(1761352243.704:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f66b2efc9 code=0x7ffc0000 [ 56.225290][ T29] audit: type=1326 audit(1761352243.704:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f66b2efc9 code=0x7ffc0000 [ 56.248737][ T29] audit: type=1326 audit(1761352243.704:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f66b2efc9 code=0x7ffc0000 [ 56.272044][ T29] audit: type=1326 audit(1761352243.704:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f66b2efc9 code=0x7ffc0000 [ 56.295367][ T29] audit: type=1326 audit(1761352243.704:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f66b2efc9 code=0x7ffc0000 [ 56.318622][ T29] audit: type=1400 audit(1761352243.704:846): avc: denied { read write } for pid=4931 comm="syz.0.611" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.342726][ T29] audit: type=1400 audit(1761352243.704:847): avc: denied { open } for pid=4931 comm="syz.0.611" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.367722][ T29] audit: type=1326 audit(1761352243.704:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f66b2efc9 code=0x7ffc0000 [ 56.391016][ T29] audit: type=1326 audit(1761352243.704:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f66b2efc9 code=0x7ffc0000 [ 56.428800][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.616'. [ 56.608487][ T4967] loop2: detected capacity change from 0 to 512 [ 56.719606][ T4967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.898447][ T4994] wireguard0: entered promiscuous mode [ 56.904265][ T4994] wireguard0: entered allmulticast mode [ 56.913962][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.923058][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 57.103167][ T5026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'. [ 57.121045][ T5029] netlink: 48 bytes leftover after parsing attributes in process `syz.4.652'. [ 57.183151][ T5040] wireguard0: entered promiscuous mode [ 57.188758][ T5040] wireguard0: entered allmulticast mode [ 57.201751][ T5045] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.661'. [ 57.240599][ T5049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=5049 comm=syz.3.663 [ 57.277636][ T5052] loop2: detected capacity change from 0 to 512 [ 57.286091][ T5052] EXT4-fs: Ignoring removed i_version option [ 57.292131][ T5052] EXT4-fs: Ignoring removed bh option [ 57.328010][ T5052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.353485][ T5057] bond1: entered promiscuous mode [ 57.358612][ T5057] bond1: entered allmulticast mode [ 57.364095][ T5057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.372862][ T5052] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.391217][ T5057] bond1 (unregistering): Released all slaves [ 57.447980][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.556284][ T5072] sctp: [Deprecated]: syz.2.672 (pid 5072) Use of int in max_burst socket option. [ 57.556284][ T5072] Use struct sctp_assoc_value instead [ 57.681540][ T5082] loop2: detected capacity change from 0 to 512 [ 57.709782][ T5086] random: crng reseeded on system resumption [ 57.716417][ T5082] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.755486][ T5082] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 9: comm syz.2.677: lblock 0 mapped to illegal pblock 9 (length 1) [ 57.780842][ T5091] xt_TPROXY: Can be used only with -p tcp or -p udp [ 57.790972][ T5090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.681'. [ 57.818970][ T5082] EXT4-fs (loop2): mount failed [ 58.046568][ T5129] capability: warning: `syz.0.709' uses 32-bit capabilities (legacy support in use) [ 58.049493][ T5133] loop4: detected capacity change from 0 to 512 [ 58.085187][ T5133] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.101680][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.109280][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.116742][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.124191][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.131656][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.139113][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 58.146594][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.154013][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.161735][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.165068][ T5138] 0X: renamed from caif0 [ 58.169550][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.184549][ T5138] 0X: entered allmulticast mode [ 58.185836][ T3395] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 58.189980][ T5138] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 58.228513][ T5133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 58.241661][ T5133] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.275850][ T5143] bridge0: port 1(macsec1) entered blocking state [ 58.282383][ T5143] bridge0: port 1(macsec1) entered disabled state [ 58.289150][ T5143] macsec1: entered allmulticast mode [ 58.295324][ T5143] macsec1: left allmulticast mode [ 58.295650][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 58.473230][ T5159] loop0: detected capacity change from 0 to 512 [ 58.486338][ T5159] EXT4-fs: Ignoring removed orlov option [ 58.495334][ T5159] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.713: inode has both inline data and extents flags [ 58.530724][ T5159] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.713: couldn't read orphan inode 15 (err -117) [ 58.550518][ T5159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.756183][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.806256][ T5211] loop3: detected capacity change from 0 to 512 [ 58.813514][ T5211] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.834642][ T5211] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 9: comm syz.3.738: lblock 0 mapped to illegal pblock 9 (length 1) [ 58.857310][ T5211] EXT4-fs (loop3): mount failed [ 59.164638][ T5256] wireguard0: entered promiscuous mode [ 59.170319][ T5256] wireguard0: entered allmulticast mode [ 59.180483][ T5261] xt_hashlimit: max too large, truncated to 1048576 [ 59.626749][ T5314] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 59.677683][ T5318] loop4: detected capacity change from 0 to 1024 [ 59.684677][ T5318] EXT4-fs: Ignoring removed nobh option [ 59.690338][ T5318] EXT4-fs: Ignoring removed bh option [ 59.716293][ T5318] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 59.725605][ T5318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.772710][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.891612][ T5342] __nla_validate_parse: 14 callbacks suppressed [ 59.891628][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 59.939308][ T5346] loop2: detected capacity change from 0 to 2048 [ 59.985507][ T5346] loop2: p1 < > p4 [ 59.992561][ T5346] loop2: p4 size 8388608 extends beyond EOD, truncated [ 60.143180][ T5367] bond1: option fail_over_mac: invalid value (15) [ 60.154648][ T5367] bond1 (unregistering): Released all slaves [ 60.177870][ T5376] loop3: detected capacity change from 0 to 512 [ 60.199323][ T5376] EXT4-fs: Ignoring removed bh option [ 60.208983][ T5376] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 60.232535][ T5376] EXT4-fs (loop3): 1 truncate cleaned up [ 60.245535][ T5376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.316789][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.334035][ T5399] syzkaller1: entered promiscuous mode [ 60.339630][ T5399] syzkaller1: entered allmulticast mode [ 60.652124][ T5440] SELinux: policydb version 586747130 does not match my version range 15-35 [ 60.667343][ T5446] loop2: detected capacity change from 0 to 512 [ 60.674881][ T5440] SELinux: failed to load policy [ 60.688566][ T5446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.737654][ T5446] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.804525][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.138204][ T5482] wireguard0: entered promiscuous mode [ 61.143919][ T5482] wireguard0: entered allmulticast mode [ 61.295650][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 61.295667][ T29] audit: type=1400 audit(1761352248.814:1228): avc: denied { create } for pid=5490 comm="syz.2.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.326076][ T29] audit: type=1400 audit(1761352248.834:1229): avc: denied { write } for pid=5490 comm="syz.2.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.357154][ T29] audit: type=1400 audit(1761352248.874:1230): avc: denied { ioctl } for pid=5495 comm="syz.4.863" path="socket:[10797]" dev="sockfs" ino=10797 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.382597][ T29] audit: type=1400 audit(1761352248.894:1231): avc: denied { read } for pid=5495 comm="syz.4.863" path="socket:[10797]" dev="sockfs" ino=10797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.442362][ T29] audit: type=1400 audit(1761352248.954:1232): avc: denied { getopt } for pid=5499 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.462018][ T29] audit: type=1400 audit(1761352248.954:1233): avc: denied { connect } for pid=5499 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.470458][ T4728] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.481662][ T29] audit: type=1400 audit(1761352248.954:1234): avc: denied { name_connect } for pid=5499 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 61.509152][ T29] audit: type=1400 audit(1761352248.974:1235): avc: denied { read } for pid=5498 comm="syz.4.865" dev="nsfs" ino=4026532545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.530307][ T29] audit: type=1400 audit(1761352248.974:1236): avc: denied { open } for pid=5498 comm="syz.4.865" path="net:[4026532545]" dev="nsfs" ino=4026532545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.553820][ T29] audit: type=1400 audit(1761352248.974:1237): avc: denied { create } for pid=5498 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.713413][ T5511] netlink: 'syz.1.871': attribute type 2 has an invalid length. [ 61.721148][ T5511] netlink: 160 bytes leftover after parsing attributes in process `syz.1.871'. [ 61.731532][ T5513] netlink: 'syz.0.872': attribute type 298 has an invalid length. [ 61.769370][ T5519] 9pnet_fd: Insufficient options for proto=fd [ 61.860137][ T5535] sit0: entered promiscuous mode [ 61.868600][ T5535] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 61.876319][ T5535] netlink: 1 bytes leftover after parsing attributes in process `syz.3.883'. [ 61.992651][ T5556] loop3: detected capacity change from 0 to 512 [ 62.020314][ T5556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.033465][ T5556] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.045132][ T5556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.143554][ T5580] loop3: detected capacity change from 0 to 512 [ 62.150910][ T5580] ext4: Bad value for 'journal_dev' [ 62.231802][ T5593] loop3: detected capacity change from 0 to 2048 [ 62.248303][ T5595] macvlan1: entered promiscuous mode [ 62.254559][ T5595] ipvlan0: entered promiscuous mode [ 62.260379][ T5595] ipvlan0: left promiscuous mode [ 62.265683][ T5595] macvlan1: left promiscuous mode [ 62.276345][ T5593] loop3: p1 p2 p3 [ 62.300552][ T5597] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 62.344742][ T5604] loop2: detected capacity change from 0 to 512 [ 62.371234][ T5604] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 62.380771][ T5604] System zones: 0-2, 18-18, 34-35 [ 62.392211][ T5604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.438249][ T5604] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.564300][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.630196][ T5621] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 1280 [ 62.667803][ T5624] macvlan1: entered promiscuous mode [ 62.692684][ T5624] ipvlan0: entered promiscuous mode [ 62.710836][ T5624] ipvlan0: left promiscuous mode [ 62.726638][ T5624] macvlan1: left promiscuous mode [ 62.755250][ T5631] syzkaller1: entered promiscuous mode [ 62.760850][ T5631] syzkaller1: entered allmulticast mode [ 62.912674][ T5645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.934'. [ 63.515089][ T5677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=63827 sclass=netlink_audit_socket pid=5677 comm=syz.3.950 [ 63.545027][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.173800][ T5730] syzkaller1: entered promiscuous mode [ 64.179811][ T5730] syzkaller1: entered allmulticast mode [ 64.200980][ T3396] hid_parser_main: 23 callbacks suppressed [ 64.201002][ T3396] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 64.243357][ T3396] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 64.275545][ T5738] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 64.283331][ T5738] netlink: 224 bytes leftover after parsing attributes in process `syz.3.979'. [ 64.380955][ T5740] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.389940][ T5743] loop9: detected capacity change from 0 to 7 [ 64.399355][ T5740] vhci_hcd: invalid port number 96 [ 64.404541][ T5740] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 64.405235][ T5743] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.439881][ T5743] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.447807][ T5743] loop9: unable to read partition table [ 64.465227][ T5743] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 64.465227][ T5743] ) failed (rc=-5) [ 64.485531][ T5745] netlink: 14 bytes leftover after parsing attributes in process `syz.2.982'. [ 64.605813][ T5758] random: crng reseeded on system resumption [ 65.119245][ T5800] loop0: detected capacity change from 0 to 256 [ 65.145034][ T5804] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 65.165583][ T5800] /dev/loop0: Can't open blockdev [ 65.207999][ T5807] loop2: detected capacity change from 0 to 1024 [ 65.239250][ T5807] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 65.257609][ T5807] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.282116][ T5807] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 65.293245][ T5807] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.300304][ T5807] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1013: Inode bitmap for bg 0 marked uninitialized [ 65.337081][ T5807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.380229][ T5807] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 65.409792][ T5823] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1019'. [ 65.430587][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.507851][ T5836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1023'. [ 65.524178][ T5833] vhci_hcd: invalid port number 254 [ 65.529543][ T5833] vhci_hcd: invalid port number 254 [ 65.555550][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 65.686828][ T5861] 9pnet_fd: Insufficient options for proto=fd [ 65.757729][ T5870] random: crng reseeded on system resumption [ 65.791322][ T5872] loop4: detected capacity change from 0 to 256 [ 65.798456][ T5872] /dev/loop4: Can't open blockdev [ 66.499732][ T5907] loop3: detected capacity change from 0 to 128 [ 66.517712][ T5907] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.547759][ T5907] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.592076][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 66.592093][ T29] audit: type=1400 audit(1761352254.104:1515): avc: denied { add_name } for pid=5906 comm="syz.3.1057" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.646036][ T5910] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.1057: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 66.694971][ T29] audit: type=1400 audit(1761352254.104:1516): avc: denied { create } for pid=5906 comm="syz.3.1057" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.736845][ T29] audit: type=1400 audit(1761352254.204:1517): avc: denied { write open } for pid=5906 comm="syz.3.1057" path="/243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.870327][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.036997][ T29] audit: type=1400 audit(1761352254.544:1518): avc: denied { lock } for pid=5930 comm="syz.4.1067" path="socket:[11948]" dev="sockfs" ino=11948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 67.112921][ T5941] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 67.130299][ T29] audit: type=1400 audit(1761352254.644:1519): avc: denied { rename } for pid=5942 comm="syz.4.1073" name="file0" dev="tmpfs" ino=1212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.227125][ T5943] 9pnet: Could not find request transport: f [ 67.330473][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'. [ 67.339580][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'. [ 67.363124][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'. [ 67.428475][ T5964] loop4: detected capacity change from 0 to 1024 [ 67.435127][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'. [ 67.444175][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'. [ 67.448514][ T5964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.483819][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'. [ 67.498499][ T5964] EXT4-fs (loop4): stripe (2834) is not aligned with cluster size (16), stripe is disabled [ 67.526666][ T5958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'. [ 67.530594][ T5974] loop0: detected capacity change from 0 to 2048 [ 67.545824][ T5964] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a841c018, mo2=0102] [ 67.577381][ T5964] System zones: 0-1, 3-12 [ 67.582244][ T5964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.608895][ T5974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.624200][ T5964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.635457][ T5964] EXT4-fs (loop4): stripe (2834) is not aligned with cluster size (16), stripe is disabled [ 67.660131][ T5974] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.675320][ T5964] EXT4-fs error (device loop4): __ext4_remount:6748: comm syz.4.1082: Abort forced by user [ 67.695376][ T5964] EXT4-fs (loop4): Remounting filesystem read-only [ 67.701958][ T5964] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 67.715998][ T29] audit: type=1400 audit(1761352255.224:1520): avc: denied { read write } for pid=5972 comm="syz.0.1086" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.738827][ T29] audit: type=1400 audit(1761352255.224:1521): avc: denied { open } for pid=5972 comm="syz.0.1086" path="/208/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.773370][ T5981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.805112][ T5981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.844905][ T5981] ================================================================== [ 67.853044][ T5981] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 67.860368][ T5981] [ 67.862725][ T5981] read-write to 0xffff888119807468 of 8 bytes by task 5974 on cpu 1: [ 67.870801][ T5981] __xa_set_mark+0xd2/0x1a0 [ 67.873628][ T29] audit: type=1400 audit(1761352255.284:1522): avc: denied { read } for pid=5972 comm="syz.0.1086" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.875331][ T5981] __folio_mark_dirty+0x384/0x4a0 [ 67.875364][ T5981] mark_buffer_dirty+0x11e/0x210 [ 67.875389][ T5981] folio_zero_new_buffers+0x28c/0x2e0 [ 67.875416][ T5981] block_write_end+0x200/0x210 [ 67.898465][ T29] audit: type=1400 audit(1761352255.314:1523): avc: denied { write } for pid=5985 comm="syz.3.1088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.903414][ T5981] ext4_da_write_end+0x1d3/0x800 [ 67.942413][ T5981] generic_perform_write+0x312/0x490 [ 67.947733][ T5981] ext4_buffered_write_iter+0x1ee/0x3c0 [ 67.953310][ T5981] ext4_file_write_iter+0x387/0xf60 [ 67.958539][ T5981] vfs_write+0x52a/0x960 [ 67.962821][ T5981] ksys_write+0xda/0x1a0 [ 67.967098][ T5981] __x64_sys_write+0x40/0x50 [ 67.971713][ T5981] x64_sys_call+0x2802/0x3000 [ 67.976411][ T5981] do_syscall_64+0xd2/0x200 [ 67.980935][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.986871][ T5981] [ 67.989210][ T5981] read to 0xffff888119807468 of 8 bytes by task 5981 on cpu 0: [ 67.996768][ T5981] xas_find_marked+0x218/0x620 [ 68.001563][ T5981] find_get_entry+0x5d/0x380 [ 68.006195][ T5981] filemap_get_folios_tag+0x13b/0x210 [ 68.011604][ T5981] mpage_prepare_extent_to_map+0x320/0xc00 [ 68.017436][ T5981] ext4_do_writepages+0xa05/0x2750 [ 68.022578][ T5981] ext4_writepages+0x176/0x300 [ 68.027370][ T5981] do_writepages+0x1c6/0x310 [ 68.031983][ T5981] __filemap_fdatawrite_range+0xfb/0x140 [ 68.037658][ T5981] generic_fadvise+0x312/0x430 [ 68.042449][ T5981] __x64_sys_fadvise64+0xcb/0x110 [ 68.047499][ T5981] x64_sys_call+0x29c5/0x3000 [ 68.052209][ T5981] do_syscall_64+0xd2/0x200 [ 68.056729][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.062652][ T5981] [ 68.064990][ T5981] value changed: 0x00ffffffffffffff -> 0x03ffffffffffffff [ 68.072198][ T5981] [ 68.074532][ T5981] Reported by Kernel Concurrency Sanitizer on: [ 68.080707][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.0.1086 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.090454][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.100523][ T5981] ================================================================== [ 68.116515][ T5981] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1086: bg 0: block 345: padding at end of block bitmap is not set [ 68.134237][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.145174][ T5981] EXT4-fs (loop0): Remounting filesystem read-only [ 68.789260][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.