last executing test programs: 929.822454ms ago: executing program 4 (id=526): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b051000e0ff030006004788aa96a13bb1000000000086dd400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 872.241119ms ago: executing program 4 (id=530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@fat=@tz_utc}, {@shortname_win95}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@errors_continue}, {}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$eJzs3T9rZFUYB+D3JpOZWQUnhZUIHtDCatlsazOL7IKYymUKtdDgZmHJBCWBgH/wupWtjYWFn0AQ/CA2fgPBVrBzhYUj9869eyebMJu7OBHd5ymSkzPnN+c9d4bkpsibD18+PLiT4u79L36N8biIjWlM40ER27ERra/ilOk3AQD8lz3IOf7IC31yRUSM11cWALBGF/v5P+iGP11KWQDAGt1+9723b+zu3nwnpXHcOvz6ZFb9Zl99vtIuuRfz2I9rMYmHEfWNwlbUdwvV8FbOuRykyna8dliezE5mEYcf/NyEb/weUed3YhLb9dSju406/9buzZ06nj55ocuXVR3PVfm7cW9a5a/HJF58FD6Vv55SGkVKS/uXMRvG668u8vX+V2MSv3wUH8c87tRFdPkvd1J6M3/75+fvV+VV+aI8mY3qdZ28eakvDAAAAAAAAAAAAAAAAAAAAAAA/2tXF7130ijq/j3VVNN/Z/Nh9cVWpNZyf5+y+hhNH+Dacn+gnHOZ4/u2v861lFJuFnb5Qbw0WG4sCAAAAAAAAAAAAAAAAAAAAM+u408/O9ibz/eP/pFB2w1gEBF/3Y542ueZLs28EqsXj5o99+bzjWZ4es1geSY22zVFxMoyqkM87dUYRK+zXzlTczP44ce+u4+fvGar2qvoV2HPQfvuOtgrzr+Go2hnxk0Z3w0jujXDuOBew8dn8mTxPLnXAYfnPjTpffbh8/WgXLEmilWFvfHb4so1M2depmF9Vc+NbzWDpfhj740LvZ9jvIif/V5R6NYBAAAAAAAAAAAAAAAAAABr1f317zkP3l8Z3cijtZUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJeq+///PQZlE94/Oh48YfEwjo7/5SMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwDPg7AAD//+RmV1Y=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 805.950166ms ago: executing program 4 (id=534): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 804.797366ms ago: executing program 1 (id=536): writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000010000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) syz_clone3(&(0x7f0000002100)={0xc120000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 804.356646ms ago: executing program 1 (id=538): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x1, 0x0, "90737f0000ffffffffffffffff1e277fffffeb"}) r1 = dup(r0) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, "9441a07033acaad7"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 756.24257ms ago: executing program 1 (id=540): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 742.108461ms ago: executing program 4 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='7', 0x1}], 0x1) 692.913536ms ago: executing program 1 (id=545): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860000, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x28, 0x16}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 692.298796ms ago: executing program 4 (id=547): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x6666, 0x8802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xf9d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x0, 0xfc}}}}}]}}]}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 634.921652ms ago: executing program 1 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 613.618083ms ago: executing program 1 (id=552): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x4b46, 0x0) 521.312612ms ago: executing program 3 (id=557): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000240)=""/203, 0xcb) tkill(r0, 0x7) 419.894112ms ago: executing program 3 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, &(0x7f0000000200)) 419.503251ms ago: executing program 3 (id=563): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="fe8f97d2", 0x4}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 418.668042ms ago: executing program 3 (id=564): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = memfd_secret(0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x2284, 0x0) 402.663773ms ago: executing program 3 (id=566): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x14, &(0x7f0000000240)={r1}, &(0x7f0000000080)=0x10) 347.783558ms ago: executing program 3 (id=569): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000180013010000e9000000000002000000000f00080000000008001e0007"], 0x24}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x40, 0x10, 0xaf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "bf9bc165"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xffff7fff, 0x6, 0x4773, 0x79}, {0x6, 0x24, 0x1a, 0x0, 0x31}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xfa, 0x51, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xf, 0x5, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x3, 0xe4, 0x6, 0x10, 0x7}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xab, 0x1a, 0x7}]}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 344.162028ms ago: executing program 2 (id=570): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 314.635901ms ago: executing program 2 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='ext4\x00') 266.452756ms ago: executing program 2 (id=574): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x3e, &(0x7f0000000800)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 201.684462ms ago: executing program 0 (id=575): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0xfdc1, 0x0) 201.575381ms ago: executing program 2 (id=576): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250400000005000a0001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x810) 201.250862ms ago: executing program 2 (id=577): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 157.422345ms ago: executing program 0 (id=578): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x18d4733407b0e4e1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) utime(&(0x7f0000000000)='./file1\x00', 0x0) 157.134205ms ago: executing program 2 (id=579): r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x10000, 0x0, 0x0) 100.586411ms ago: executing program 4 (id=580): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 99.931551ms ago: executing program 0 (id=590): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e24, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 80.736833ms ago: executing program 0 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @local}, 0xe9b3}, @in6={0xa, 0x4e22, 0x6, @private2, 0x3f}]}, &(0x7f0000000280)=0x10) 65.776484ms ago: executing program 0 (id=582): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) semget$private(0x0, 0x4000000009, 0xb) clock_gettime(0x7, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0xfff9, 0x1400}], 0x1, &(0x7f00000000c0)={r0, r1+60000000}) semop(0x0, &(0x7f0000000280)=[{0x3, 0x4c}], 0x1) 0s ago: executing program 0 (id=583): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.253' (ED25519) to the list of known hosts. [ 27.550216][ T29] audit: type=1400 audit(1727236517.351:82): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.551436][ T3254] cgroup: Unknown subsys name 'net' [ 27.572978][ T29] audit: type=1400 audit(1727236517.351:83): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.600331][ T29] audit: type=1400 audit(1727236517.381:84): avc: denied { unmount } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.774766][ T3254] cgroup: Unknown subsys name 'cpuset' [ 27.780862][ T3254] cgroup: Unknown subsys name 'rlimit' [ 27.909253][ T29] audit: type=1400 audit(1727236517.711:85): avc: denied { setattr } for pid=3254 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.932844][ T29] audit: type=1400 audit(1727236517.711:86): avc: denied { create } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.944904][ T3256] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.953312][ T29] audit: type=1400 audit(1727236517.711:87): avc: denied { write } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.982214][ T29] audit: type=1400 audit(1727236517.711:88): avc: denied { read } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.002579][ T29] audit: type=1400 audit(1727236517.721:89): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.005882][ T3254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.027418][ T29] audit: type=1400 audit(1727236517.721:90): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.059438][ T29] audit: type=1400 audit(1727236517.771:91): avc: denied { relabelto } for pid=3256 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.128210][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 29.136998][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 29.213394][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 29.226015][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 29.266660][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 29.311744][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.319045][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.326432][ T3263] bridge_slave_0: entered allmulticast mode [ 29.332813][ T3263] bridge_slave_0: entered promiscuous mode [ 29.341924][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.349057][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.356279][ T3263] bridge_slave_1: entered allmulticast mode [ 29.362646][ T3263] bridge_slave_1: entered promiscuous mode [ 29.394480][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.401532][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.408683][ T3268] bridge_slave_0: entered allmulticast mode [ 29.415007][ T3268] bridge_slave_0: entered promiscuous mode [ 29.421716][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.428891][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.436012][ T3268] bridge_slave_1: entered allmulticast mode [ 29.442409][ T3268] bridge_slave_1: entered promiscuous mode [ 29.462442][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.489194][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.503109][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.510199][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.517328][ T3264] bridge_slave_0: entered allmulticast mode [ 29.523688][ T3264] bridge_slave_0: entered promiscuous mode [ 29.532369][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.539469][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.546669][ T3264] bridge_slave_1: entered allmulticast mode [ 29.552932][ T3264] bridge_slave_1: entered promiscuous mode [ 29.560190][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.567302][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.575472][ T3269] bridge_slave_0: entered allmulticast mode [ 29.581986][ T3269] bridge_slave_0: entered promiscuous mode [ 29.593894][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.612195][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.619332][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.627507][ T3269] bridge_slave_1: entered allmulticast mode [ 29.633883][ T3269] bridge_slave_1: entered promiscuous mode [ 29.645552][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.673639][ T3263] team0: Port device team_slave_0 added [ 29.684961][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.692141][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.699312][ T3266] bridge_slave_0: entered allmulticast mode [ 29.705829][ T3266] bridge_slave_0: entered promiscuous mode [ 29.713514][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.728340][ T3263] team0: Port device team_slave_1 added [ 29.739416][ T3268] team0: Port device team_slave_0 added [ 29.746049][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.753098][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.760312][ T3266] bridge_slave_1: entered allmulticast mode [ 29.766730][ T3266] bridge_slave_1: entered promiscuous mode [ 29.773638][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.783836][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.803401][ T3268] team0: Port device team_slave_1 added [ 29.819208][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.829484][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.844004][ T3264] team0: Port device team_slave_0 added [ 29.849884][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.856920][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.882818][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.894311][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.901409][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.927320][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.949083][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.963596][ T3264] team0: Port device team_slave_1 added [ 29.989653][ T3269] team0: Port device team_slave_0 added [ 29.996343][ T3269] team0: Port device team_slave_1 added [ 30.012687][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.019652][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.045610][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.056570][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.063536][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.089466][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.105687][ T3266] team0: Port device team_slave_0 added [ 30.112648][ T3266] team0: Port device team_slave_1 added [ 30.122849][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.129829][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.155848][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.169413][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.176482][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.202428][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.228377][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.235399][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.261379][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.272587][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.279658][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.305561][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.328292][ T3263] hsr_slave_0: entered promiscuous mode [ 30.334312][ T3263] hsr_slave_1: entered promiscuous mode [ 30.340394][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.347368][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.373342][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.384583][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.391552][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.417467][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.457602][ T3269] hsr_slave_0: entered promiscuous mode [ 30.463847][ T3269] hsr_slave_1: entered promiscuous mode [ 30.469767][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.477369][ T3269] Cannot create hsr debugfs directory [ 30.495288][ T3266] hsr_slave_0: entered promiscuous mode [ 30.501558][ T3266] hsr_slave_1: entered promiscuous mode [ 30.507474][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.515064][ T3266] Cannot create hsr debugfs directory [ 30.532278][ T3264] hsr_slave_0: entered promiscuous mode [ 30.538426][ T3264] hsr_slave_1: entered promiscuous mode [ 30.545200][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.552744][ T3264] Cannot create hsr debugfs directory [ 30.574852][ T3268] hsr_slave_0: entered promiscuous mode [ 30.580946][ T3268] hsr_slave_1: entered promiscuous mode [ 30.586985][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.594580][ T3268] Cannot create hsr debugfs directory [ 30.779696][ T3263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.788613][ T3263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.797185][ T3263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.806674][ T3263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.828895][ T3266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.853830][ T3266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.862835][ T3266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.871892][ T3269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.880480][ T3269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.890735][ T3269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.899234][ T3266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.915344][ T3269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.943063][ T3264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.953086][ T3264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.968274][ T3264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.976994][ T3268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.986138][ T3268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.004110][ T3264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.012512][ T3268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.028300][ T3268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.049905][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.087678][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.109773][ T955] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.116827][ T955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.134897][ T955] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.141990][ T955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.161400][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.176614][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.200470][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.209399][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.229690][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.240125][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.249519][ T955] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.256569][ T955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.275628][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.282711][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.291467][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.298614][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.307853][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.315000][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.333214][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.340274][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.349275][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.356325][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.391346][ T3268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.401727][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.437920][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.476168][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.486833][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.518250][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.525417][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.535214][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.542278][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.576371][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.587293][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.600614][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.689372][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.716418][ T3263] veth0_vlan: entered promiscuous mode [ 31.753368][ T3263] veth1_vlan: entered promiscuous mode [ 31.781150][ T3269] veth0_vlan: entered promiscuous mode [ 31.791212][ T3266] veth0_vlan: entered promiscuous mode [ 31.807517][ T3266] veth1_vlan: entered promiscuous mode [ 31.819318][ T3269] veth1_vlan: entered promiscuous mode [ 31.842700][ T3269] veth0_macvtap: entered promiscuous mode [ 31.850622][ T3269] veth1_macvtap: entered promiscuous mode [ 31.859374][ T3263] veth0_macvtap: entered promiscuous mode [ 31.872209][ T3266] veth0_macvtap: entered promiscuous mode [ 31.884091][ T3263] veth1_macvtap: entered promiscuous mode [ 31.897862][ T3266] veth1_macvtap: entered promiscuous mode [ 31.920883][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.928385][ T3264] veth0_vlan: entered promiscuous mode [ 31.936374][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.946874][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.957526][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.968990][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.976671][ T3268] veth0_vlan: entered promiscuous mode [ 31.985246][ T3263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.994015][ T3263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.002731][ T3263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.011566][ T3263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.022815][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.033367][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.043231][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.053736][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.064562][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.071983][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.082474][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.093305][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.101824][ T3264] veth1_vlan: entered promiscuous mode [ 32.110213][ T3268] veth1_vlan: entered promiscuous mode [ 32.121983][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.132547][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.142398][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.152875][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.163534][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.176161][ T3264] veth0_macvtap: entered promiscuous mode [ 32.184868][ T3266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.193646][ T3266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.202511][ T3266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.211258][ T3266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.221879][ T3269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.230716][ T3269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.239452][ T3269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.248213][ T3269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.262121][ T3264] veth1_macvtap: entered promiscuous mode [ 32.278217][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.288801][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.298674][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.309116][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.318937][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.329397][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.340362][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.363288][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.373822][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.383628][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.394114][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.404096][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.414551][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.425582][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.450465][ T3266] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.469707][ T3264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478568][ T3264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.487508][ T3264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.496270][ T3264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.536265][ T3268] veth0_macvtap: entered promiscuous mode [ 32.555901][ T3268] veth1_macvtap: entered promiscuous mode [ 32.562924][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 32.562939][ T29] audit: type=1400 audit(1727236522.361:126): avc: denied { execute } for pid=3403 comm="syz.0.1" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.566313][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.595501][ T29] audit: type=1326 audit(1727236522.391:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29d18def9 code=0x7ffc0000 [ 32.600082][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.632651][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.643096][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.643296][ T3407] process 'syz.0.1' launched '/dev/fd/5' with NULL argv: empty string added [ 32.653061][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.672321][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.682156][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.692700][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.705682][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.715193][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.725741][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.735593][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.746171][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.756109][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.760676][ T29] audit: type=1326 audit(1727236522.441:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc29d18def9 code=0x7ffc0000 [ 32.766553][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.766564][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.766577][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.772329][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.789361][ T29] audit: type=1326 audit(1727236522.491:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29d18def9 code=0x7ffc0000 [ 32.789427][ T29] audit: type=1400 audit(1727236522.491:130): avc: denied { create } for pid=3408 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.812854][ T3268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.819474][ T29] audit: type=1400 audit(1727236522.491:131): avc: denied { write } for pid=3408 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.819501][ T29] audit: type=1400 audit(1727236522.491:132): avc: denied { create } for pid=3408 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.826703][ T3268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.849443][ T29] audit: type=1400 audit(1727236522.491:133): avc: denied { write } for pid=3408 comm="syz.2.3" lport=262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.870249][ T3268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.878841][ T29] audit: type=1326 audit(1727236522.501:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc29d18def9 code=0x7ffc0000 [ 32.899003][ T3268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.918160][ T29] audit: type=1326 audit(1727236522.501:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3404 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29d18def9 code=0x7ffc0000 [ 32.995830][ T3414] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 33.044325][ T3415] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 33.145550][ T3432] syz.2.15[3432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.145687][ T3432] syz.2.15[3432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.181749][ T3432] syz.2.15[3432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.238857][ T3442] Invalid ELF header magic: != ELF [ 33.385333][ T3459] loop3: detected capacity change from 0 to 128 [ 33.403935][ T3459] ======================================================= [ 33.403935][ T3459] WARNING: The mand mount option has been deprecated and [ 33.403935][ T3459] and is ignored by this kernel. Remove the mand [ 33.403935][ T3459] option from the mount to silence this warning. [ 33.403935][ T3459] ======================================================= [ 33.442857][ T3464] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 33.472556][ T3459] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.507014][ T3470] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 33.517253][ T3459] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.559895][ T3470] SELinux: failed to load policy [ 33.596206][ T3481] netlink: 'syz.2.36': attribute type 4 has an invalid length. [ 33.611182][ T3264] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.702062][ T3495] loop4: detected capacity change from 0 to 1024 [ 33.750497][ T3495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.785994][ T3514] loop1: detected capacity change from 0 to 2048 [ 33.796199][ T3495] EXT4-fs error (device loop4): ext4_get_inode_usage:883: inode #2: comm syz.4.40: corrupted in-inode xattr: bad e_name length [ 33.811515][ T3514] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.817755][ T3518] syz.2.47[3518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.818030][ T3518] syz.2.47[3518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.829801][ T3518] syz.2.47[3518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.845925][ T3268] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2792: inode #2: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 33.873207][ T3268] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 33.891602][ T3514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.892351][ T3268] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 33.922090][ T3522] SELinux: policydb version -795592283 does not match my version range 15-33 [ 33.933218][ T3268] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 33.933681][ T3522] SELinux: failed to load policy [ 34.033265][ T3514] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.45: bg 0: block 234: padding at end of block bitmap is not set [ 34.051198][ T3514] EXT4-fs (loop1): Remounting filesystem read-only [ 34.096107][ T3514] syz.1.45 (3514) used greatest stack depth: 9832 bytes left [ 34.105310][ T3537] Unsupported ieee802154 address type: 0 [ 34.133533][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.142807][ T3540] loop2: detected capacity change from 0 to 512 [ 34.166113][ T3540] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.179290][ T3540] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.199498][ T3540] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 34.217100][ T3540] EXT4-fs (loop2): 1 truncate cleaned up [ 34.223555][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.267255][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.417560][ T3569] mmap: syz.2.71 (3569) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.422431][ T3571] loop1: detected capacity change from 0 to 256 [ 34.531035][ T3586] loop2: detected capacity change from 0 to 512 [ 34.540751][ T3584] loop1: detected capacity change from 0 to 512 [ 34.546592][ T3586] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.78: corrupted in-inode xattr: e_value size too large [ 34.562883][ T3586] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.78: couldn't read orphan inode 15 (err -117) [ 34.576057][ T3586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.589546][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.590463][ T3586] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.78: Directory hole found for htree leaf block 0 [ 34.615643][ T3584] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.637402][ T3269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.660405][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.665296][ T3594] loop3: detected capacity change from 0 to 128 [ 34.733759][ T3602] netlink: 'syz.1.85': attribute type 34 has an invalid length. [ 34.742581][ T3604] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 34.767222][ T3606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 34.991436][ T3622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 35.105338][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.115738][ T3642] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 35.115738][ T3642] program syz.0.102 not setting count and/or reply_len properly [ 35.144923][ T1820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.263486][ T3658] sctp: [Deprecated]: syz.0.106 (pid 3658) Use of int in max_burst socket option deprecated. [ 35.263486][ T3658] Use struct sctp_assoc_value instead [ 35.294891][ T3663] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 35.303897][ T3663] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 35.407213][ T1820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.446412][ T3688] loop0: detected capacity change from 0 to 1024 [ 35.456285][ T3688] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.474809][ T3688] JBD2: no valid journal superblock found [ 35.480541][ T3688] EXT4-fs (loop0): Could not load journal inode [ 35.491644][ T1820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.505603][ T3656] chnl_net:caif_netlink_parms(): no params data found [ 35.545612][ T1820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.579316][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.586493][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.593568][ T3656] bridge_slave_0: entered allmulticast mode [ 35.600447][ T3656] bridge_slave_0: entered promiscuous mode [ 35.608063][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.615281][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.623648][ T3656] bridge_slave_1: entered allmulticast mode [ 35.630202][ T3656] bridge_slave_1: entered promiscuous mode [ 35.668196][ T3656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.684664][ T3656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.693979][ T1820] bridge_slave_1: left allmulticast mode [ 35.699693][ T1820] bridge_slave_1: left promiscuous mode [ 35.705047][ T3712] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.705538][ T1820] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.724880][ T1820] bridge_slave_0: left allmulticast mode [ 35.730619][ T1820] bridge_slave_0: left promiscuous mode [ 35.736347][ T1820] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.757390][ T3716] syz.0.128[3716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.757498][ T3716] syz.0.128[3716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.769658][ T3716] syz.0.128[3716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.836501][ T1820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.858089][ T1820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.868490][ T1820] bond0 (unregistering): Released all slaves [ 35.906352][ T3656] team0: Port device team_slave_0 added [ 35.912782][ T3656] team0: Port device team_slave_1 added [ 35.929278][ T1820] hsr_slave_0: left promiscuous mode [ 35.935177][ T1820] hsr_slave_1: left promiscuous mode [ 35.941090][ T1820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.948603][ T1820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.956212][ T1820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.963641][ T1820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.972810][ T1820] veth1_macvtap: left promiscuous mode [ 35.978418][ T1820] veth0_macvtap: left promiscuous mode [ 35.983949][ T1820] veth1_vlan: left promiscuous mode [ 35.989223][ T1820] veth0_vlan: left promiscuous mode [ 35.994710][ T3730] syz.0.134 uses obsolete (PF_INET,SOCK_PACKET) [ 36.096945][ T1820] team0 (unregistering): Port device team_slave_1 removed [ 36.108477][ T1820] team0 (unregistering): Port device team_slave_0 removed [ 36.161810][ T3656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.168840][ T3656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.194855][ T3656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.212093][ T3656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.219164][ T3656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.245166][ T3656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.248234][ T3735] Process accounting resumed [ 36.283248][ T3656] hsr_slave_0: entered promiscuous mode [ 36.289831][ T3656] hsr_slave_1: entered promiscuous mode [ 36.295953][ T3656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.303643][ T3656] Cannot create hsr debugfs directory [ 36.373285][ T3332] kernel write not supported for file /snd/seq (pid: 3332 comm: kworker/1:2) [ 36.395840][ T3677] chnl_net:caif_netlink_parms(): no params data found [ 36.418181][ T3750] syz_tun: entered promiscuous mode [ 36.535979][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.543047][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.550394][ T3677] bridge_slave_0: entered allmulticast mode [ 36.557790][ T3677] bridge_slave_0: entered promiscuous mode [ 36.565017][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.572101][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.579375][ T3677] bridge_slave_1: entered allmulticast mode [ 36.585834][ T3677] bridge_slave_1: entered promiscuous mode [ 36.602163][ T3769] loop1: detected capacity change from 0 to 1024 [ 36.604004][ T3772] loop3: detected capacity change from 0 to 512 [ 36.633352][ T3677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.647963][ T3772] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.150: corrupted in-inode xattr: invalid ea_ino [ 36.668732][ T3677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.669052][ T3772] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.150: couldn't read orphan inode 15 (err -117) [ 36.691420][ T3772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.713335][ T3677] team0: Port device team_slave_0 added [ 36.720010][ T3677] team0: Port device team_slave_1 added [ 36.727896][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.743250][ T3677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.750283][ T3677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.776238][ T3677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.796797][ T1820] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.809022][ T3677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.816058][ T3677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.842070][ T3677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.893021][ T3677] hsr_slave_0: entered promiscuous mode [ 36.900158][ T3677] hsr_slave_1: entered promiscuous mode [ 36.906488][ T3677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.914173][ T3677] Cannot create hsr debugfs directory [ 36.926099][ T1820] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.959466][ T3656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.979764][ T1820] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.996951][ T3656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.007835][ T3656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.031638][ T1820] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.047589][ T3656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.150012][ T1820] bridge_slave_1: left allmulticast mode [ 37.155917][ T1820] bridge_slave_1: left promiscuous mode [ 37.161672][ T1820] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.169541][ T3827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 37.180563][ T1820] bridge_slave_0: left allmulticast mode [ 37.186275][ T1820] bridge_slave_0: left promiscuous mode [ 37.192022][ T1820] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.301278][ T1820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.313350][ T1820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.336404][ T1820] bond0 (unregistering): Released all slaves [ 37.356126][ T3656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.387116][ T1820] hsr_slave_0: left promiscuous mode [ 37.396082][ T1820] hsr_slave_1: left promiscuous mode [ 37.405121][ T1820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.412532][ T1820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.423805][ T1820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.431191][ T1820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.440217][ T1820] veth1_macvtap: left promiscuous mode [ 37.446112][ T1820] veth0_macvtap: left promiscuous mode [ 37.451692][ T1820] veth1_vlan: left promiscuous mode [ 37.456951][ T1820] veth0_vlan: left promiscuous mode [ 37.538970][ T1820] team0 (unregistering): Port device team_slave_1 removed [ 37.549053][ T1820] team0 (unregistering): Port device team_slave_0 removed [ 37.591248][ T3656] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.612751][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.619895][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.630208][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 37.630222][ T29] audit: type=1400 audit(1727236527.431:452): avc: denied { create } for pid=3848 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.630524][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.662660][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.671697][ T29] audit: type=1400 audit(1727236527.481:453): avc: denied { write } for pid=3848 comm="syz.3.186" path="socket:[4833]" dev="sockfs" ino=4833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.751533][ T3656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.768158][ T29] audit: type=1400 audit(1727236527.571:454): avc: denied { setopt } for pid=3848 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.849621][ T3677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.859317][ T3677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.868143][ T3677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.877400][ T3677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.911781][ T3656] veth0_vlan: entered promiscuous mode [ 37.921528][ T3656] veth1_vlan: entered promiscuous mode [ 37.941484][ T3677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.957358][ T3656] veth0_macvtap: entered promiscuous mode [ 37.979258][ T3677] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.987548][ T3656] veth1_macvtap: entered promiscuous mode [ 38.000157][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.010690][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.020537][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.030965][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.040784][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.051240][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.061932][ T3656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.070480][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.077677][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.089899][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.096963][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.106884][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.117417][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.127365][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.137788][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.147679][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.158194][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.164260][ T3840] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 38.169915][ T3656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.186424][ T3840] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 38.195932][ T3656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.204838][ T3656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.213528][ T3656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.222299][ T3656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.242406][ T29] audit: type=1400 audit(1727236528.041:455): avc: denied { connect } for pid=3872 comm="syz.0.188" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.280292][ T29] audit: type=1400 audit(1727236528.081:456): avc: denied { mounton } for pid=3656 comm="syz-executor" path="/root/syzkaller.FZS9zd/syz-tmp" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.305802][ T29] audit: type=1400 audit(1727236528.081:457): avc: denied { mount } for pid=3656 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.328175][ T29] audit: type=1400 audit(1727236528.081:458): avc: denied { mount } for pid=3656 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.350151][ T29] audit: type=1400 audit(1727236528.111:459): avc: denied { mounton } for pid=3656 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.380984][ T3677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.386384][ T29] audit: type=1400 audit(1727236528.181:460): avc: denied { create } for pid=3882 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 38.410110][ T29] audit: type=1400 audit(1727236528.211:461): avc: denied { bind } for pid=3882 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 38.460553][ T3677] veth0_vlan: entered promiscuous mode [ 38.468872][ T3677] veth1_vlan: entered promiscuous mode [ 38.477793][ T3891] hub 2-0:1.0: USB hub found [ 38.489890][ T3891] hub 2-0:1.0: 8 ports detected [ 38.504819][ T3677] veth0_macvtap: entered promiscuous mode [ 38.523164][ T3677] veth1_macvtap: entered promiscuous mode [ 38.539346][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.546700][ T3899] loop3: detected capacity change from 0 to 512 [ 38.549885][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.566231][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.576877][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.586707][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.597243][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.607161][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.617632][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.617899][ T3899] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.194: invalid block [ 38.630348][ T3677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.648633][ T3905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 38.659798][ T3899] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.194: invalid indirect mapped block 4294967295 (level 1) [ 38.675188][ T3899] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.194: invalid indirect mapped block 4294967295 (level 1) [ 38.691558][ T3899] EXT4-fs (loop3): 2 truncates cleaned up [ 38.693685][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.704221][ T3899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.707744][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.730072][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.740695][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.750710][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.752316][ T3899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.761155][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.761173][ T3677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.789937][ T3677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.799898][ T3899] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.194: Abort forced by user [ 38.802271][ T3677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.817443][ T3899] EXT4-fs (loop3): Remounting filesystem read-only [ 38.828161][ T3677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.836957][ T3677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.845729][ T3677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.854515][ T3677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.874867][ T3899] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 38.902621][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.920211][ T3918] loop1: detected capacity change from 0 to 128 [ 38.927857][ T3918] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 38.946722][ T3918] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.973665][ T3927] netlink: 'syz.2.205': attribute type 29 has an invalid length. [ 38.984748][ T3927] netlink: 'syz.2.205': attribute type 29 has an invalid length. [ 38.992223][ T3918] ext2 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.035332][ T3927] netlink: 500 bytes leftover after parsing attributes in process `syz.2.205'. [ 39.076176][ T3932] loop2: detected capacity change from 0 to 512 [ 39.086374][ T3918] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 33554432 > max in inode 12 [ 39.116992][ T3936] loop0: detected capacity change from 0 to 512 [ 39.127082][ T3932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.145626][ T3263] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.156599][ T3932] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.178433][ T3936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.192010][ T3936] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.217161][ T3947] loop1: detected capacity change from 0 to 128 [ 39.231511][ T3947] FAT-fs (loop1): invalid media value (0x00) [ 39.237651][ T3947] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 39.246821][ T3947] FAT-fs (loop1): Can't find a valid FAT filesystem [ 39.256325][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.291534][ T3677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.302373][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.324472][ T3955] netlink: 14 bytes leftover after parsing attributes in process `syz.1.217'. [ 39.331497][ T3957] loop0: detected capacity change from 0 to 512 [ 39.345381][ T3957] EXT4-fs error (device loop0): __ext4_fill_super:5458: inode #2: comm syz.0.215: iget: special inode unallocated [ 39.358180][ T3957] EXT4-fs (loop0): get root inode failed [ 39.363888][ T3957] EXT4-fs (loop0): mount failed [ 39.390351][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.457407][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.517477][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.552218][ T3989] loop0: detected capacity change from 0 to 512 [ 39.559191][ T3989] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.567157][ T3989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.590492][ T3989] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.229: corrupted in-inode xattr: e_value out of bounds [ 39.608138][ T3989] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.229: couldn't read orphan inode 15 (err -117) [ 39.629932][ T3989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.655221][ T28] bridge_slave_1: left allmulticast mode [ 39.655250][ T28] bridge_slave_1: left promiscuous mode [ 39.655345][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.677522][ T28] bridge_slave_0: left allmulticast mode [ 39.677552][ T28] bridge_slave_0: left promiscuous mode [ 39.677659][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.717993][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.789731][ T4008] syz.2.235[4008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.789860][ T4008] syz.2.235[4008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.808559][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.813077][ T4008] syz.2.235[4008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.834205][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.859792][ T28] bond0 (unregistering): Released all slaves [ 39.913842][ T4002] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 39.991828][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.999070][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.030453][ T4013] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 40.061466][ T3950] chnl_net:caif_netlink_parms(): no params data found [ 40.095646][ T4029] geneve1: entered promiscuous mode [ 40.105234][ T28] hsr_slave_0: left promiscuous mode [ 40.117437][ T28] hsr_slave_1: left promiscuous mode [ 40.124191][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.131818][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.141647][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.149318][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.169191][ T28] veth1_macvtap: left promiscuous mode [ 40.175003][ T28] veth0_macvtap: left promiscuous mode [ 40.180547][ T28] veth1_vlan: left promiscuous mode [ 40.185816][ T28] veth0_vlan: left promiscuous mode [ 40.192767][ T4047] loop1: detected capacity change from 0 to 256 [ 40.308736][ T28] team0 (unregistering): Port device team_slave_1 removed [ 40.319820][ T28] team0 (unregistering): Port device team_slave_0 removed [ 40.374451][ T4028] geneve1: left promiscuous mode [ 40.381571][ T4045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.250'. [ 40.425200][ T4065] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 40.479128][ T4077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.498678][ T3950] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.505884][ T3950] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.521425][ T3950] bridge_slave_0: entered allmulticast mode [ 40.533516][ T4081] loop2: detected capacity change from 0 to 4096 [ 40.535736][ T3950] bridge_slave_0: entered promiscuous mode [ 40.540342][ T4081] EXT4-fs: Ignoring removed nobh option [ 40.562884][ T3950] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.570151][ T3950] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.578907][ T3950] bridge_slave_1: entered allmulticast mode [ 40.585024][ T4081] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.585387][ T3950] bridge_slave_1: entered promiscuous mode [ 40.595298][ T4081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.631117][ T4081] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.266: Failed to acquire dquot type 1 [ 40.632686][ T3950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.660966][ T3950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.670663][ T3677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.747419][ T3950] team0: Port device team_slave_0 added [ 40.755877][ T3950] team0: Port device team_slave_1 added [ 40.812223][ T3950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.819265][ T3950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.829592][ T4114] loop4: detected capacity change from 0 to 1024 [ 40.845244][ T3950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.881185][ T4114] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 40.895864][ T3950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.902832][ T3950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.928797][ T3950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.958995][ T4114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.986218][ T3950] hsr_slave_0: entered promiscuous mode [ 40.987290][ T4127] loop0: detected capacity change from 0 to 512 [ 41.004717][ T3950] hsr_slave_1: entered promiscuous mode [ 41.006003][ T3656] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /25/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.031649][ T3950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.041926][ T3950] Cannot create hsr debugfs directory [ 41.054069][ T3656] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.074875][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.089583][ T4140] syz.2.291[4140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.089711][ T4140] syz.2.291[4140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.089880][ T4127] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.122345][ T3656] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 41.122501][ T3656] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /25/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.154965][ T4140] syz.2.291[4140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.184883][ T3656] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.225865][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.245370][ T3656] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 41.276576][ T3656] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /25/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.323477][ T3656] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.353450][ T3656] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 41.374011][ T3656] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /25/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.419173][ T3656] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.438765][ T3656] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 41.463986][ T3656] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /25/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.475013][ T3950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.490129][ T3656] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.512659][ T3656] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 41.527422][ T3950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.538719][ T3950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.548163][ T3656] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 41.550351][ T4158] loop1: detected capacity change from 0 to 128 [ 41.560142][ T3950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.580790][ T3656] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 41.602752][ T3656] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 41.637998][ T3656] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 41.658352][ T3656] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 41.676904][ T3950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.690817][ T4168] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 41.701775][ T3950] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.731033][ T1820] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.738107][ T1820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.771216][ T3950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.781652][ T3950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.832352][ T1820] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.839505][ T1820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.979630][ T3950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.095398][ T4128] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.296041][ T4215] tmpfs: Bad value for 'mpol' [ 42.346447][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.373094][ T4224] loop0: detected capacity change from 0 to 128 [ 42.390977][ T3950] veth0_vlan: entered promiscuous mode [ 42.412281][ T3950] veth1_vlan: entered promiscuous mode [ 42.436220][ T3950] veth0_macvtap: entered promiscuous mode [ 42.443785][ T3950] veth1_macvtap: entered promiscuous mode [ 42.453693][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.464250][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.474103][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.484703][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.494724][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.505184][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.515115][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.525559][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.536754][ T3950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.545000][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.555454][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.565409][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.575912][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.585758][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.596229][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.606071][ T3950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.616557][ T3950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.627512][ T4224] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.650253][ T4224] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.666048][ T3950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.705371][ T3266] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.744776][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.775981][ T3950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.784825][ T3950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.793549][ T3950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.802298][ T3950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.846160][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 42.846176][ T29] audit: type=1400 audit(1727236532.651:629): avc: denied { mounton } for pid=3950 comm="syz-executor" path="/root/syzkaller.gXQHiv/syz-tmp" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 42.878569][ T29] audit: type=1400 audit(1727236532.651:630): avc: denied { mount } for pid=3950 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.905479][ T29] audit: type=1400 audit(1727236532.681:631): avc: denied { mounton } for pid=3950 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 42.939050][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.957830][ T4247] loop2: detected capacity change from 0 to 164 [ 42.977593][ T29] audit: type=1400 audit(1727236532.781:632): avc: denied { mount } for pid=4246 comm="syz.2.331" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.979118][ T4247] syz.2.331: attempt to access beyond end of device [ 42.979118][ T4247] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 43.015308][ T4247] syz.2.331: attempt to access beyond end of device [ 43.015308][ T4247] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.022061][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.038186][ T4247] syz.2.331: attempt to access beyond end of device [ 43.038186][ T4247] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.056329][ T4216] chnl_net:caif_netlink_parms(): no params data found [ 43.074564][ T4247] syz.2.331: attempt to access beyond end of device [ 43.074564][ T4247] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.089207][ T4247] syz.2.331: attempt to access beyond end of device [ 43.089207][ T4247] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.103864][ T4247] syz.2.331: attempt to access beyond end of device [ 43.103864][ T4247] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.130979][ T4247] syz.2.331: attempt to access beyond end of device [ 43.130979][ T4247] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.179146][ T4247] syz.2.331: attempt to access beyond end of device [ 43.179146][ T4247] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.199181][ T28] bridge_slave_1: left allmulticast mode [ 43.205211][ T28] bridge_slave_1: left promiscuous mode [ 43.210916][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.218315][ T4247] syz.2.331: attempt to access beyond end of device [ 43.218315][ T4247] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.251378][ T28] bridge_slave_0: left allmulticast mode [ 43.257127][ T28] bridge_slave_0: left promiscuous mode [ 43.262794][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.273246][ T4247] syz.2.331: attempt to access beyond end of device [ 43.273246][ T4247] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.446736][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.465598][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.485536][ T28] bond0 (unregistering): Released all slaves [ 43.493317][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.500429][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.508792][ T4216] bridge_slave_0: entered allmulticast mode [ 43.515560][ T4216] bridge_slave_0: entered promiscuous mode [ 43.537935][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.545143][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.557241][ T4216] bridge_slave_1: entered allmulticast mode [ 43.563980][ T4216] bridge_slave_1: entered promiscuous mode [ 43.573898][ T29] audit: type=1400 audit(1727236533.371:633): avc: denied { nlmsg_write } for pid=4268 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.621203][ T28] hsr_slave_0: left promiscuous mode [ 43.633838][ T29] audit: type=1400 audit(1727236533.391:634): avc: denied { write } for pid=4267 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.653230][ T28] hsr_slave_1: left promiscuous mode [ 43.659140][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.666606][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.686474][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.694184][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.717291][ T28] veth1_macvtap: left promiscuous mode [ 43.722848][ T28] veth0_macvtap: left promiscuous mode [ 43.728357][ T28] veth1_vlan: left promiscuous mode [ 43.733575][ T28] veth0_vlan: left promiscuous mode [ 43.818762][ T29] audit: type=1400 audit(1727236533.621:635): avc: denied { unmount } for pid=3677 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 43.856400][ T4281] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 43.874626][ T28] team0 (unregistering): Port device team_slave_1 removed [ 43.984417][ T29] audit: type=1400 audit(1727236533.781:636): avc: denied { create } for pid=4288 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.003745][ T29] audit: type=1400 audit(1727236533.781:637): avc: denied { connect } for pid=4288 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.023205][ T29] audit: type=1400 audit(1727236533.781:638): avc: denied { setopt } for pid=4288 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.043128][ T28] team0 (unregistering): Port device team_slave_0 removed [ 44.076774][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.084755][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.092409][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.100304][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.107973][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.115636][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.123278][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.130926][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.138607][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.146272][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.153936][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.155790][ T4303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.161623][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.177687][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.185357][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.193431][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.201118][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.208882][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.216565][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.224243][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.231875][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.239574][ T8] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 44.249810][ T4303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.257746][ T8] hid-generic 0000:1000003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 44.259599][ T4216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.284508][ T4284] syzkaller1: entered promiscuous mode [ 44.289997][ T4284] syzkaller1: entered allmulticast mode [ 44.296831][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.304387][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.313117][ T4216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.342846][ T4216] team0: Port device team_slave_0 added [ 44.349686][ T4216] team0: Port device team_slave_1 added [ 44.366678][ T4216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.373621][ T4216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.399689][ T4216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.411796][ T4216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.418756][ T4216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.444727][ T4216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.473495][ T4216] hsr_slave_0: entered promiscuous mode [ 44.479591][ T4216] hsr_slave_1: entered promiscuous mode [ 44.485659][ T4216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.493204][ T4216] Cannot create hsr debugfs directory [ 44.523671][ T4310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.351'. [ 44.832032][ T4216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.843336][ T4338] loop2: detected capacity change from 0 to 1024 [ 44.855238][ T4216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.863573][ T4338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.868424][ T4344] tipc: Started in network mode [ 44.880483][ T4344] tipc: Node identity , cluster identity 4711 [ 44.886743][ T4344] tipc: Failed to obtain node identity [ 44.892307][ T4344] tipc: Enabling of bearer rejected, failed to enable media [ 44.901250][ T4216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.910431][ T4216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.925690][ T4349] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 44.933451][ T4349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.367'. [ 44.945226][ T4349] bridge0: port 3(ipvlan0) entered blocking state [ 44.951720][ T4349] bridge0: port 3(ipvlan0) entered disabled state [ 44.958566][ T4349] ipvlan0: entered allmulticast mode [ 44.963980][ T4349] veth0_vlan: entered allmulticast mode [ 44.971434][ T4349] ipvlan0: left allmulticast mode [ 44.976673][ T4349] veth0_vlan: left allmulticast mode [ 44.982647][ T4349] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 45.025462][ T4216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.040387][ T4216] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.058003][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.065126][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.084629][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.091808][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.151216][ T4357] bond1: entered promiscuous mode [ 45.156326][ T4357] bond1: entered allmulticast mode [ 45.161787][ T4357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.172749][ T4357] bond1 (unregistering): Released all slaves [ 45.220191][ T4216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.439350][ T4216] veth0_vlan: entered promiscuous mode [ 45.452036][ T4216] veth1_vlan: entered promiscuous mode [ 45.472056][ T4216] veth0_macvtap: entered promiscuous mode [ 45.488788][ T4391] netlink: 'syz.1.377': attribute type 3 has an invalid length. [ 45.503088][ T4216] veth1_macvtap: entered promiscuous mode [ 45.514221][ T4338] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 45.520308][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.534529][ T4338] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.539598][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.551746][ T4338] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.551746][ T4338] [ 45.551763][ T4338] EXT4-fs (loop2): Total free blocks count 0 [ 45.561684][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.561701][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.561716][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.561731][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.562843][ T4216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.571406][ T4338] EXT4-fs (loop2): Free/Dirty block details [ 45.571420][ T4338] EXT4-fs (loop2): free_blocks=68451041280 [ 45.571431][ T4338] EXT4-fs (loop2): dirty_blocks=16400 [ 45.571441][ T4338] EXT4-fs (loop2): Block reservation details [ 45.571449][ T4338] EXT4-fs (loop2): i_reserved_data_blocks=1025 [ 45.660531][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.671050][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.680970][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.691729][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.701917][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.712480][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.722331][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.732764][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.744279][ T4216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.753004][ T4216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.761989][ T4216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.770748][ T4216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.779497][ T4216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.794445][ T1820] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2048 with error 28 [ 45.869536][ T4407] loop4: detected capacity change from 0 to 512 [ 45.876427][ T4407] EXT4-fs: Ignoring removed bh option [ 45.895200][ T4407] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 45.925844][ T4407] EXT4-fs (loop4): 1 truncate cleaned up [ 45.931910][ T4407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.961230][ T4216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.068147][ T4422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.390'. [ 46.077404][ T4422] unsupported nlmsg_type 40 [ 46.231091][ T4459] syz.1.418[4459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.231187][ T4459] syz.1.418[4459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.237613][ T4458] loop4: detected capacity change from 0 to 2048 [ 46.244277][ T4459] syz.1.418[4459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.265313][ T4458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.306278][ T4465] loop2: detected capacity change from 0 to 512 [ 46.314719][ T4216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.335311][ T4465] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 46.350324][ T4469] loop1: detected capacity change from 0 to 1024 [ 46.358255][ T4469] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 46.379507][ T4469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.395726][ T4477] loop2: detected capacity change from 0 to 128 [ 46.405711][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.468469][ T4483] loop1: detected capacity change from 0 to 512 [ 46.479210][ T4483] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.498767][ T4483] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.416: bg 0: block 264: padding at end of block bitmap is not set [ 46.513260][ T4483] EXT4-fs (loop1): Remounting filesystem read-only [ 46.519967][ T4483] EXT4-fs (loop1): 1 truncate cleaned up [ 46.526339][ T4483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.538646][ T4483] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 46.549028][ T4483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.549363][ T4498] mmap: syz.0.435 (4498): VmData 29036544 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 46.669806][ T4516] loop2: detected capacity change from 0 to 512 [ 46.696709][ T4516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.710115][ T4516] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.794772][ T4534] syz.0.442 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.812101][ T4536] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 46.834746][ T3677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.919583][ T4548] loop1: detected capacity change from 0 to 512 [ 46.926200][ T4548] EXT4-fs: Ignoring removed nobh option [ 46.931992][ T4548] EXT4-fs: Ignoring removed nobh option [ 46.941725][ T4547] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.950080][ T4548] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 46.962205][ T4548] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.450: invalid indirect mapped block 2683928664 (level 1) [ 46.970658][ T4554] loop0: detected capacity change from 0 to 1024 [ 46.984531][ T4548] EXT4-fs (loop1): 1 truncate cleaned up [ 46.997840][ T4548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.013157][ T4554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.029285][ T4554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.453: missing EA_INODE flag [ 47.041008][ T4554] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.453: error while reading EA inode 11 err=-117 [ 47.041479][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.070555][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.114211][ T4569] @ÿ: renamed from veth0_vlan (while UP) [ 47.146502][ T4576] netlink: 256 bytes leftover after parsing attributes in process `syz.2.462'. [ 47.185692][ T4585] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 47.222690][ T4593] loop3: detected capacity change from 0 to 512 [ 47.231493][ T4593] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 47.239698][ T4593] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.247554][ T4593] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 47.262539][ T4593] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 47.270921][ T4593] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #16: comm syz.3.469: casefold flag without casefold feature [ 47.277308][ T4596] program syz.0.470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.285612][ T4593] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.469: couldn't read orphan inode 16 (err -117) [ 47.305138][ T4593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.328924][ T3950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.351357][ T4602] smc: net device bond0 applied user defined pnetid SYZ0 [ 47.363628][ T4600] loop0: detected capacity change from 0 to 512 [ 47.376985][ T4600] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.396743][ T4600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 47.408028][ T4609] loop1: detected capacity change from 0 to 512 [ 47.418213][ T4600] System zones: 1-12 [ 47.422514][ T4609] EXT4-fs: Ignoring removed nobh option [ 47.422790][ T4600] EXT4-fs (loop0): 1 truncate cleaned up [ 47.442409][ T4600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.456017][ T4609] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.476392][ T4617] loop2: detected capacity change from 0 to 512 [ 47.484907][ T4617] /dev/loop2: Can't open blockdev [ 47.504499][ T4609] EXT4-fs (loop1): 1 truncate cleaned up [ 47.512184][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.528939][ T4609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.595323][ T4634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.615650][ T3263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.631301][ T4634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.676570][ T3343] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 47.684368][ T3343] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 47.692430][ T3343] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 47.705569][ T3343] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 47.740980][ T4655] loop1: detected capacity change from 0 to 2048 [ 47.775801][ T4655] Alternate GPT is invalid, using primary GPT. [ 47.782200][ T4655] loop1: p1 p2 p3 [ 47.824439][ T4658] netlink: 256 bytes leftover after parsing attributes in process `syz.1.498'. [ 47.861995][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 47.862011][ T29] audit: type=1400 audit(1727236537.661:782): avc: denied { read } for pid=4662 comm="syz.3.499" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.891421][ T29] audit: type=1400 audit(1727236537.661:783): avc: denied { open } for pid=4662 comm="syz.3.499" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.915450][ T29] audit: type=1400 audit(1727236537.661:784): avc: denied { ioctl } for pid=4662 comm="syz.3.499" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.949832][ T4665] IPv6: Can't replace route, no match found [ 48.014883][ T29] audit: type=1326 audit(1727236537.821:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29d18def9 code=0x7ffc0000 [ 48.038210][ T29] audit: type=1326 audit(1727236537.821:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc29d18def9 code=0x7ffc0000 [ 48.063238][ T29] audit: type=1326 audit(1727236537.821:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29d18def9 code=0x7ffc0000 [ 48.086578][ T29] audit: type=1326 audit(1727236537.841:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29d18def9 code=0x7ffc0000 [ 48.154078][ T4682] syz.1.508[4682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.154161][ T4682] syz.1.508[4682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.172833][ T4682] syz.1.508[4682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.181675][ T4685] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 48.210333][ T4684] IPVS: stopping master sync thread 4685 ... [ 48.241388][ T29] audit: type=1400 audit(1727236538.041:789): avc: denied { append } for pid=4688 comm="syz.2.511" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.301350][ T29] audit: type=1326 audit(1727236538.101:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f8d6def9 code=0x7ffc0000 [ 48.332073][ T29] audit: type=1326 audit(1727236538.121:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f8d6def9 code=0x7ffc0000 [ 48.359385][ T4701] sctp: [Deprecated]: syz.4.517 (pid 4701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.359385][ T4701] Use struct sctp_sack_info instead [ 48.407061][ T4703] loop4: detected capacity change from 0 to 512 [ 48.413672][ T4703] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 48.545583][ T4724] netlink: 'syz.0.528': attribute type 39 has an invalid length. [ 48.575657][ T4728] loop4: detected capacity change from 0 to 256 [ 48.583485][ T4728] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 48.660479][ T4740] loop2: detected capacity change from 0 to 2048 [ 48.786769][ T4759] netlink: 80 bytes leftover after parsing attributes in process `syz.1.545'. [ 48.796015][ T4759] netlink: 80 bytes leftover after parsing attributes in process `syz.1.545'. [ 48.804671][ T4769] loop0: detected capacity change from 0 to 256 [ 48.820693][ T4769] FAT-fs (loop0): Directory bread(block 64) failed [ 48.830723][ T4769] FAT-fs (loop0): Directory bread(block 65) failed [ 48.841496][ T4769] FAT-fs (loop0): Directory bread(block 66) failed [ 48.849384][ T4769] FAT-fs (loop0): Directory bread(block 67) failed [ 48.856931][ T4769] FAT-fs (loop0): Directory bread(block 68) failed [ 48.863561][ T4769] FAT-fs (loop0): Directory bread(block 69) failed [ 48.870213][ T4769] FAT-fs (loop0): Directory bread(block 70) failed [ 48.876888][ T4769] FAT-fs (loop0): Directory bread(block 71) failed [ 48.883518][ T4769] FAT-fs (loop0): Directory bread(block 72) failed [ 48.890456][ T4769] FAT-fs (loop0): Directory bread(block 73) failed [ 48.960842][ T4788] loop0: detected capacity change from 0 to 128 [ 48.970839][ T4788] netlink: 148 bytes leftover after parsing attributes in process `syz.0.558'. [ 49.017556][ T4794] loop0: detected capacity change from 0 to 1024 [ 49.028786][ T4794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.074704][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.087433][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.096652][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.116001][ T4813] loop0: detected capacity change from 0 to 128 [ 49.123502][ T4813] FAT-fs (loop0): invalid media value (0x00) [ 49.129611][ T4813] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 49.138782][ T4813] FAT-fs (loop0): Can't find a valid FAT filesystem [ 49.327254][ T4835] netlink: 'syz.4.580': attribute type 39 has an invalid length. [ 49.521901][ T4845] ================================================================== [ 49.530001][ T4845] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 49.536430][ T4845] [ 49.538839][ T4845] read to 0xffffc9000f2abc10 of 4 bytes by task 4844 on cpu 1: [ 49.546379][ T4845] do_sys_poll+0x986/0xc10 [ 49.550796][ T4845] __se_sys_poll+0xe1/0x200 [ 49.555317][ T4845] __x64_sys_poll+0x43/0x50 [ 49.559837][ T4845] x64_sys_call+0x29db/0x2d60 [ 49.564593][ T4845] do_syscall_64+0xc9/0x1c0 [ 49.569119][ T4845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.575044][ T4845] [ 49.577365][ T4845] write to 0xffffc9000f2abc10 of 4 bytes by task 4845 on cpu 0: [ 49.585023][ T4845] pollwake+0xbe/0x110 [ 49.589114][ T4845] __wake_up+0x65/0xb0 [ 49.593199][ T4845] snd_seq_cell_free+0x1e7/0x210 [ 49.598158][ T4845] snd_seq_dispatch_event+0x210/0x240 [ 49.603544][ T4845] snd_seq_check_queue+0x17b/0x300 [ 49.608674][ T4845] snd_seq_enqueue_event+0x26e/0x2a0 [ 49.613968][ T4845] snd_seq_client_enqueue_event+0x21a/0x2b0 [ 49.619876][ T4845] snd_seq_write+0x3f3/0x500 [ 49.624469][ T4845] vfs_write+0x26c/0x910 [ 49.628723][ T4845] ksys_write+0xeb/0x1b0 [ 49.633018][ T4845] __x64_sys_write+0x42/0x50 [ 49.637724][ T4845] x64_sys_call+0x27dd/0x2d60 [ 49.642407][ T4845] do_syscall_64+0xc9/0x1c0 [ 49.646919][ T4845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.652826][ T4845] [ 49.655154][ T4845] value changed: 0x00000001 -> 0x00000000 [ 49.660874][ T4845] [ 49.663192][ T4845] Reported by Kernel Concurrency Sanitizer on: [ 49.669342][ T4845] CPU: 0 UID: 0 PID: 4845 Comm: syz.0.583 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 49.679588][ T4845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 49.689639][ T4845] ==================================================================