last executing test programs: 1.319977719s ago: executing program 0 (id=318): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280340001800c000100636f756e746572000400028008000340000001"], 0xcc}}, 0x20050800) 1.168429892s ago: executing program 0 (id=324): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) 1.137671412s ago: executing program 0 (id=326): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e1d, @remote}, 0x10) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x0, 0x2}) 1.085631283s ago: executing program 0 (id=330): creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x83) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.052769214s ago: executing program 0 (id=332): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$nfs(&(0x7f0000000040)='\x8b\xb8\x98\x97\xb9\xdc\x80?!\xbc\x9a\xdf\xbc\x01\xec\xd8!Y\xc3?\xa5\x1d\x1d}8\xf0T?dw\xe2i\xe8q: \xed\xd5!\x8d+\xda\x84\xea\x8d\x15\xdd\t\v\x11\x97\xc9\x06\xba\x8f\x91e(\r\x1a\xbfZX\x16', &(0x7f0000000500)='./file0\x00', 0x0, 0xa55000, 0x0) 979.870395ms ago: executing program 0 (id=335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000510850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000800)="b80000050000000073c430f8a2e6", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 502.136092ms ago: executing program 1 (id=349): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 442.254643ms ago: executing program 3 (id=351): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x106c0e0, &(0x7f00000006c0)={[{'inode64'}]}) 429.970733ms ago: executing program 1 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 372.138214ms ago: executing program 2 (id=354): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x0, 0x401, 0xbb}) 371.807504ms ago: executing program 3 (id=355): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 366.761074ms ago: executing program 1 (id=356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 350.203674ms ago: executing program 4 (id=357): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 304.639665ms ago: executing program 3 (id=358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000883ec0000000000010000000000000400048005000300010000000900010073797a3000000000060002"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000020803"], 0x14}}, 0x40000) 298.594865ms ago: executing program 4 (id=359): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 262.681536ms ago: executing program 2 (id=360): unshare(0x20000400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 257.901426ms ago: executing program 3 (id=361): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x52, 0x1, 0x70bd05, 0x25dfdbfb, {0x2}, [@typed={0x4, 0x1}]}, 0x18}}, 0x40804) 247.896016ms ago: executing program 4 (id=362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x0, 0x6affffff, 0x3403000b, 0x138, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0xff, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x54}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xff, 'gretap0\x00', 'ipvlan1\x00', {0xff}, {}, 0x5e, 0x4, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x26b, 0x2, 0xffffff53, 'snmp\x00', 'syz0\x00', {0xcc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 204.443537ms ago: executing program 4 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000327c00000000000a7c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000005000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e080003400000001710000180070001007274"], 0xa4}}, 0x0) 190.854247ms ago: executing program 2 (id=364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x18) time(0x0) 188.395597ms ago: executing program 3 (id=365): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="1c0000005e007fa69801d76ab0a272a2d27cfc05a4313bb97f499b2ade", 0x1d}], 0x1}, 0x0) 122.689428ms ago: executing program 1 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="080002"], 0x50}}, 0x0) 122.484278ms ago: executing program 2 (id=367): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) 90.428308ms ago: executing program 4 (id=368): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x400, 0x3, 0x0, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"}) 66.165368ms ago: executing program 4 (id=369): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) 65.843099ms ago: executing program 3 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x94, r1, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x0) 59.113909ms ago: executing program 1 (id=371): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 49.900109ms ago: executing program 2 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 9.297459ms ago: executing program 1 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) 0s ago: executing program 2 (id=374): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'team_slave_0\x00'}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 33.579825][ T29] audit: type=1400 audit(1750722750.867:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.581044][ T3295] cgroup: Unknown subsys name 'net' [ 33.602580][ T29] audit: type=1400 audit(1750722750.867:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.629983][ T29] audit: type=1400 audit(1750722750.897:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.788309][ T3295] cgroup: Unknown subsys name 'cpuset' [ 33.794623][ T3295] cgroup: Unknown subsys name 'rlimit' [ 33.966829][ T29] audit: type=1400 audit(1750722751.247:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.990149][ T29] audit: type=1400 audit(1750722751.247:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.010645][ T29] audit: type=1400 audit(1750722751.247:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.023398][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.031074][ T29] audit: type=1400 audit(1750722751.247:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.060030][ T29] audit: type=1400 audit(1750722751.247:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.085204][ T29] audit: type=1400 audit(1750722751.247:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.093995][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.109132][ T29] audit: type=1400 audit(1750722751.327:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.244249][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.255237][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.279627][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.348943][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.356269][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.363593][ T3306] bridge_slave_0: entered allmulticast mode [ 35.370187][ T3306] bridge_slave_0: entered promiscuous mode [ 35.394587][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.401741][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.408922][ T3306] bridge_slave_1: entered allmulticast mode [ 35.415413][ T3306] bridge_slave_1: entered promiscuous mode [ 35.445324][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.452517][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.459738][ T3305] bridge_slave_0: entered allmulticast mode [ 35.466098][ T3305] bridge_slave_0: entered promiscuous mode [ 35.477378][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.484581][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.491749][ T3316] bridge_slave_0: entered allmulticast mode [ 35.498212][ T3316] bridge_slave_0: entered promiscuous mode [ 35.506812][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.514012][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.521217][ T3316] bridge_slave_1: entered allmulticast mode [ 35.527644][ T3316] bridge_slave_1: entered promiscuous mode [ 35.538323][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.545623][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.552974][ T3305] bridge_slave_1: entered allmulticast mode [ 35.559518][ T3305] bridge_slave_1: entered promiscuous mode [ 35.568428][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.589738][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.600378][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.610670][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.625250][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.638054][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.680486][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.700102][ T3306] team0: Port device team_slave_0 added [ 35.706482][ T3316] team0: Port device team_slave_0 added [ 35.713273][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.732815][ T3306] team0: Port device team_slave_1 added [ 35.744190][ T3316] team0: Port device team_slave_1 added [ 35.757320][ T3305] team0: Port device team_slave_0 added [ 35.777576][ T3305] team0: Port device team_slave_1 added [ 35.786001][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.792996][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.819039][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.849268][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.856251][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.882417][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.893556][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.900563][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.926794][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.938310][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.945283][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.971824][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.002465][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.009621][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.016876][ T3312] bridge_slave_0: entered allmulticast mode [ 36.023540][ T3312] bridge_slave_0: entered promiscuous mode [ 36.030254][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.037298][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.063311][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.074589][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.081587][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.107566][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.118554][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.125660][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.132921][ T3311] bridge_slave_0: entered allmulticast mode [ 36.139413][ T3311] bridge_slave_0: entered promiscuous mode [ 36.146516][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.153643][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.160848][ T3311] bridge_slave_1: entered allmulticast mode [ 36.167311][ T3311] bridge_slave_1: entered promiscuous mode [ 36.184468][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.191744][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.198984][ T3312] bridge_slave_1: entered allmulticast mode [ 36.205476][ T3312] bridge_slave_1: entered promiscuous mode [ 36.226538][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.251724][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.268555][ T3306] hsr_slave_0: entered promiscuous mode [ 36.274549][ T3306] hsr_slave_1: entered promiscuous mode [ 36.281717][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.298627][ T3316] hsr_slave_0: entered promiscuous mode [ 36.304645][ T3316] hsr_slave_1: entered promiscuous mode [ 36.310714][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.318353][ T3316] Cannot create hsr debugfs directory [ 36.324748][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.354423][ T3305] hsr_slave_0: entered promiscuous mode [ 36.360459][ T3305] hsr_slave_1: entered promiscuous mode [ 36.366235][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.373849][ T3305] Cannot create hsr debugfs directory [ 36.413695][ T3312] team0: Port device team_slave_0 added [ 36.420483][ T3311] team0: Port device team_slave_0 added [ 36.426864][ T3312] team0: Port device team_slave_1 added [ 36.446917][ T3311] team0: Port device team_slave_1 added [ 36.486657][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.493725][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.519767][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.533206][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.540226][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.566317][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.579811][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.586794][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.612843][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.626029][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.633039][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.659452][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.737825][ T3311] hsr_slave_0: entered promiscuous mode [ 36.743838][ T3311] hsr_slave_1: entered promiscuous mode [ 36.749827][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.757394][ T3311] Cannot create hsr debugfs directory [ 36.781810][ T3312] hsr_slave_0: entered promiscuous mode [ 36.787948][ T3312] hsr_slave_1: entered promiscuous mode [ 36.793940][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.801772][ T3312] Cannot create hsr debugfs directory [ 36.875170][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.886345][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.909467][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.921008][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.964084][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.972966][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.983104][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.993579][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.018960][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.028945][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.042443][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.051952][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.093884][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.115799][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.124854][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.136282][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.149430][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.190941][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.200058][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.214272][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.222946][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.230485][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.239555][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.258774][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.265946][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.290822][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.298068][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.312714][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.325531][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.332715][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.345571][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.366916][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.374136][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.385015][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.395522][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.412471][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.441320][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.451174][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.458393][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.469206][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.476313][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.495421][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.505909][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.542207][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.559529][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.566718][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.578158][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.592015][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.599192][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.650228][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.679761][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.691363][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.719972][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.735643][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.764343][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.771572][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.802269][ T3305] veth0_vlan: entered promiscuous mode [ 37.811891][ T3305] veth1_vlan: entered promiscuous mode [ 37.822031][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.829183][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.860586][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.875882][ T3306] veth0_vlan: entered promiscuous mode [ 37.890081][ T3305] veth0_macvtap: entered promiscuous mode [ 37.904548][ T3305] veth1_macvtap: entered promiscuous mode [ 37.913070][ T3306] veth1_vlan: entered promiscuous mode [ 37.929826][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.951663][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.972680][ T3306] veth0_macvtap: entered promiscuous mode [ 37.994905][ T3306] veth1_macvtap: entered promiscuous mode [ 38.003027][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.017037][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.026041][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.034890][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.043714][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.052607][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.071332][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.096267][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.119305][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.129155][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.137965][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.146680][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.156897][ T3311] veth0_vlan: entered promiscuous mode [ 38.163591][ T3316] veth0_vlan: entered promiscuous mode [ 38.182870][ T3311] veth1_vlan: entered promiscuous mode [ 38.190418][ T3316] veth1_vlan: entered promiscuous mode [ 38.231960][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.247390][ T3316] veth0_macvtap: entered promiscuous mode [ 38.257003][ T3316] veth1_macvtap: entered promiscuous mode [ 38.274575][ T3311] veth0_macvtap: entered promiscuous mode [ 38.295342][ T3311] veth1_macvtap: entered promiscuous mode [ 38.330637][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.347150][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.362869][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.374322][ T3312] veth0_vlan: entered promiscuous mode [ 38.396630][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.406040][ T3312] veth1_vlan: entered promiscuous mode [ 38.421936][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.430740][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.439574][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.448416][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.464350][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.473709][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.482518][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.491422][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.515214][ T3312] veth0_macvtap: entered promiscuous mode [ 38.538714][ T3312] veth1_macvtap: entered promiscuous mode [ 38.593600][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.615389][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.615612][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 38.615629][ T29] audit: type=1400 audit(1750722755.897:106): avc: denied { map_create } for pid=3494 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.635813][ T3312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.647841][ T29] audit: type=1400 audit(1750722755.897:107): avc: denied { map_read map_write } for pid=3494 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.656544][ T3312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.685113][ T3312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.693932][ T3312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.707937][ T3497] capability: warning: `syz.1.13' uses deprecated v2 capabilities in a way that may be insecure [ 38.723861][ T3497] program syz.1.13 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.795056][ T29] audit: type=1400 audit(1750722755.987:108): avc: denied { read } for pid=3496 comm="syz.1.13" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.818457][ T29] audit: type=1400 audit(1750722755.987:109): avc: denied { open } for pid=3496 comm="syz.1.13" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.842619][ T29] audit: type=1400 audit(1750722756.067:110): avc: denied { allowed } for pid=3505 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.861999][ T29] audit: type=1400 audit(1750722756.067:111): avc: denied { create } for pid=3505 comm="syz.3.15" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.908007][ T3518] netlink: 'syz.4.20': attribute type 2 has an invalid length. [ 38.976644][ T29] audit: type=1400 audit(1750722756.127:112): avc: denied { open } for pid=3516 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.995913][ T29] audit: type=1400 audit(1750722756.127:113): avc: denied { kernel } for pid=3516 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.015592][ T29] audit: type=1400 audit(1750722756.177:114): avc: denied { create } for pid=3513 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.036257][ T29] audit: type=1400 audit(1750722756.197:115): avc: denied { write } for pid=3513 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.171565][ T3544] loop3: detected capacity change from 0 to 512 [ 39.184341][ T3544] EXT4-fs: Ignoring removed orlov option [ 39.192693][ T3544] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 39.226899][ T3544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 39.261489][ T3544] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.31: corrupted in-inode xattr: e_value size too large [ 39.261663][ T3556] loop4: detected capacity change from 0 to 512 [ 39.306113][ T3560] loop2: detected capacity change from 0 to 512 [ 39.313693][ T3560] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.326847][ T3560] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.342437][ T3560] EXT4-fs (loop2): 1 orphan inode deleted [ 39.348733][ T3544] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.31: couldn't read orphan inode 15 (err -117) [ 39.349450][ T3544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.360543][ T3560] EXT4-fs (loop2): 1 truncate cleaned up [ 39.361088][ T3560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.431388][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.479029][ T3556] EXT4-fs (loop4): 1 orphan inode deleted [ 39.485254][ T3556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.490111][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.513332][ T3571] loop0: detected capacity change from 0 to 164 [ 39.520315][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 39.525545][ T3556] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.571297][ T3571] Unable to read rock-ridge attributes [ 39.599684][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.735310][ T3594] netlink: 'syz.4.51': attribute type 2 has an invalid length. [ 39.743002][ T3594] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51'. [ 39.763022][ T3597] netlink: 44 bytes leftover after parsing attributes in process `syz.1.52'. [ 39.771951][ T3597] netlink: 43 bytes leftover after parsing attributes in process `syz.1.52'. [ 39.780944][ T3597] netlink: 'syz.1.52': attribute type 5 has an invalid length. [ 39.788664][ T3597] netlink: 43 bytes leftover after parsing attributes in process `syz.1.52'. [ 39.789023][ T3598] SELinux: Context system_u:object_r:update_modules_exec_t:s0 is not valid (left unmapped). [ 39.834211][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 39.889888][ T3608] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 39.937465][ T3612] loop2: detected capacity change from 0 to 1024 [ 39.972628][ T3612] EXT4-fs: Ignoring removed bh option [ 39.998248][ T3612] EXT4-fs: inline encryption not supported [ 40.038521][ T3612] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.080547][ T3612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 40.096324][ T3612] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.62: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.116047][ T3612] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.62: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.129144][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'. [ 40.140666][ T3612] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.62: Failed to acquire dquot type 0 [ 40.156614][ T3612] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 40.171899][ T3612] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.62: mark_inode_dirty error [ 40.189027][ T3612] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 40.189077][ T3612] EXT4-fs (loop2): 1 orphan inode deleted [ 40.189532][ T3612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.190166][ T380] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.190257][ T380] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 40.293961][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.294544][ T3306] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 40.295693][ T3306] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 40.295780][ T3306] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 40.447370][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 40.455382][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 40.481505][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 40.495469][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 40.638579][ T3683] futex_wake_op: syz.3.92 tries to shift op by -1; fix this program [ 40.689388][ T3685] loop0: detected capacity change from 0 to 512 [ 40.757568][ T3685] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 40.787958][ T3685] EXT4-fs (loop0): invalid journal inode [ 40.793752][ T3685] EXT4-fs (loop0): can't get journal size [ 40.813957][ T3685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 40.838252][ T3685] System zones: 1-12, 13-13 [ 40.850451][ T3685] EXT4-fs (loop0): 1 truncate cleaned up [ 40.868123][ T3685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.995964][ T3721] capability: warning: `syz.4.108' uses 32-bit capabilities (legacy support in use) [ 41.006636][ T3721] program syz.4.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.053261][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.242440][ T3739] loop0: detected capacity change from 0 to 128 [ 41.354959][ T3745] loop0: detected capacity change from 0 to 256 [ 41.403447][ T3745] ======================================================= [ 41.403447][ T3745] WARNING: The mand mount option has been deprecated and [ 41.403447][ T3745] and is ignored by this kernel. Remove the mand [ 41.403447][ T3745] option from the mount to silence this warning. [ 41.403447][ T3745] ======================================================= [ 41.596699][ T3745] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 41.694008][ T3766] loop4: detected capacity change from 0 to 512 [ 41.746080][ T3766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.836432][ T3766] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.953594][ T3766] EXT4-fs (loop4): 1 truncate cleaned up [ 41.970513][ T3766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.028287][ T3784] loop2: detected capacity change from 0 to 1024 [ 42.042990][ T3784] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.058472][ T3784] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.137: Invalid block bitmap block 0 in block_group 0 [ 42.073871][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.073957][ T3784] EXT4-fs (loop2): Remounting filesystem read-only [ 42.091306][ T3784] EXT4-fs (loop2): 1 orphan inode deleted [ 42.097986][ T3784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.140717][ T3784] syz.2.137 (3784) used greatest stack depth: 9336 bytes left [ 42.182135][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.725663][ T3872] hub 9-0:1.0: USB hub found [ 42.730562][ T3872] hub 9-0:1.0: 8 ports detected [ 42.806792][ T3882] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 42.816578][ T3882] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 42.934255][ T3899] loop1: detected capacity change from 0 to 1024 [ 42.960094][ T3899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.009862][ T3910] loop2: detected capacity change from 0 to 512 [ 43.017655][ T3910] EXT4-fs: Ignoring removed bh option [ 43.030311][ T3910] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 43.046343][ T3910] EXT4-fs (loop2): 1 truncate cleaned up [ 43.067890][ T3910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.112168][ T3918] can0: slcan on ptm0. [ 43.121508][ T3910] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 43.167294][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.177649][ T3917] can0 (unregistered): slcan off ptm0. [ 43.191454][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.213148][ T3926] loop1: detected capacity change from 0 to 512 [ 43.260680][ T3926] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.201: bg 0: block 5: invalid block bitmap [ 43.261112][ T3926] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 43.261245][ T3926] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.201: invalid indirect mapped block 3 (level 2) [ 43.261459][ T3926] EXT4-fs (loop1): 2 truncates cleaned up [ 43.261936][ T3926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.268625][ T3928] loop3: detected capacity change from 0 to 2048 [ 43.302825][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.304588][ T3562] Alternate GPT is invalid, using primary GPT. [ 43.304821][ T3562] loop3: p2 p3 p7 [ 43.307513][ C1] hrtimer: interrupt took 29655 ns [ 43.351532][ T3928] Alternate GPT is invalid, using primary GPT. [ 43.351738][ T3928] loop3: p2 p3 p7 [ 43.450083][ T2995] Alternate GPT is invalid, using primary GPT. [ 43.450263][ T2995] loop3: p2 p3 p7 [ 43.462573][ T3951] loop2: detected capacity change from 0 to 256 [ 43.463144][ T3951] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.489786][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 43.497087][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 43.527909][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 43.532517][ T3561] udevd[3561]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 43.555045][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 43.561024][ T3561] udevd[3561]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 43.629879][ T3965] loop2: detected capacity change from 0 to 7 [ 43.631539][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.631574][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 43.632780][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.723272][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 43.731275][ T3965] loop2: unable to read partition table [ 43.731303][ T3965] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 43.754082][ T3976] loop3: detected capacity change from 0 to 128 [ 43.754461][ T3976] EXT4-fs: Ignoring removed nobh option [ 43.755999][ T3976] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.756199][ T3976] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.758888][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 43.758903][ T29] audit: type=1400 audit(1750722761.047:219): avc: denied { create } for pid=3975 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.759976][ T29] audit: type=1400 audit(1750722761.047:220): avc: denied { write } for pid=3975 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.760049][ T29] audit: type=1400 audit(1750722761.047:221): avc: denied { nlmsg_write } for pid=3975 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.781754][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.853608][ T29] audit: type=1400 audit(1750722761.137:222): avc: denied { ioctl } for pid=3983 comm="syz.2.219" path="socket:[6401]" dev="sockfs" ino=6401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.853855][ T3984] batadv0: entered allmulticast mode [ 44.122129][ T29] audit: type=1400 audit(1750722761.407:223): avc: denied { read write } for pid=4010 comm="syz.0.230" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 44.122221][ T29] audit: type=1400 audit(1750722761.407:224): avc: denied { open } for pid=4010 comm="syz.0.230" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 44.369071][ T29] audit: type=1400 audit(1750722761.657:225): avc: denied { map } for pid=4033 comm="syz.0.241" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.369142][ T29] audit: type=1400 audit(1750722761.657:226): avc: denied { execute } for pid=4033 comm="syz.0.241" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.392950][ T29] audit: type=1400 audit(1750722761.657:227): avc: denied { ioctl } for pid=4033 comm="syz.0.241" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.406102][ T4036] loop1: detected capacity change from 0 to 2048 [ 44.490933][ T4036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.504339][ T4036] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.242: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 44.592402][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.622967][ T29] audit: type=1400 audit(1750722761.907:228): avc: denied { read } for pid=4048 comm="syz.4.247" path="socket:[5559]" dev="sockfs" ino=5559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.814706][ T4071] loop0: detected capacity change from 0 to 764 [ 44.847786][ T4071] rock: directory entry would overflow storage [ 44.854018][ T4071] rock: sig=0x4654, size=5, remaining=4 [ 45.028772][ T4091] __nla_validate_parse: 5 callbacks suppressed [ 45.028873][ T4091] netlink: 44 bytes leftover after parsing attributes in process `syz.2.268'. [ 45.106160][ T4096] loop0: detected capacity change from 0 to 1024 [ 45.113193][ T4096] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 45.113193][ T4096] [ 45.124188][ T4096] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 45.320961][ T4116] netdevsim netdevsim0: Direct firmware load for À failed with error -2 [ 45.372724][ T4124] netlink: 204 bytes leftover after parsing attributes in process `syz.0.284'. [ 45.609001][ T4156] loop2: detected capacity change from 0 to 164 [ 45.691650][ T4170] loop3: detected capacity change from 0 to 128 [ 45.715065][ T4156] Unable to read rock-ridge attributes [ 45.742011][ T4156] Unable to read rock-ridge attributes [ 45.754624][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 45.788289][ T4170] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.848798][ T4170] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.890473][ T4170] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.307: No space for directory leaf checksum. Please run e2fsck -D. [ 45.905915][ T4170] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.307: Directory block failed checksum [ 45.934420][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 45.944479][ T4199] netlink: 96 bytes leftover after parsing attributes in process `syz.4.320'. [ 45.953586][ T4199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 45.965459][ T4199] vlan2: entered allmulticast mode [ 45.970827][ T4199] gretap0: entered allmulticast mode [ 46.000214][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.111583][ T4217] loop1: detected capacity change from 0 to 128 [ 46.134366][ T4213] loop2: detected capacity change from 0 to 512 [ 46.139200][ T4222] loop0: detected capacity change from 0 to 256 [ 46.176162][ T4213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.190100][ T4217] syz.1.328: attempt to access beyond end of device [ 46.190100][ T4217] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 46.196178][ T4213] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.222614][ T4217] syz.1.328: attempt to access beyond end of device [ 46.222614][ T4217] loop1: rw=2049, sector=169, nr_sectors = 16 limit=128 [ 46.223648][ T4227] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 46.236191][ T4217] syz.1.328: attempt to access beyond end of device [ 46.236191][ T4217] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 46.259308][ T4217] syz.1.328: attempt to access beyond end of device [ 46.259308][ T4217] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 46.272835][ T4217] syz.1.328: attempt to access beyond end of device [ 46.272835][ T4217] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 46.286623][ T4217] syz.1.328: attempt to access beyond end of device [ 46.286623][ T4217] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 46.291256][ T4213] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.329: Failed to acquire dquot type 1 [ 46.300511][ T4217] syz.1.328: attempt to access beyond end of device [ 46.300511][ T4217] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 46.324927][ T4217] syz.1.328: attempt to access beyond end of device [ 46.324927][ T4217] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 46.342906][ T4230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.355861][ T4231] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 46.373973][ T4217] syz.1.328: attempt to access beyond end of device [ 46.373973][ T4217] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 46.446371][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.505843][ T4244] loop2: detected capacity change from 0 to 1024 [ 46.598074][ T4244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.660531][ T4260] loop4: detected capacity change from 0 to 736 [ 46.703515][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.856915][ T4278] program syz.2.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.018330][ T4299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 47.027273][ T4299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 47.071856][ T4308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 47.154552][ T4314] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 47.169610][ T2995] ================================================================== [ 47.177756][ T2995] BUG: KCSAN: data-race in dont_mount / step_into [ 47.184222][ T2995] [ 47.186579][ T2995] read-write to 0xffff888106af4f00 of 4 bytes by task 3299 on cpu 0: [ 47.194677][ T2995] dont_mount+0x2a/0x40 [ 47.198864][ T2995] vfs_unlink+0x28f/0x420 [ 47.203302][ T2995] do_unlinkat+0x28e/0x4c0 [ 47.207753][ T2995] __x64_sys_unlink+0x2e/0x40 [ 47.212463][ T2995] x64_sys_call+0x22a6/0x2fb0 [ 47.217158][ T2995] do_syscall_64+0xd2/0x200 [ 47.221679][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.227764][ T2995] [ 47.230097][ T2995] read to 0xffff888106af4f00 of 4 bytes by task 2995 on cpu 1: [ 47.237649][ T2995] step_into+0x12f/0x820 [ 47.241910][ T2995] walk_component+0x162/0x220 [ 47.246604][ T2995] path_lookupat+0xfe/0x2a0 [ 47.251126][ T2995] filename_lookup+0x147/0x340 [ 47.255911][ T2995] do_readlinkat+0x7d/0x320 [ 47.260454][ T2995] __x64_sys_readlink+0x47/0x60 [ 47.265326][ T2995] x64_sys_call+0x2cf3/0x2fb0 [ 47.270058][ T2995] do_syscall_64+0xd2/0x200 [ 47.274592][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.280517][ T2995] [ 47.282862][ T2995] value changed: 0x00300008 -> 0x00004008 [ 47.288595][ T2995] [ 47.291020][ T2995] Reported by Kernel Concurrency Sanitizer on: [ 47.297227][ T2995] CPU: 1 UID: 0 PID: 2995 Comm: udevd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 47.309237][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.319321][ T2995] ================================================================== [ 47.331918][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 50.339296][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 50.339311][ T29] audit: type=1400 audit(1750722767.627:259): avc: denied { egress } for pid=3381 comm="kworker/0:3" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 50.369233][ T29] audit: type=1400 audit(1750722767.627:260): avc: denied { sendto } for pid=3381 comm="kworker/0:3" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1