last executing test programs: 2.045527861s ago: executing program 1 (id=1955): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x100080a, &(0x7f0000000280)=ANY=[], 0x3, 0x66b, &(0x7f0000000900)="$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") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 2.02751963s ago: executing program 1 (id=1957): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 1.998312881s ago: executing program 1 (id=1969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x40, 0x1800}], 0x1, 0x0) unshare(0x60400) 1.967565021s ago: executing program 1 (id=1962): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000c40)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x6, @remote}, 0x4, {0x2, 0x4e23, @local}, 'bridge_slave_0\x00'}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000ac0)=0x1fc245da, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) 1.948119351s ago: executing program 1 (id=1965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 1.894391851s ago: executing program 1 (id=1968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1.376191924s ago: executing program 0 (id=1977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='nv\x00', 0x3) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.164386945s ago: executing program 4 (id=1991): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) 1.115212575s ago: executing program 4 (id=1993): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xb00, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142da391145badd00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 1.112240735s ago: executing program 2 (id=1994): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x40000, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001340)={0x323, @time={0xffffffff, 0x2}, 0x0, {}, 0x1}) 1.091936955s ago: executing program 4 (id=1995): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xb7f2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 532.393358ms ago: executing program 0 (id=1996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) clock_nanosleep(0x9, 0x0, 0x0, 0xfffffffffffffffe) 532.214777ms ago: executing program 2 (id=1997): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setpgid(0x0, 0x0) 485.553298ms ago: executing program 2 (id=1998): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x20}]}}}]}, 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 458.188888ms ago: executing program 2 (id=1999): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 290.075699ms ago: executing program 0 (id=2000): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110104, 0x32, 0x0, 0x8, 0x0, 0x20000000, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 289.955449ms ago: executing program 3 (id=2001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) 261.932949ms ago: executing program 3 (id=2002): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) unshare(0x22020600) pwritev2(r1, 0x0, 0x0, 0x300400, 0x0, 0x3) 241.758809ms ago: executing program 4 (id=2003): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x3, 0x3) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 232.354559ms ago: executing program 2 (id=2004): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000340), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 210.075529ms ago: executing program 0 (id=2005): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x20000000}) 202.723239ms ago: executing program 3 (id=2006): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 193.444499ms ago: executing program 4 (id=2007): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 118.93193ms ago: executing program 4 (id=2008): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r1) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 104.42337ms ago: executing program 3 (id=2009): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) close(0xffffffffffffffff) truncate(0x0, 0x0) 83.41231ms ago: executing program 3 (id=2010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100)=0x2, 0x4) sendmmsg$inet6(r1, &(0x7f0000008640)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @mcast1}, 0x1c, 0x0}}], 0x1, 0x40000) 83.01854ms ago: executing program 0 (id=2011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = shmget$private(0x0, 0x3000, 0x24, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) 54.57412ms ago: executing program 3 (id=2012): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 51.72223ms ago: executing program 0 (id=2013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) 0s ago: executing program 2 (id=2014): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) kernel console output (not intermixed with test programs): [ 18.108089][ T29] audit: type=1400 audit(1731502205.414:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 21.188793][ T29] audit: type=1400 audit(1731502208.494:82): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.189829][ T3300] cgroup: Unknown subsys name 'net' [ 21.211499][ T29] audit: type=1400 audit(1731502208.494:83): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.238873][ T29] audit: type=1400 audit(1731502208.524:84): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.374915][ T3300] cgroup: Unknown subsys name 'cpuset' [ 21.380995][ T3300] cgroup: Unknown subsys name 'rlimit' [ 21.547271][ T29] audit: type=1400 audit(1731502208.854:85): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.570527][ T29] audit: type=1400 audit(1731502208.854:86): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.580191][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.590940][ T29] audit: type=1400 audit(1731502208.854:87): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.619834][ T29] audit: type=1400 audit(1731502208.854:88): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.640065][ T29] audit: type=1400 audit(1731502208.854:89): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.658775][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.664830][ T29] audit: type=1400 audit(1731502208.854:90): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.696795][ T29] audit: type=1400 audit(1731502208.914:91): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.279781][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 23.343900][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 23.363486][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.370620][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.377775][ T3319] bridge_slave_0: entered allmulticast mode [ 23.384091][ T3319] bridge_slave_0: entered promiscuous mode [ 23.390666][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.397960][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.405182][ T3319] bridge_slave_1: entered allmulticast mode [ 23.411669][ T3319] bridge_slave_1: entered promiscuous mode [ 23.456358][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.465490][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 23.486924][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.506137][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 23.527409][ T3319] team0: Port device team_slave_0 added [ 23.551479][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.558572][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.565759][ T3313] bridge_slave_0: entered allmulticast mode [ 23.572085][ T3313] bridge_slave_0: entered promiscuous mode [ 23.578901][ T3319] team0: Port device team_slave_1 added [ 23.608796][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.615930][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.623076][ T3313] bridge_slave_1: entered allmulticast mode [ 23.629440][ T3313] bridge_slave_1: entered promiscuous mode [ 23.652326][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.659356][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.685299][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.710692][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.717661][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.743663][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.756812][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 23.765564][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.772634][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.779839][ T3314] bridge_slave_0: entered allmulticast mode [ 23.786095][ T3314] bridge_slave_0: entered promiscuous mode [ 23.798023][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.807099][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.814305][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.821464][ T3317] bridge_slave_0: entered allmulticast mode [ 23.827896][ T3317] bridge_slave_0: entered promiscuous mode [ 23.839117][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.846275][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.853419][ T3314] bridge_slave_1: entered allmulticast mode [ 23.859905][ T3314] bridge_slave_1: entered promiscuous mode [ 23.866858][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.876087][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.883121][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.890209][ T3317] bridge_slave_1: entered allmulticast mode [ 23.896401][ T3317] bridge_slave_1: entered promiscuous mode [ 23.932183][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.943195][ T3319] hsr_slave_0: entered promiscuous mode [ 23.949254][ T3319] hsr_slave_1: entered promiscuous mode [ 23.965970][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.995621][ T3313] team0: Port device team_slave_0 added [ 24.002335][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.011954][ T3313] team0: Port device team_slave_1 added [ 24.018768][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.028489][ T3317] team0: Port device team_slave_0 added [ 24.048593][ T3317] team0: Port device team_slave_1 added [ 24.063283][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.070279][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.096206][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.112131][ T3314] team0: Port device team_slave_0 added [ 24.126259][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.133288][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.140483][ T3321] bridge_slave_0: entered allmulticast mode [ 24.146776][ T3321] bridge_slave_0: entered promiscuous mode [ 24.153272][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.160236][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.186124][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.199541][ T3314] team0: Port device team_slave_1 added [ 24.213307][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.220373][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.227614][ T3321] bridge_slave_1: entered allmulticast mode [ 24.233882][ T3321] bridge_slave_1: entered promiscuous mode [ 24.259136][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.266111][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.291997][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.303143][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.310139][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.336082][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.358063][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.369366][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.376325][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.402264][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.422716][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.433902][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.440922][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.466824][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.486944][ T3313] hsr_slave_0: entered promiscuous mode [ 24.492976][ T3313] hsr_slave_1: entered promiscuous mode [ 24.498957][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.506663][ T3313] Cannot create hsr debugfs directory [ 24.523613][ T3321] team0: Port device team_slave_0 added [ 24.530076][ T3321] team0: Port device team_slave_1 added [ 24.541307][ T3317] hsr_slave_0: entered promiscuous mode [ 24.547364][ T3317] hsr_slave_1: entered promiscuous mode [ 24.553147][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.560723][ T3317] Cannot create hsr debugfs directory [ 24.581376][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.588344][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.614270][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.639345][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.646315][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.672323][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.691586][ T3314] hsr_slave_0: entered promiscuous mode [ 24.697609][ T3314] hsr_slave_1: entered promiscuous mode [ 24.703485][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.711095][ T3314] Cannot create hsr debugfs directory [ 24.758478][ T3321] hsr_slave_0: entered promiscuous mode [ 24.764533][ T3321] hsr_slave_1: entered promiscuous mode [ 24.770467][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.778022][ T3321] Cannot create hsr debugfs directory [ 24.871784][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.894252][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.902508][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.916528][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.950417][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.958781][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.969499][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.977826][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.004635][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.018643][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.027041][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.055948][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.066279][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.074882][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.089734][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.100421][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.113468][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.121920][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.131151][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.139386][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.153646][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.160752][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.200668][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.209211][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.239835][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.247237][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.270300][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.281270][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.289442][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.300906][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.307969][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.317175][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.324224][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.339872][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.346941][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.361474][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.368599][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.377662][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.384705][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.402799][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.413197][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.438073][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.445422][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.456506][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.476890][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.487988][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.514717][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.521862][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.533784][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.546583][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.553638][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.577854][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.584933][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.593076][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.600125][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.616698][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.642369][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.659225][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.710526][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.761185][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.788468][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.818734][ T3319] veth0_vlan: entered promiscuous mode [ 25.841688][ T3319] veth1_vlan: entered promiscuous mode [ 25.869515][ T3317] veth0_vlan: entered promiscuous mode [ 25.888021][ T3319] veth0_macvtap: entered promiscuous mode [ 25.899644][ T3317] veth1_vlan: entered promiscuous mode [ 25.912774][ T3317] veth0_macvtap: entered promiscuous mode [ 25.925168][ T3319] veth1_macvtap: entered promiscuous mode [ 25.937817][ T3317] veth1_macvtap: entered promiscuous mode [ 25.948512][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.965816][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.983585][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.994119][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.005192][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.015118][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.025667][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.036120][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.044824][ T3319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.053517][ T3319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.062232][ T3319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.071055][ T3319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.086275][ T3313] veth0_vlan: entered promiscuous mode [ 26.098261][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.107208][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.116047][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.124772][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.136564][ T3321] veth0_vlan: entered promiscuous mode [ 26.143039][ T3313] veth1_vlan: entered promiscuous mode [ 26.153879][ T3314] veth0_vlan: entered promiscuous mode [ 26.168825][ T3314] veth1_vlan: entered promiscuous mode [ 26.182809][ T3321] veth1_vlan: entered promiscuous mode [ 26.204860][ T3313] veth0_macvtap: entered promiscuous mode [ 26.213255][ T3314] veth0_macvtap: entered promiscuous mode [ 26.227135][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.243689][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 26.243702][ T29] audit: type=1400 audit(1731502213.544:118): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.285835][ T3313] veth1_macvtap: entered promiscuous mode [ 26.293047][ T29] audit: type=1400 audit(1731502213.544:119): avc: denied { open } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.294631][ T3321] veth0_macvtap: entered promiscuous mode [ 26.317171][ T29] audit: type=1400 audit(1731502213.544:120): avc: denied { ioctl } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.348274][ T29] audit: type=1400 audit(1731502213.574:121): avc: denied { create } for pid=3458 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.349074][ T3321] veth1_macvtap: entered promiscuous mode [ 26.367451][ T29] audit: type=1400 audit(1731502213.574:122): avc: denied { listen } for pid=3458 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.394457][ T29] audit: type=1400 audit(1731502213.624:123): avc: denied { map_create } for pid=3461 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.413309][ T29] audit: type=1400 audit(1731502213.624:124): avc: denied { perfmon } for pid=3461 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.421239][ T3314] veth1_macvtap: entered promiscuous mode [ 26.433930][ T29] audit: type=1400 audit(1731502213.624:125): avc: denied { map_read map_write } for pid=3461 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.447014][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.459024][ T29] audit: type=1400 audit(1731502213.624:126): avc: denied { prog_load } for pid=3461 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.459046][ T29] audit: type=1400 audit(1731502213.624:127): avc: denied { bpf } for pid=3461 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.469438][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.469450][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.528799][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.545625][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.559073][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.569637][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.574127][ T3466] loop1: detected capacity change from 0 to 128 [ 26.579547][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.596276][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.606111][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.616689][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.628633][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.636912][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.647437][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.657344][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.667905][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.679340][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.703714][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.714213][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.724091][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.734581][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.744461][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.754919][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.786455][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.796150][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.806608][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.816481][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.826966][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.836829][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.842720][ T3473] loop2: detected capacity change from 0 to 2048 [ 26.847362][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.863536][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.874115][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.886436][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.897762][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.908287][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.918127][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.928782][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.938661][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.949176][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.959032][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.969595][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.980401][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.988640][ T3321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.997548][ T3321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.006552][ T3321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.015286][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.028992][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.037764][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.046542][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.055244][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.065478][ T3473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.081259][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.090018][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.098716][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.107479][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.137656][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.179445][ T3489] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.14'. [ 27.193417][ T3482] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.14'. [ 27.292893][ T3494] IPVS: Error connecting to the multicast addr [ 27.415709][ T3519] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 27.466373][ T3524] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3524 comm=syz.1.29 [ 27.525659][ T3531] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 27.618572][ T3548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.41'. [ 27.715339][ T3562] loop4: detected capacity change from 0 to 164 [ 27.727993][ T3562] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 27.765381][ T3565] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 27.807956][ T3573] loop1: detected capacity change from 0 to 1024 [ 27.823609][ T3573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 27.835256][ T3573] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 27.846798][ T3571] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 27.855040][ T3571] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 27.865375][ T3579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 27.866514][ T3573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.874208][ T3579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 27.942577][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.033617][ T3613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 28.055911][ T3610] process 'syz.1.64' launched './file0' with NULL argv: empty string added [ 28.097523][ T3621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.70'. [ 28.127712][ T3627] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.267668][ T3648] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 28.270082][ T3644] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 28.274248][ T3648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 28.274356][ T3648] vhci_hcd vhci_hcd.0: Device attached [ 28.328426][ T3652] vhci_hcd: connection closed [ 28.328625][ T50] vhci_hcd: stop threads [ 28.337661][ T50] vhci_hcd: release socket [ 28.342074][ T50] vhci_hcd: disconnect device [ 28.647927][ T3703] SELinux: failed to load policy [ 28.651065][ T3702] syz.4.106[3702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.652924][ T3702] syz.4.106[3702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.667350][ T3702] syz.4.106[3702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.698008][ T3708] loop2: detected capacity change from 0 to 164 [ 28.724944][ T3708] ======================================================= [ 28.724944][ T3708] WARNING: The mand mount option has been deprecated and [ 28.724944][ T3708] and is ignored by this kernel. Remove the mand [ 28.724944][ T3708] option from the mount to silence this warning. [ 28.724944][ T3708] ======================================================= [ 28.762077][ T3708] Unable to read rock-ridge attributes [ 28.771150][ T3708] Unable to read rock-ridge attributes [ 28.777946][ T3708] tmpfs: Bad value for 'mpol' [ 28.862604][ T3733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 28.978087][ T3750] loop4: detected capacity change from 0 to 2048 [ 29.034451][ T3750] loop4: p1 < > p2 p3 < p5 > p4 [ 29.039519][ T3750] loop4: partition table partially beyond EOD, truncated [ 29.055804][ T3750] loop4: p1 start 4278190080 is beyond EOD, truncated [ 29.062645][ T3750] loop4: p2 start 16908800 is beyond EOD, truncated [ 29.073072][ T3750] loop4: p4 start 11326 is beyond EOD, truncated [ 29.079540][ T3750] loop4: p5 start 16908800 is beyond EOD, truncated [ 29.092491][ T3016] loop4: p1 < > p2 p3 < p5 > p4 [ 29.097489][ T3016] loop4: partition table partially beyond EOD, truncated [ 29.114114][ T3016] loop4: p1 start 4278190080 is beyond EOD, truncated [ 29.119288][ T3763] loop0: detected capacity change from 0 to 512 [ 29.120942][ T3016] loop4: p2 start 16908800 is beyond EOD, truncated [ 29.148208][ T3016] loop4: p4 start 11326 is beyond EOD, truncated [ 29.154677][ T3016] loop4: p5 start 16908800 is beyond EOD, truncated [ 29.156089][ T3763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.189492][ T3763] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.224673][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.262869][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 29.273014][ T3776] Illegal XDP return value 4294967262 on prog (id 84) dev N/A, expect packet loss! [ 29.441321][ T3806] capability: warning: `syz.3.132' uses deprecated v2 capabilities in a way that may be insecure [ 29.508507][ T3818] loop0: detected capacity change from 0 to 256 [ 29.546627][ T3824] Zero length message leads to an empty skb [ 29.756623][ T3856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.167'. [ 29.828289][ T3866] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 29.828386][ T3865] SET target dimension over the limit! [ 29.902284][ T3874] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 29.927771][ T3877] team0 (unregistering): Port device team_slave_0 removed [ 29.955024][ T3877] team0 (unregistering): Port device team_slave_1 removed [ 30.063910][ T3877] syz.0.176 (3877) used greatest stack depth: 10640 bytes left [ 30.200244][ T3918] loop1: detected capacity change from 0 to 512 [ 30.215833][ T3918] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.196: bg 0: block 35: padding at end of block bitmap is not set [ 30.235505][ T3926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.261767][ T3918] EXT4-fs (loop1): Remounting filesystem read-only [ 30.273255][ T3918] EXT4-fs (loop1): 1 truncate cleaned up [ 30.281493][ T3918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.294508][ T3918] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 30.301344][ T3918] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.301846][ T3926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.356340][ T3938] loop4: detected capacity change from 0 to 128 [ 30.370601][ T3938] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.393883][ T3938] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.422267][ T3918] 9p: Unknown access argument u: -22 [ 30.446497][ T3944] loop3: detected capacity change from 0 to 1024 [ 30.463665][ T3949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.469033][ T40] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.491859][ T3944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.509127][ T3954] loop4: detected capacity change from 0 to 164 [ 30.584969][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.617482][ T3969] syz.1.219[3969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.617627][ T3969] syz.1.219[3969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.634233][ T3969] syz.1.219[3969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.729832][ T3987] batadv1: entered promiscuous mode [ 30.752377][ T3987] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 30.796280][ T3994] loop2: detected capacity change from 0 to 1024 [ 30.833516][ T3994] EXT4-fs: Ignoring removed nobh option [ 30.843597][ T3999] mmap: syz.3.232 (3999) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.896874][ T3994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.917588][ T4007] loop4: detected capacity change from 0 to 512 [ 30.930241][ T4007] EXT4-fs: Ignoring removed bh option [ 30.935685][ T4007] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.951221][ T4007] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 30.971247][ T4007] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 30.980068][ T4007] EXT4-fs (loop4): failed to initialize system zone (-117) [ 30.987853][ T4007] EXT4-fs (loop4): mount failed [ 31.015549][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.066105][ T4022] loop0: detected capacity change from 0 to 256 [ 31.098817][ T4022] FAT-fs (loop0): IO charset maccyrillic not found [ 31.221247][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 31.228972][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 31.244284][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 31.244296][ T29] audit: type=1326 audit(1731502218.554:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 31.276249][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 31.284257][ T29] audit: type=1326 audit(1731502218.584:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 31.307839][ T29] audit: type=1326 audit(1731502218.584:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 31.331369][ T29] audit: type=1326 audit(1731502218.584:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 31.354601][ T29] audit: type=1326 audit(1731502218.584:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 31.356868][ T35] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 31.378507][ T29] audit: type=1326 audit(1731502218.584:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 31.410968][ T29] audit: type=1326 audit(1731502218.584:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 31.434318][ T29] audit: type=1326 audit(1731502218.584:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 31.458145][ T29] audit: type=1326 audit(1731502218.584:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 31.481665][ T29] audit: type=1326 audit(1731502218.584:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4049 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 31.562631][ T4066] loop3: detected capacity change from 0 to 2048 [ 31.579819][ T4074] loop1: detected capacity change from 0 to 512 [ 31.641278][ T4085] xt_hashlimit: max too large, truncated to 1048576 [ 31.657098][ T4074] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.261: Failed to acquire dquot type 1 [ 31.691599][ T4074] EXT4-fs (loop1): 1 truncate cleaned up [ 31.698417][ T4074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.711712][ T4074] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.734627][ T4098] sg_write: data in/out 231/8 bytes for SCSI command 0xeb-- guessing data in; [ 31.734627][ T4098] program syz.2.271 not setting count and/or reply_len properly [ 31.762503][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.095428][ T4158] loop3: detected capacity change from 0 to 1024 [ 32.105146][ T4158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.169321][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.259742][ T4184] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 32.271314][ T4184] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 32.285527][ T4186] loop1: detected capacity change from 0 to 164 [ 32.461419][ T4213] futex_wake_op: syz.4.327 tries to shift op by 144; fix this program [ 32.520581][ T4227] syz.1.333[4227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.520632][ T4227] syz.1.333[4227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.551029][ T4227] syz.1.333[4227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.575763][ T4229] __nla_validate_parse: 7 callbacks suppressed [ 32.575778][ T4229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.335'. [ 32.590907][ T4231] loop3: detected capacity change from 0 to 512 [ 32.616086][ T4231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.627730][ T4229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.335'. [ 32.635733][ T4231] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.662855][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.675615][ T4229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.335'. [ 32.718188][ T4244] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 32.875856][ T4268] netlink: 268 bytes leftover after parsing attributes in process `syz.1.350'. [ 32.876265][ T4266] syz.2.351 (4266) used greatest stack depth: 10128 bytes left [ 32.885070][ T4268] unsupported nla_type 65024 [ 32.992981][ T4287] syz.2.359[4287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.096514][ T4299] loop2: detected capacity change from 0 to 256 [ 33.116966][ T4301] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 33.132062][ T4301] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 33.376678][ T4327] loop4: detected capacity change from 0 to 512 [ 33.383399][ T4327] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.396510][ T4327] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.419886][ T4327] EXT4-fs (loop4): 1 truncate cleaned up [ 33.430973][ T4327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.492649][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.536161][ T4351] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 33.648826][ T4371] loop4: detected capacity change from 0 to 256 [ 33.827609][ T4394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.410'. [ 33.833912][ T4396] loop4: detected capacity change from 0 to 1024 [ 33.867219][ T4396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.879435][ T4396] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.909205][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.959275][ T4408] SELinux: Context  is not valid (left unmapped). [ 33.964410][ T4410] vxcan1: tx address claim with different name [ 34.078168][ T4424] loop4: detected capacity change from 0 to 512 [ 34.085806][ T4424] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.098584][ T4424] EXT4-fs (loop4): 1 truncate cleaned up [ 34.104793][ T4424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.122255][ T4424] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 34.148018][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.322770][ T4442] netlink: 'syz.3.431': attribute type 3 has an invalid length. [ 34.687491][ T4471] netlink: 68 bytes leftover after parsing attributes in process `syz.2.444'. [ 34.820595][ T4483] loop2: detected capacity change from 0 to 128 [ 34.836418][ T4483] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 34.844195][ T4483] vhci_hcd: invalid port number 219 [ 34.849409][ T4483] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 35.396093][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 35.404953][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 35.534834][ T4564] netlink: 'syz.3.488': attribute type 4 has an invalid length. [ 35.542509][ T4564] netlink: 152 bytes leftover after parsing attributes in process `syz.3.488'. [ 35.555843][ T4566] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 35.571581][ T4568] loop4: detected capacity change from 0 to 2048 [ 35.591086][ T4570] bpf_get_probe_write_proto: 2 callbacks suppressed [ 35.591099][ T4570] syz.0.490[4570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.599870][ T4570] syz.0.490[4570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.610277][ T4568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.627023][ T4570] syz.0.490[4570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.660957][ T4568] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 35.703464][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.807535][ T4600] syz.0.502[4600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.807707][ T4600] syz.0.502[4600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.829203][ T4600] syz.0.502[4600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.849390][ T4603] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 36.063803][ T4623] Cannot find add_set index 0 as target [ 36.109270][ T4632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 36.270191][ T4660] syz.0.531[4660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.270247][ T4660] syz.0.531[4660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.281666][ T4660] syz.0.531[4660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.295252][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 36.295266][ T29] audit: type=1326 audit(1731502223.604:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4659 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935946e719 code=0x7ffc0000 [ 36.338482][ T29] audit: type=1326 audit(1731502223.604:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4659 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f935946e719 code=0x7ffc0000 [ 36.361765][ T29] audit: type=1326 audit(1731502223.604:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4659 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935946e719 code=0x7ffc0000 [ 36.385215][ T29] audit: type=1326 audit(1731502223.614:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4659 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935946e719 code=0x7ffc0000 [ 36.415395][ T29] audit: type=1326 audit(1731502223.714:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935946e719 code=0x7ffc0000 [ 36.438622][ T29] audit: type=1326 audit(1731502223.714:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935946e719 code=0x7ffc0000 [ 36.461889][ T29] audit: type=1326 audit(1731502223.714:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f935946e719 code=0x7ffc0000 [ 36.485316][ T29] audit: type=1326 audit(1731502223.714:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935946e719 code=0x7ffc0000 [ 36.508778][ T29] audit: type=1326 audit(1731502223.764:886): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f935946e719 code=0x0 [ 36.531838][ T29] audit: type=1400 audit(1731502223.764:887): avc: denied { create } for pid=4667 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.613364][ T4680] loop3: detected capacity change from 0 to 512 [ 36.628013][ T4680] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.541: iget: bad extended attribute block 1 [ 36.642000][ T4680] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.541: couldn't read orphan inode 15 (err -117) [ 36.657557][ T4680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.681455][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.755538][ T4702] syz.3.550 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.955697][ T4729] loop4: detected capacity change from 0 to 1024 [ 36.962529][ T4729] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 37.102968][ T4755] loop1: detected capacity change from 0 to 512 [ 37.122520][ T4755] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 37.162660][ T4755] loop1: detected capacity change from 0 to 764 [ 37.316619][ T4771] loop3: detected capacity change from 0 to 4096 [ 37.344388][ T4771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.385449][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.421130][ T4790] IPv6: NLM_F_CREATE should be specified when creating new route [ 37.490222][ T4798] loop3: detected capacity change from 0 to 512 [ 37.497804][ T4798] EXT4-fs: Ignoring removed orlov option [ 37.504537][ T4798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.525508][ T4798] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.532504][ T4798] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.595: bg 0: block 248: padding at end of block bitmap is not set [ 37.547301][ T4798] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.595: Failed to acquire dquot type 1 [ 37.559157][ T4798] EXT4-fs (loop3): 1 truncate cleaned up [ 37.565585][ T4798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.587306][ T4798] EXT4-fs: Ignoring removed orlov option [ 37.593317][ T4798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.613215][ T4798] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.595: Abort forced by user [ 37.654848][ T4816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.665686][ T4798] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 37.695000][ T4798] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 37.705546][ T4798] ext4 filesystem being remounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.731526][ T4798] syz.3.595 (4798) used greatest stack depth: 9408 bytes left [ 37.740992][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.815951][ T4837] vlan2: entered allmulticast mode [ 37.872562][ T4847] loop1: detected capacity change from 0 to 2048 [ 37.899556][ T4847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.939733][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.039203][ T4867] tmpfs: Unknown parameter 'mpo' [ 38.170218][ T4892] netlink: 'syz.3.638': attribute type 4 has an invalid length. [ 38.248680][ T4908] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 38.282756][ T4914] dvmrp1: entered allmulticast mode [ 38.288752][ T4914] dvmrp1: left allmulticast mode [ 38.320639][ T4918] loop4: detected capacity change from 0 to 1024 [ 38.327447][ T4918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.334850][ T4918] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 38.368696][ T4918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.399123][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.416598][ T4931] __nla_validate_parse: 2 callbacks suppressed [ 38.416623][ T4931] netlink: 268 bytes leftover after parsing attributes in process `syz.0.656'. [ 38.450492][ T4938] syz.4.659[4938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.466898][ T4942] SELinux: Context system_u:object_r:auditd_var_run_t:s0 is not valid (left unmapped). [ 38.533664][ T4954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.667'. [ 38.660887][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.669529][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.778297][ T4979] program syz.4.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.854971][ T5007] syz_tun: entered promiscuous mode [ 38.867583][ T5011] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.991036][ T5032] netlink: 'syz.1.703': attribute type 4 has an invalid length. [ 39.018922][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 39.134770][ T5050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.712'. [ 39.228272][ T5061] hub 9-0:1.0: USB hub found [ 39.238029][ T5061] hub 9-0:1.0: 8 ports detected [ 39.290723][ T5081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.727'. [ 39.300434][ T5081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.727'. [ 39.322693][ T5081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.727'. [ 39.367079][ T5089] loop2: detected capacity change from 0 to 128 [ 39.384257][ T5081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.727'. [ 39.393165][ T5081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.727'. [ 39.412292][ T5089] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.420147][ T5089] FAT-fs (loop2): Filesystem has been set read-only [ 39.422566][ T5081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.727'. [ 39.457823][ T5089] syz.2.731: attempt to access beyond end of device [ 39.457823][ T5089] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 39.484796][ T5089] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.492645][ T5089] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.516757][ T5089] syz.2.731: attempt to access beyond end of device [ 39.516757][ T5089] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.530852][ T5089] syz.2.731: attempt to access beyond end of device [ 39.530852][ T5089] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.784998][ T5147] 9pnet_fd: p9_fd_create_tcp (5147): problem connecting socket to 127.0.0.1 [ 39.808402][ T5158] loop2: detected capacity change from 0 to 512 [ 39.831890][ T5158] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.864333][ T5158] EXT4-fs (loop2): 1 truncate cleaned up [ 39.870425][ T5158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.913772][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.942650][ T5180] loop2: detected capacity change from 0 to 512 [ 40.000323][ T5180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.012942][ T5180] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.040610][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.088499][ T5207] loop2: detected capacity change from 0 to 512 [ 40.098577][ T5207] EXT4-fs: Ignoring removed orlov option [ 40.108288][ T5207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.117420][ T5207] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.133023][ T5207] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.783: bg 0: block 248: padding at end of block bitmap is not set [ 40.151792][ T5207] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.783: Failed to acquire dquot type 1 [ 40.164925][ T5207] EXT4-fs (loop2): 1 truncate cleaned up [ 40.171211][ T5207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.193146][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.225137][ T5221] ebtables: ebtables: counters copy to user failed while replacing table [ 40.319861][ T5239] vlan2: entered promiscuous mode [ 40.358543][ T5247] syzkaller1: entered promiscuous mode [ 40.364091][ T5247] syzkaller1: entered allmulticast mode [ 40.416976][ T5255] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.472173][ T5255] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.545851][ T5255] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.593478][ T5255] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.628234][ T5288] loop3: detected capacity change from 0 to 128 [ 40.661221][ T5255] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.680360][ T5255] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.695577][ T5295] loop3: detected capacity change from 0 to 164 [ 40.705445][ T5255] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.715086][ T5295] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 40.741565][ T5255] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.961333][ T5339] netlink: 'syz.2.843': attribute type 153 has an invalid length. [ 41.224301][ T5373] loop2: detected capacity change from 0 to 512 [ 41.261792][ T5373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.275978][ T5373] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.299821][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.303394][ T5383] loop4: detected capacity change from 0 to 128 [ 41.331489][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 41.331501][ T29] audit: type=1400 audit(1731502228.634:1424): avc: denied { name_bind } for pid=5387 comm="syz.3.867" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.362658][ T29] audit: type=1400 audit(1731502228.634:1425): avc: denied { node_bind } for pid=5387 comm="syz.3.867" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 41.411073][ T5397] bpf_get_probe_write_proto: 8 callbacks suppressed [ 41.411086][ T5397] syz.0.869[5397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.418023][ T5397] syz.0.869[5397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.431628][ T5383] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.457258][ T5383] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.490748][ T5397] syz.0.869[5397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.493717][ T29] audit: type=1400 audit(1731502228.794:1426): avc: denied { write } for pid=5382 comm="syz.4.863" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.526678][ T29] audit: type=1400 audit(1731502228.794:1427): avc: denied { add_name } for pid=5382 comm="syz.4.863" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.527197][ T5401] loop2: detected capacity change from 0 to 1024 [ 41.547375][ T29] audit: type=1400 audit(1731502228.794:1428): avc: denied { create } for pid=5382 comm="syz.4.863" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 41.574315][ T29] audit: type=1400 audit(1731502228.794:1429): avc: denied { create } for pid=5382 comm="syz.4.863" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.597249][ T29] audit: type=1400 audit(1731502228.794:1430): avc: denied { read append open } for pid=5382 comm="syz.4.863" path="/197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_service_bytes_recursive" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.617971][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.645109][ T29] audit: type=1400 audit(1731502228.794:1431): avc: denied { write } for pid=5382 comm="syz.4.863" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 41.645142][ T29] audit: type=1400 audit(1731502228.794:1432): avc: denied { open } for pid=5382 comm="syz.4.863" path="/197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 41.645174][ T29] audit: type=1400 audit(1731502228.794:1433): avc: denied { ioctl } for pid=5382 comm="syz.4.863" path="/197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_service_bytes_recursive" dev="loop4" ino=13 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.724560][ T5401] EXT4-fs error (device loop2): __ext4_fill_super:5458: inode #2: comm syz.2.872: casefold flag without casefold feature [ 41.783828][ T5401] EXT4-fs (loop2): get root inode failed [ 41.786201][ T5397] netlink: 'syz.0.869': attribute type 3 has an invalid length. [ 41.789533][ T5401] EXT4-fs (loop2): mount failed [ 41.888642][ T5417] SELinux: policydb version 0 does not match my version range 15-33 [ 41.904959][ T5417] SELinux: failed to load policy [ 41.942440][ T5427] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.953255][ T5433] SELinux: failed to load policy [ 41.956017][ T5435] loop2: detected capacity change from 0 to 128 [ 41.966515][ T5427] smc: net device bond0 erased user defined pnetid SYZ0 [ 42.015720][ T5442] loop4: detected capacity change from 0 to 128 [ 42.049384][ T5439] loop3: detected capacity change from 0 to 128 [ 42.088544][ T5439] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.115243][ T5439] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.166773][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.249575][ T5473] SELinux: failed to load policy [ 42.266358][ T5475] loop1: detected capacity change from 0 to 1024 [ 42.272969][ T5475] EXT4-fs: Ignoring removed nobh option [ 42.278636][ T5475] EXT4-fs: Ignoring removed orlov option [ 42.295738][ T5475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.356561][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.496512][ T5492] geneve0: entered promiscuous mode [ 42.501754][ T5492] geneve0: entered allmulticast mode [ 42.537132][ T5512] loop3: detected capacity change from 0 to 512 [ 42.547347][ T5512] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.568388][ T5512] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 42.583962][ T5512] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.598070][ T5512] EXT4-fs (loop3): 1 truncate cleaned up [ 42.604442][ T5512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.631102][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.771194][ T5533] loop3: detected capacity change from 0 to 1024 [ 42.778947][ T5533] EXT4-fs: Ignoring removed i_version option [ 42.787962][ T5533] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.800811][ T5533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.825163][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.942106][ T5547] IPVS: Error connecting to the multicast addr [ 43.157855][ T5588] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 43.392566][ T5633] loop2: detected capacity change from 0 to 128 [ 43.405504][ T5633] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.414845][ T5633] vhci_hcd: invalid port number 219 [ 43.420078][ T5633] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 43.673436][ T5665] loop1: detected capacity change from 0 to 4096 [ 43.688694][ T5665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.734816][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.906185][ T3389] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 43.913893][ T3389] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 43.924939][ T3389] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 43.950328][ T3389] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 44.034878][ T5711] loop2: detected capacity change from 0 to 4096 [ 44.047171][ T5711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.169647][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.229026][ T5737] loop4: detected capacity change from 0 to 4096 [ 44.274401][ T5737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.294375][ T8] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 44.302037][ T8] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 44.311891][ T8] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 44.322027][ T8] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 44.474299][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.458754][ T5801] loop3: detected capacity change from 0 to 4096 [ 45.497086][ T3390] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 45.504892][ T3390] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 45.505061][ T5801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.513895][ T3390] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 45.546988][ T3390] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 45.596717][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.657595][ T3389] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 45.665408][ T3389] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 45.675390][ T3389] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 45.692372][ T3389] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 46.225612][ T5888] __nla_validate_parse: 16 callbacks suppressed [ 46.225661][ T5888] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 46.287857][ T5902] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 46.349706][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 46.349743][ T29] audit: type=1400 audit(1731502233.644:1968): avc: denied { open } for pid=5906 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.375290][ T29] audit: type=1400 audit(1731502233.644:1969): avc: denied { kernel } for pid=5906 comm="syz.3.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.460333][ T29] audit: type=1326 audit(1731502233.764:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 46.492355][ T29] audit: type=1326 audit(1731502233.794:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 46.515878][ T29] audit: type=1326 audit(1731502233.794:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 46.540227][ T29] audit: type=1326 audit(1731502233.844:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 46.563637][ T29] audit: type=1326 audit(1731502233.844:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 46.587831][ T29] audit: type=1326 audit(1731502233.894:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 46.611271][ T29] audit: type=1326 audit(1731502233.894:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 46.636006][ T29] audit: type=1326 audit(1731502233.894:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5923 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 46.678805][ T5940] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 47.130141][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 47.196328][ T5976] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 47.202874][ T5976] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.210478][ T5976] vhci_hcd vhci_hcd.0: Device attached [ 47.225675][ T5981] vhci_hcd: connection closed [ 47.225868][ T1364] vhci_hcd: stop threads [ 47.234988][ T1364] vhci_hcd: release socket [ 47.239521][ T1364] vhci_hcd: disconnect device [ 47.352158][ T6005] SELinux: failed to load policy [ 47.367182][ T6004] syz.1.1151[6004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.367293][ T6004] syz.1.1151[6004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.388776][ T6004] syz.1.1151[6004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.702544][ T6081] loop2: detected capacity change from 0 to 256 [ 47.878675][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 47.918890][ T6115] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 47.955056][ T6119] SET target dimension over the limit! [ 48.027210][ T6127] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 48.148229][ T6152] team0 (unregistering): Port device team_slave_0 removed [ 48.160986][ T6152] team0 (unregistering): Port device team_slave_1 removed [ 48.376899][ T6192] loop1: detected capacity change from 0 to 128 [ 48.384573][ T6192] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.404352][ T6192] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.456813][ T52] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.481188][ T6204] loop1: detected capacity change from 0 to 1024 [ 48.499896][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1239'. [ 48.509596][ T6204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.544230][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.608594][ T6225] syz.3.1245[6225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.608819][ T6225] syz.3.1245[6225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.621462][ T6225] syz.3.1245[6225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.645926][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 48.714905][ T6237] batadv1: entered promiscuous mode [ 48.723832][ T6237] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 48.782508][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.803239][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.828977][ T6252] loop1: detected capacity change from 0 to 1024 [ 48.840014][ T6252] EXT4-fs: Ignoring removed nobh option [ 48.860488][ T6252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.890266][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.025661][ T6280] loop2: detected capacity change from 0 to 256 [ 49.042772][ T6280] FAT-fs (loop2): IO charset maccyrillic not found [ 49.043693][ T6283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1269'. [ 49.058374][ T6283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1269'. [ 49.197727][ T24] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 49.205503][ T24] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 49.213764][ T24] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 49.222710][ T24] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 49.279835][ T6320] xt_hashlimit: max too large, truncated to 1048576 [ 49.366405][ T6331] loop2: detected capacity change from 0 to 512 [ 49.395696][ T6337] sg_write: data in/out 231/8 bytes for SCSI command 0xeb-- guessing data in; [ 49.395696][ T6337] program syz.0.1296 not setting count and/or reply_len properly [ 49.469121][ T6331] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1293: Failed to acquire dquot type 1 [ 49.485852][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 49.493002][ T6331] EXT4-fs (loop2): 1 truncate cleaned up [ 49.500950][ T6331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.514298][ T6331] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.565583][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.761202][ T6402] loop4: detected capacity change from 0 to 1024 [ 49.779639][ T6402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.844818][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.946836][ T6436] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 49.955705][ T6436] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 50.053780][ T6454] futex_wake_op: syz.2.1352 tries to shift op by 144; fix this program [ 50.111296][ T6467] syz.3.1358[6467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.111359][ T6467] syz.3.1358[6467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.127862][ T6468] loop2: detected capacity change from 0 to 512 [ 50.130949][ T6467] syz.3.1358[6467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.166374][ T6468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.198211][ T6468] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.266345][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.306015][ T6484] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 50.365664][ T6498] bond0: (slave vlan3): Opening slave failed [ 50.490202][ T6519] syz.4.1381[6519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.556699][ T6534] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 50.556843][ T6537] loop3: detected capacity change from 0 to 256 [ 50.857470][ T6588] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 50.928571][ T6606] loop3: detected capacity change from 0 to 256 [ 51.088156][ T6635] loop3: detected capacity change from 0 to 1024 [ 51.105369][ T6635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.117595][ T6635] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.142113][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.186031][ T6645] vxcan1: tx address claim with different name [ 51.222697][ T6651] netlink: 'syz.1.1452': attribute type 3 has an invalid length. [ 51.355066][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 51.355079][ T29] audit: type=1326 audit(1731502238.664:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f409e719 code=0x7ffc0000 [ 51.393282][ T29] audit: type=1326 audit(1731502238.694:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb7f409e719 code=0x7ffc0000 [ 51.416857][ T29] audit: type=1326 audit(1731502238.694:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.3.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f409e719 code=0x7ffc0000 [ 51.496069][ T29] audit: type=1400 audit(1731502238.804:2449): avc: denied { watch_reads } for pid=6674 comm="syz.3.1448" path="/297" dev="tmpfs" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 51.536294][ T29] audit: type=1400 audit(1731502238.844:2450): avc: denied { ioctl } for pid=6678 comm="syz.1.1449" path="socket:[14805]" dev="sockfs" ino=14805 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.571352][ T29] audit: type=1400 audit(1731502238.874:2451): avc: denied { setopt } for pid=6681 comm="syz.3.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.596705][ T6685] __nla_validate_parse: 7 callbacks suppressed [ 51.596719][ T6685] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1467'. [ 51.630902][ T29] audit: type=1400 audit(1731502238.934:2452): avc: denied { read } for pid=6686 comm="syz.3.1453" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.654325][ T29] audit: type=1400 audit(1731502238.934:2453): avc: denied { open } for pid=6686 comm="syz.3.1453" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.678073][ T29] audit: type=1326 audit(1731502238.934:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935946e719 code=0x7ffc0000 [ 51.701555][ T29] audit: type=1326 audit(1731502238.934:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935946e719 code=0x7ffc0000 [ 52.031484][ T6717] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.038952][ T6717] vhci_hcd: invalid port number 219 [ 52.044183][ T6717] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 52.676600][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'. [ 52.685679][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1504'. [ 52.763269][ T6803] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 52.812300][ T6807] netlink: 'syz.0.1512': attribute type 4 has an invalid length. [ 52.820100][ T6807] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1512'. [ 52.883341][ T6817] bpf_get_probe_write_proto: 2 callbacks suppressed [ 52.883354][ T6817] syz.3.1517[6817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.891121][ T6817] syz.3.1517[6817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.902949][ T6817] syz.3.1517[6817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.997137][ T6835] syz.3.1525[6835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.008633][ T6835] syz.3.1525[6835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.020233][ T6835] syz.3.1525[6835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.032952][ T6837] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 53.328118][ T6865] Cannot find add_set index 0 as target [ 53.367125][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 53.459678][ T6890] syz.4.1552[6890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.459975][ T6890] syz.4.1552[6890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.473851][ T6890] syz.4.1552[6890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.414646][ T7006] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.534911][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 54.543788][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 54.958808][ T7053] vlan2: entered allmulticast mode [ 55.012904][ T7066] loop2: detected capacity change from 0 to 2048 [ 55.063262][ T7066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.088146][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.132360][ T7079] tmpfs: Unknown parameter 'mpo' [ 55.143313][ T7081] IPVS: Error connecting to the multicast addr [ 55.393203][ T7120] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.530919][ T7136] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1668'. [ 55.604794][ T7151] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 55.980790][ T7225] syz_tun: entered promiscuous mode [ 56.018824][ T7228] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.106790][ T7236] program syz.3.1703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.210412][ T7244] netlink: 'syz.0.1715': attribute type 4 has an invalid length. [ 56.229603][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 56.342497][ T7267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1725'. [ 56.420294][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 56.420307][ T29] audit: type=1400 audit(1731502243.724:2857): avc: denied { create } for pid=7276 comm="syz.1.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.490260][ T29] audit: type=1400 audit(1731502243.784:2858): avc: denied { write } for pid=7276 comm="syz.1.1731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.521110][ T29] audit: type=1400 audit(1731502243.824:2859): avc: denied { execute } for pid=7290 comm="syz.4.1737" name="file1" dev="tmpfs" ino=1845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.580310][ T7300] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 56.589619][ T29] audit: type=1400 audit(1731502243.894:2860): avc: denied { append } for pid=7297 comm="syz.0.1738" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.616532][ T7298] hub 9-0:1.0: USB hub found [ 56.623164][ T7298] hub 9-0:1.0: 8 ports detected [ 56.651913][ T29] audit: type=1326 audit(1731502243.954:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 56.698771][ T29] audit: type=1326 audit(1731502243.954:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 56.722317][ T29] audit: type=1326 audit(1731502243.984:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 56.745861][ T29] audit: type=1326 audit(1731502243.984:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 56.758641][ T7318] syz.0.1752[7318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.769328][ T29] audit: type=1326 audit(1731502243.984:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 56.785707][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 56.804131][ T29] audit: type=1326 audit(1731502243.984:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7309 comm="syz.1.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfcbe719 code=0x7ffc0000 [ 56.813163][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 56.845687][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 56.867875][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 56.876945][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 56.886724][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 56.928002][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 56.937147][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 56.947740][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1751'. [ 56.968916][ T7332] loop2: detected capacity change from 0 to 1024 [ 56.975743][ T7332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.999586][ T7332] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 57.058481][ T7332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.083011][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.241064][ T7378] loop4: detected capacity change from 0 to 512 [ 57.280576][ T7378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.299057][ T7378] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.329155][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.367554][ T7391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.425347][ T7397] loop4: detected capacity change from 0 to 512 [ 57.439235][ T7397] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.457755][ T7397] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.1785: iget: bad i_size value: -6917529027641081756 [ 57.476693][ T7397] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1785: couldn't read orphan inode 17 (err -117) [ 57.489306][ T7397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.509298][ T7397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1785: bg 0: block 65: padding at end of block bitmap is not set [ 57.530223][ T7397] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1785: Failed to acquire dquot type 0 [ 57.561560][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.684418][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.693111][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.746724][ T7440] ebtables: ebtables: counters copy to user failed while replacing table [ 57.866399][ T7462] vlan3: entered promiscuous mode [ 58.006440][ T7493] loop3: detected capacity change from 0 to 128 [ 58.020250][ T7493] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 58.028122][ T7493] FAT-fs (loop3): Filesystem has been set read-only [ 58.034834][ T7493] syz.3.1826: attempt to access beyond end of device [ 58.034834][ T7493] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 58.048552][ T7493] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 58.056376][ T7493] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 58.064371][ T7493] syz.3.1826: attempt to access beyond end of device [ 58.064371][ T7493] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.077606][ T7493] syz.3.1826: attempt to access beyond end of device [ 58.077606][ T7493] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.091179][ T7493] syz.3.1826: attempt to access beyond end of device [ 58.091179][ T7493] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 58.115595][ T7495] bpf_get_probe_write_proto: 5 callbacks suppressed [ 58.115606][ T7495] syz.4.1828[7495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.122259][ T7495] syz.4.1828[7495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.133747][ T7495] syz.4.1828[7495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.245374][ T7504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1831'. [ 58.382140][ T7525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.436865][ T7525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.488185][ T7525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.536964][ T7525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.589647][ T7525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.600322][ T7525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.611278][ T7525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.621569][ T7525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.822045][ T7551] 9pnet_fd: p9_fd_create_tcp (7551): problem connecting socket to 127.0.0.1 [ 58.843155][ T7549] blktrace: Concurrent blktraces are not allowed on loop3 [ 58.887621][ T7562] netlink: 'syz.0.1858': attribute type 153 has an invalid length. [ 59.475781][ T7646] SELinux: failed to load policy [ 59.561050][ T7657] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.572509][ T7657] smc: net device bond0 erased user defined pnetid SYZ0 [ 59.583559][ T7668] loop2: detected capacity change from 0 to 128 [ 59.597897][ T7668] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.610498][ T7668] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.797132][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.951622][ T7717] loop4: detected capacity change from 0 to 512 [ 59.974290][ T7717] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.019061][ T7717] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.038219][ T7717] EXT4-fs (loop4): 1 truncate cleaned up [ 60.044375][ T7717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.056897][ T7694] geneve0: entered promiscuous mode [ 60.062104][ T7694] geneve0: entered allmulticast mode [ 60.111954][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.152659][ T7743] loop4: detected capacity change from 0 to 1024 [ 60.166861][ T7743] EXT4-fs: Ignoring removed i_version option [ 60.173936][ T7743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.187792][ T7743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.214173][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.214267][ T7751] IPVS: Error connecting to the multicast addr [ 61.107947][ T7828] loop2: detected capacity change from 0 to 1024 [ 61.118092][ T7828] EXT4-fs: Ignoring removed nobh option [ 61.123680][ T7828] EXT4-fs: Ignoring removed orlov option [ 61.215654][ T7844] loop4: detected capacity change from 0 to 128 [ 61.226328][ T7844] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.235861][ T7844] vhci_hcd: invalid port number 219 [ 61.241084][ T7844] vhci_hcd: default hub control req: ecdb v6ab1 i00db l1556 [ 61.846586][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 61.846600][ T29] audit: type=1326 audit(1731502249.154:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e34e719 code=0x7ffc0000 [ 61.888336][ T29] audit: type=1326 audit(1731502249.184:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e34e719 code=0x7ffc0000 [ 61.911794][ T29] audit: type=1326 audit(1731502249.184:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e34e719 code=0x7ffc0000 [ 61.935234][ T29] audit: type=1326 audit(1731502249.184:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e34e719 code=0x7ffc0000 [ 61.958691][ T29] audit: type=1326 audit(1731502249.184:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e34e719 code=0x7ffc0000 [ 61.982098][ T29] audit: type=1326 audit(1731502249.184:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e34e719 code=0x7ffc0000 [ 62.005578][ T29] audit: type=1326 audit(1731502249.184:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e34e719 code=0x7ffc0000 [ 62.029073][ T29] audit: type=1326 audit(1731502249.184:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948e34e719 code=0x7ffc0000 [ 62.052474][ T29] audit: type=1326 audit(1731502249.184:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948e34e719 code=0x7ffc0000 [ 62.075926][ T29] audit: type=1326 audit(1731502249.184:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7856 comm="syz.2.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f948e34e719 code=0x7ffc0000 [ 62.183852][ T7877] syz.4.2007[7877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.183931][ T7877] syz.4.2007[7877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.196937][ T7875] block device autoloading is deprecated and will be removed. [ 62.221080][ T7877] syz.4.2007[7877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.223890][ T7877] netlink: 'syz.4.2007': attribute type 3 has an invalid length. [ 62.323354][ T3016] ================================================================== [ 62.331453][ T3016] BUG: KCSAN: data-race in dont_mount / step_into [ 62.337888][ T3016] [ 62.340215][ T3016] read-write to 0xffff888105b599c0 of 4 bytes by task 3307 on cpu 1: [ 62.348280][ T3016] dont_mount+0x2a/0x40 [ 62.352709][ T3016] vfs_unlink+0x298/0x430 [ 62.357040][ T3016] do_unlinkat+0x236/0x4c0 [ 62.361467][ T3016] __x64_sys_unlink+0x2e/0x40 [ 62.366153][ T3016] x64_sys_call+0x280f/0x2d60 [ 62.370834][ T3016] do_syscall_64+0xc9/0x1c0 [ 62.375321][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.381200][ T3016] [ 62.383510][ T3016] read to 0xffff888105b599c0 of 4 bytes by task 3016 on cpu 0: [ 62.391030][ T3016] step_into+0x12f/0x810 [ 62.395250][ T3016] walk_component+0x169/0x230 [ 62.399906][ T3016] path_lookupat+0x10a/0x2b0 [ 62.404478][ T3016] filename_lookup+0x127/0x300 [ 62.409224][ T3016] do_readlinkat+0x89/0x210 [ 62.413709][ T3016] __x64_sys_readlink+0x47/0x60 [ 62.418541][ T3016] x64_sys_call+0x13c3/0x2d60 [ 62.423199][ T3016] do_syscall_64+0xc9/0x1c0 [ 62.427683][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.433561][ T3016] [ 62.435863][ T3016] value changed: 0x00600008 -> 0x00008008 [ 62.441557][ T3016] [ 62.443859][ T3016] Reported by Kernel Concurrency Sanitizer on: [ 62.449989][ T3016] CPU: 0 UID: 0 PID: 3016 Comm: udevd Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 62.460202][ T3016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.470232][ T3016] ================================================================== [ 62.480993][ T7893] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 62.489204][ T7893] netdevsim netdevsim3: Direct firmware load for . failed with error -22