last executing test programs: 1.182174143s ago: executing program 0 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700}, {0xffffffff}]}) 1.065042804s ago: executing program 2 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 1.050699655s ago: executing program 0 (id=325): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 987.875796ms ago: executing program 2 (id=326): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x6, 0x80000000) 987.338505ms ago: executing program 2 (id=327): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) unshare(0x8000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 966.787606ms ago: executing program 2 (id=328): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 925.961077ms ago: executing program 2 (id=330): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x2010000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 892.920067ms ago: executing program 0 (id=332): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) 527.558313ms ago: executing program 1 (id=338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8000fff2}]}}]}, 0x38}}, 0x20040054) 452.854894ms ago: executing program 0 (id=340): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r2 = gettid() timer_delete(r1) tkill(r2, 0x12) 452.372934ms ago: executing program 4 (id=342): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 447.733684ms ago: executing program 0 (id=343): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 379.714275ms ago: executing program 4 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x9, 0x3, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000440), 0x3, r2}, 0x38) 370.980765ms ago: executing program 3 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000010c0)={'#! ', './file0'}, 0xb) close(r2) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 308.257016ms ago: executing program 1 (id=346): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) removexattr(0x0, 0x0) 307.965426ms ago: executing program 4 (id=347): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) 307.762136ms ago: executing program 1 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r1, &(0x7f0000000080), 0x10) 255.095117ms ago: executing program 3 (id=349): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 211.342507ms ago: executing program 1 (id=350): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 201.896757ms ago: executing program 4 (id=351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x9, 0x1, 0xa, 0x10}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 156.157128ms ago: executing program 3 (id=352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 155.839658ms ago: executing program 1 (id=353): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 155.663218ms ago: executing program 3 (id=354): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3d9}, 0x35) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x15, 0x0, &(0x7f0000000040)="57a2d3b56a0eec2dfb2438eced8e46eec4fe7033c9", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 121.737028ms ago: executing program 1 (id=355): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5faf, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 119.720328ms ago: executing program 4 (id=356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 115.027579ms ago: executing program 0 (id=357): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) 65.944269ms ago: executing program 3 (id=358): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 65.368429ms ago: executing program 2 (id=359): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x100) getdents64(r2, &(0x7f0000001240)=""/34, 0x22) getdents64(r2, 0xfffffffffffffffe, 0x29) 230.58µs ago: executing program 4 (id=360): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010100000000000000000100000005000100fa"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) 0s ago: executing program 3 (id=361): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.62' (ED25519) to the list of known hosts. [ 33.753132][ T29] audit: type=1400 audit(1750571868.295:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.754394][ T3296] cgroup: Unknown subsys name 'net' [ 33.776175][ T29] audit: type=1400 audit(1750571868.295:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.803334][ T29] audit: type=1400 audit(1750571868.325:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.921453][ T3296] cgroup: Unknown subsys name 'cpuset' [ 33.927725][ T3296] cgroup: Unknown subsys name 'rlimit' [ 34.059184][ T29] audit: type=1400 audit(1750571868.595:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.083015][ T29] audit: type=1400 audit(1750571868.605:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.103644][ T29] audit: type=1400 audit(1750571868.605:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.124130][ T29] audit: type=1400 audit(1750571868.605:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.132883][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.144411][ T29] audit: type=1400 audit(1750571868.605:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.178444][ T29] audit: type=1400 audit(1750571868.605:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.201801][ T29] audit: type=1400 audit(1750571868.705:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.229246][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.337437][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 35.359509][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.433757][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.440870][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.448324][ T3307] bridge_slave_0: entered allmulticast mode [ 35.454840][ T3307] bridge_slave_0: entered promiscuous mode [ 35.464038][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.471168][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.478420][ T3307] bridge_slave_1: entered allmulticast mode [ 35.484787][ T3307] bridge_slave_1: entered promiscuous mode [ 35.500483][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.507629][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.514844][ T3306] bridge_slave_0: entered allmulticast mode [ 35.521421][ T3306] bridge_slave_0: entered promiscuous mode [ 35.542638][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.549771][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.556992][ T3306] bridge_slave_1: entered allmulticast mode [ 35.563624][ T3306] bridge_slave_1: entered promiscuous mode [ 35.590149][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.609123][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.619383][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.644530][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.673820][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.687414][ T3307] team0: Port device team_slave_0 added [ 35.713864][ T3306] team0: Port device team_slave_0 added [ 35.720098][ T3307] team0: Port device team_slave_1 added [ 35.729933][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.741801][ T3306] team0: Port device team_slave_1 added [ 35.752718][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.782244][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.789229][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.815269][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.844012][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.851076][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.877239][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.905790][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.912871][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.938948][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.955033][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.962212][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.969412][ T3317] bridge_slave_0: entered allmulticast mode [ 35.975890][ T3317] bridge_slave_0: entered promiscuous mode [ 35.984729][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.992026][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.999211][ T3317] bridge_slave_1: entered allmulticast mode [ 36.005723][ T3317] bridge_slave_1: entered promiscuous mode [ 36.012152][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.019178][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.045270][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.090637][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.101777][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.115747][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.122935][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.130098][ T3309] bridge_slave_0: entered allmulticast mode [ 36.136427][ T3309] bridge_slave_0: entered promiscuous mode [ 36.158703][ T3307] hsr_slave_0: entered promiscuous mode [ 36.164850][ T3307] hsr_slave_1: entered promiscuous mode [ 36.171310][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.178413][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.185716][ T3309] bridge_slave_1: entered allmulticast mode [ 36.192505][ T3309] bridge_slave_1: entered promiscuous mode [ 36.214105][ T3317] team0: Port device team_slave_0 added [ 36.225142][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.232257][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.239531][ T3312] bridge_slave_0: entered allmulticast mode [ 36.246167][ T3312] bridge_slave_0: entered promiscuous mode [ 36.254839][ T3306] hsr_slave_0: entered promiscuous mode [ 36.260984][ T3306] hsr_slave_1: entered promiscuous mode [ 36.266905][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.274573][ T3306] Cannot create hsr debugfs directory [ 36.285978][ T3317] team0: Port device team_slave_1 added [ 36.303112][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.310200][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.317449][ T3312] bridge_slave_1: entered allmulticast mode [ 36.323989][ T3312] bridge_slave_1: entered promiscuous mode [ 36.347954][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.370231][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.377344][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.403314][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.421646][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.442665][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.459538][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.466585][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.492553][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.509192][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.534910][ T3312] team0: Port device team_slave_0 added [ 36.543685][ T3312] team0: Port device team_slave_1 added [ 36.550083][ T3309] team0: Port device team_slave_0 added [ 36.556842][ T3309] team0: Port device team_slave_1 added [ 36.615474][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.622513][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.648530][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.659950][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.666960][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.693079][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.704294][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.711410][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.737375][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.758317][ T3317] hsr_slave_0: entered promiscuous mode [ 36.764474][ T3317] hsr_slave_1: entered promiscuous mode [ 36.770297][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.777934][ T3317] Cannot create hsr debugfs directory [ 36.787079][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.794123][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.820199][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.862519][ T3312] hsr_slave_0: entered promiscuous mode [ 36.868673][ T3312] hsr_slave_1: entered promiscuous mode [ 36.874609][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.882307][ T3312] Cannot create hsr debugfs directory [ 36.928640][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.937826][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.951613][ T3309] hsr_slave_0: entered promiscuous mode [ 36.957707][ T3309] hsr_slave_1: entered promiscuous mode [ 36.963879][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.971492][ T3309] Cannot create hsr debugfs directory [ 36.985031][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.996308][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.062743][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.091452][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.104670][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.129275][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.176739][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.187808][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.196774][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.205471][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.252329][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.269179][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.286251][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.295604][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.305056][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.314058][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.325338][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.332561][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.342809][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.368069][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.384246][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.391619][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.403447][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.410569][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.430268][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.453135][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.494421][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.501525][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.510401][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.517477][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.537605][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.555393][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.580224][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.593285][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.604465][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.632262][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.639417][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.650003][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.657159][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.665845][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.672953][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.689587][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.703386][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.710586][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.730996][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.749762][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.756917][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.765869][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.772969][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.785905][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.958169][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.974688][ T3307] veth0_vlan: entered promiscuous mode [ 37.989008][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.004284][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.031413][ T3307] veth1_vlan: entered promiscuous mode [ 38.069840][ T3307] veth0_macvtap: entered promiscuous mode [ 38.091406][ T3307] veth1_macvtap: entered promiscuous mode [ 38.111350][ T3306] veth0_vlan: entered promiscuous mode [ 38.142423][ T3306] veth1_vlan: entered promiscuous mode [ 38.151510][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.176131][ T3309] veth0_vlan: entered promiscuous mode [ 38.183457][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.192997][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.201875][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.210791][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.219587][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.238944][ T3309] veth1_vlan: entered promiscuous mode [ 38.251552][ T3306] veth0_macvtap: entered promiscuous mode [ 38.268285][ T3306] veth1_macvtap: entered promiscuous mode [ 38.278190][ T3312] veth0_vlan: entered promiscuous mode [ 38.300012][ T3317] veth0_vlan: entered promiscuous mode [ 38.307584][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.317111][ T3317] veth1_vlan: entered promiscuous mode [ 38.325712][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.328699][ T3309] veth0_macvtap: entered promiscuous mode [ 38.352276][ T3312] veth1_vlan: entered promiscuous mode [ 38.364658][ T3309] veth1_macvtap: entered promiscuous mode [ 38.374222][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.389220][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.398070][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.406845][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.415598][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.439415][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.455847][ T3312] veth0_macvtap: entered promiscuous mode [ 38.464445][ T3312] veth1_macvtap: entered promiscuous mode [ 38.480064][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.508793][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.516990][ T3317] veth0_macvtap: entered promiscuous mode [ 38.530739][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.539538][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.548353][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.557181][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.568832][ T3317] veth1_macvtap: entered promiscuous mode [ 38.579071][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.587746][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.596755][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.605583][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.614397][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.634863][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.669924][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.683576][ T3317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.692561][ T3317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.701612][ T3317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.710424][ T3317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.800093][ T3493] loop3: detected capacity change from 0 to 256 [ 38.829624][ T3493] FAT-fs (loop3): codepage cp855 not found [ 38.835708][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 38.835723][ T29] audit: type=1400 audit(1750571873.375:104): avc: denied { setopt } for pid=3495 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.892365][ T29] audit: type=1400 audit(1750571873.415:105): avc: denied { create } for pid=3498 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.941628][ T29] audit: type=1400 audit(1750571873.465:106): avc: denied { ioctl } for pid=3498 comm="syz.1.2" path="socket:[4079]" dev="sockfs" ino=4079 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.967032][ T3502] loop4: detected capacity change from 0 to 512 [ 38.985239][ T3502] ======================================================= [ 38.985239][ T3502] WARNING: The mand mount option has been deprecated and [ 38.985239][ T3502] and is ignored by this kernel. Remove the mand [ 38.985239][ T3502] option from the mount to silence this warning. [ 38.985239][ T3502] ======================================================= [ 39.033463][ T3505] syz.3.11 uses obsolete (PF_INET,SOCK_PACKET) [ 39.040299][ T3502] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.10: iget: bad i_size value: 38620345925642 [ 39.062419][ T29] audit: type=1400 audit(1750571873.605:107): avc: denied { open } for pid=3509 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.081602][ T29] audit: type=1400 audit(1750571873.605:108): avc: denied { kernel } for pid=3509 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.101928][ T3502] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.10: couldn't read orphan inode 15 (err -117) [ 39.109239][ T29] audit: type=1400 audit(1750571873.605:109): avc: denied { tracepoint } for pid=3509 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.137413][ T29] audit: type=1400 audit(1750571873.675:110): avc: denied { cpu } for pid=3511 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.138565][ T3502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.175341][ T3502] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.10: bg 0: block 5: invalid block bitmap [ 39.191661][ T29] audit: type=1400 audit(1750571873.715:111): avc: denied { mount } for pid=3500 comm="syz.4.10" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.213685][ T29] audit: type=1400 audit(1750571873.715:112): avc: denied { add_name } for pid=3500 comm="syz.4.10" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.234118][ T29] audit: type=1400 audit(1750571873.715:113): avc: denied { create } for pid=3500 comm="syz.4.10" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.262906][ T3502] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 39.275442][ T3502] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.275442][ T3502] [ 39.285233][ T3502] EXT4-fs (loop4): Total free blocks count 0 [ 39.291387][ T3502] EXT4-fs (loop4): Free/Dirty block details [ 39.297566][ T3502] EXT4-fs (loop4): free_blocks=0 [ 39.302738][ T3502] EXT4-fs (loop4): dirty_blocks=16 [ 39.307958][ T3502] EXT4-fs (loop4): Block reservation details [ 39.314139][ T3502] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 39.327882][ T3515] bond1: entered promiscuous mode [ 39.333019][ T3515] bond1: entered allmulticast mode [ 39.338799][ T3515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.350190][ T3515] bond1 (unregistering): Released all slaves [ 39.361493][ T3518] smc: net device bond0 applied user defined pnetid SYZ2 [ 39.369037][ T3518] smc: net device bond0 erased user defined pnetid SYZ2 [ 39.429117][ T3502] syz.4.10 (3502) used greatest stack depth: 9840 bytes left [ 39.439128][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.779752][ T3563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 40.023694][ T3584] Zero length message leads to an empty skb [ 40.056100][ T3582] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.096387][ T3590] loop0: detected capacity change from 0 to 512 [ 40.117317][ T3590] EXT4-fs: Ignoring removed oldalloc option [ 40.127371][ T3590] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.140688][ T3590] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.170933][ T3590] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 40.191055][ T3590] EXT4-fs (loop0): 1 truncate cleaned up [ 40.197178][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.239461][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.262658][ T3601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 40.289937][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 40.310165][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 40.319747][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 40.331193][ T3603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 40.505280][ T3623] loop1: detected capacity change from 0 to 1024 [ 40.528190][ T3623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.544330][ T3623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.596324][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.690894][ T3641] loop0: detected capacity change from 0 to 164 [ 40.799448][ T3649] netlink: 332 bytes leftover after parsing attributes in process `syz.0.75'. [ 40.811070][ T3631] loop2: detected capacity change from 0 to 256 [ 40.814215][ T3649] netlink: 'syz.0.75': attribute type 9 has an invalid length. [ 40.825107][ T3649] netlink: 108 bytes leftover after parsing attributes in process `syz.0.75'. [ 40.834171][ T3649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.75'. [ 41.065549][ T3663] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 41.074363][ T3663] ipvlan0: entered allmulticast mode [ 41.079717][ T3663] veth0_vlan: entered allmulticast mode [ 41.086712][ T3663] team0: Device ipvlan0 failed to register rx_handler [ 41.123660][ T3582] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.162899][ T3669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 41.338374][ T3582] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.398747][ T3582] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.402867][ T3677] vhci_hcd: invalid port number 224 [ 41.428394][ T3682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.445831][ T3682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.473649][ T3582] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.504730][ T3582] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.520163][ T3582] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.533719][ T3582] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.598441][ T3697] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.829804][ T3714] capability: warning: `syz.2.103' uses deprecated v2 capabilities in a way that may be insecure [ 41.957259][ T3724] loop4: detected capacity change from 0 to 8192 [ 42.235814][ T3751] syz.0.121(3751): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 42.306693][ T3756] sch_tbf: burst 25 is lower than device lo mtu (65550) ! [ 42.400623][ T3766] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.420801][ T3766] SELinux: failed to load policy [ 42.621671][ T3786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.655106][ T3786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.999288][ T3816] x_tables: duplicate underflow at hook 4 [ 43.205307][ T3827] syz.0.156 (3827) used greatest stack depth: 9384 bytes left [ 43.500174][ T3859] loop1: detected capacity change from 0 to 512 [ 43.528819][ T3859] journal_path: Lookup failure for './file0/../file0' [ 43.535867][ T3859] EXT4-fs: error: could not find journal device path [ 43.694781][ T3878] hub 8-0:1.0: USB hub found [ 43.712160][ T3878] hub 8-0:1.0: 8 ports detected [ 43.721415][ T3880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.788602][ T3880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.831949][ T3888] process 'syz.3.185' launched '/dev/fd/5' with NULL argv: empty string added [ 43.840926][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 43.840939][ T29] audit: type=1400 audit(1750571878.375:275): avc: denied { execute } for pid=3887 comm="syz.3.185" dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.922105][ T29] audit: type=1400 audit(1750571878.415:276): avc: denied { execute_no_trans } for pid=3887 comm="syz.3.185" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.000793][ T29] audit: type=1400 audit(1750571878.495:277): avc: denied { write } for pid=3889 comm="syz.4.186" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.023536][ T29] audit: type=1326 audit(1750571878.495:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3891 comm="syz.3.187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98afa1e929 code=0x0 [ 44.117223][ T29] audit: type=1400 audit(1750571878.635:279): avc: denied { write } for pid=3896 comm="syz.4.189" path="socket:[5782]" dev="sockfs" ino=5782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.148300][ T29] audit: type=1326 audit(1750571878.685:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf49fe929 code=0x7ffc0000 [ 44.180400][ T29] audit: type=1326 audit(1750571878.685:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf49fe929 code=0x7ffc0000 [ 44.214207][ T29] audit: type=1326 audit(1750571878.725:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7efdf49fe929 code=0x7ffc0000 [ 44.239347][ T29] audit: type=1326 audit(1750571878.785:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf49fe929 code=0x7ffc0000 [ 44.262732][ T29] audit: type=1326 audit(1750571878.785:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf49fe929 code=0x7ffc0000 [ 44.554869][ T3928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.632106][ T3930] pim6reg1: entered promiscuous mode [ 44.637480][ T3930] pim6reg1: entered allmulticast mode [ 44.955711][ T3983] __nla_validate_parse: 10 callbacks suppressed [ 44.955727][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 44.985528][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 45.112635][ T4003] netlink: 'syz.2.224': attribute type 280 has an invalid length. [ 45.148315][ T3997] loop3: detected capacity change from 0 to 512 [ 45.181341][ T3997] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 45.217941][ T3997] System zones: 0-2, 18-18, 34-35 [ 45.247376][ T3997] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #4: comm syz.3.222: iget: bad i_size value: 5910974510929920 [ 45.267429][ T3997] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.222: Bad quota inode: 4, type: 1 [ 45.279256][ T3997] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.302390][ T3997] EXT4-fs (loop3): mount failed [ 45.312803][ T4038] geneve2: entered promiscuous mode [ 45.648044][ T4088] loop3: detected capacity change from 0 to 1024 [ 45.673021][ T4088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.835028][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.032141][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 46.465446][ T4203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4203 comm=syz.3.264 [ 46.477925][ T4203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4203 comm=syz.3.264 [ 46.802132][ T4248] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4248 comm=syz.1.265 [ 47.476911][ T4283] smc: net device bond0 applied user defined pnetid SYZ2 [ 47.500511][ C1] hrtimer: interrupt took 25752 ns [ 47.522855][ T4283] smc: net device bond0 erased user defined pnetid SYZ2 [ 47.627634][ T4297] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 47.638178][ T4297] SELinux: failed to load policy [ 47.666889][ T1037] IPVS: starting estimator thread 0... [ 47.770438][ T4301] IPVS: using max 2352 ests per chain, 117600 per kthread [ 47.835200][ T4313] loop0: detected capacity change from 0 to 512 [ 47.863113][ T4313] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 47.875655][ T4313] System zones: 0-2, 18-18, 34-35 [ 47.883202][ T4313] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #4: comm syz.0.294: iget: bad i_size value: 5910974510929920 [ 47.896601][ T4313] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.294: Bad quota inode: 4, type: 1 [ 47.908979][ T4313] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.925161][ T4313] EXT4-fs (loop0): mount failed [ 48.046214][ T4322] smc: net device bond0 applied user defined pnetid SYZ2 [ 48.056186][ T4322] smc: net device bond0 erased user defined pnetid SYZ2 [ 48.083445][ T4324] vlan0: entered promiscuous mode [ 48.113419][ T4327] syz.3.299 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.417356][ T4349] loop0: detected capacity change from 0 to 128 [ 48.427002][ T4349] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.439542][ T4349] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.526126][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.608487][ T4367] loop0: detected capacity change from 0 to 128 [ 48.623916][ T4367] syz.0.318: attempt to access beyond end of device [ 48.623916][ T4367] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 48.679489][ T4373] loop0: detected capacity change from 0 to 512 [ 48.714960][ T4373] EXT4-fs (loop0): 1 orphan inode deleted [ 48.722354][ T4373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.735062][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 48.748332][ T4373] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.795166][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.818097][ T4383] sit0: entered allmulticast mode [ 48.837782][ T4383] sit0: entered promiscuous mode [ 48.938488][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 48.938506][ T29] audit: type=1400 audit(1750571883.475:350): avc: denied { listen } for pid=4392 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.078354][ T4402] loop3: detected capacity change from 0 to 164 [ 49.104105][ T4402] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.123756][ T29] audit: type=1400 audit(1750571883.665:351): avc: denied { mount } for pid=4401 comm="kfree" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.153488][ T4405] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 49.171653][ T29] audit: type=1400 audit(1750571883.665:352): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 49.191815][ T29] audit: type=1400 audit(1750571883.705:353): avc: denied { relabelto } for pid=4403 comm="syz.1.334" name="file0" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 49.218068][ T29] audit: type=1400 audit(1750571883.705:354): avc: denied { associate } for pid=4403 comm="syz.1.334" name="file0" dev="tmpfs" ino=340 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 49.252501][ T29] audit: type=1400 audit(1750571883.755:355): avc: denied { read } for pid=4408 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.287502][ T29] audit: type=1400 audit(1750571883.825:356): avc: denied { rmdir } for pid=3317 comm="syz-executor" name="file0" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 49.375476][ T4420] netlink: 'syz.4.342': attribute type 7 has an invalid length. [ 49.383250][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 49.405315][ T29] audit: type=1400 audit(1750571883.945:357): avc: denied { read } for pid=4423 comm="syz.0.343" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.427980][ T29] audit: type=1400 audit(1750571883.945:358): avc: denied { open } for pid=4423 comm="syz.0.343" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 49.530054][ T29] audit: type=1326 audit(1750571884.045:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d37ae929 code=0x7ffc0000 [ 49.557638][ T4432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4432 comm=syz.4.347 [ 49.570165][ T4432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4432 comm=syz.4.347 [ 49.752260][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 49.816266][ T3508] ================================================================== [ 49.824416][ T3508] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 49.831390][ T3508] [ 49.833735][ T3508] write to 0xffff8881045d2c8c of 4 bytes by task 3300 on cpu 1: [ 49.841385][ T3508] shmem_mknod+0x137/0x180 [ 49.845830][ T3508] shmem_create+0x34/0x50 [ 49.850184][ T3508] path_openat+0x1102/0x2170 [ 49.854809][ T3508] do_filp_open+0x109/0x230 [ 49.859346][ T3508] do_sys_openat2+0xa6/0x110 [ 49.863971][ T3508] __x64_sys_openat+0xf2/0x120 [ 49.868769][ T3508] x64_sys_call+0x1af/0x2fb0 [ 49.873380][ T3508] do_syscall_64+0xd2/0x200 [ 49.877913][ T3508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.883826][ T3508] [ 49.886164][ T3508] read to 0xffff8881045d2c8c of 4 bytes by task 3508 on cpu 0: [ 49.893725][ T3508] fill_mg_cmtime+0x5b/0x260 [ 49.898339][ T3508] generic_fillattr+0x24a/0x340 [ 49.903211][ T3508] shmem_getattr+0x181/0x200 [ 49.907824][ T3508] vfs_getattr_nosec+0x143/0x1e0 [ 49.912783][ T3508] vfs_statx+0x113/0x390 [ 49.917048][ T3508] vfs_fstatat+0x115/0x170 [ 49.921483][ T3508] __se_sys_newfstatat+0x55/0x260 [ 49.926547][ T3508] __x64_sys_newfstatat+0x55/0x70 [ 49.931613][ T3508] x64_sys_call+0x2c22/0x2fb0 [ 49.936326][ T3508] do_syscall_64+0xd2/0x200 [ 49.940855][ T3508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.946781][ T3508] [ 49.949121][ T3508] value changed: 0x1495c6a6 -> 0x15335f19 [ 49.954853][ T3508] [ 49.957189][ T3508] Reported by Kernel Concurrency Sanitizer on: [ 49.963368][ T3508] CPU: 0 UID: 0 PID: 3508 Comm: udevd Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 49.975367][ T3508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.985444][ T3508] ==================================================================