last executing test programs: 2.019710785s ago: executing program 1 (id=366): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r1, 0x0, 0x800000000000002}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.936164215s ago: executing program 1 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000080)=""/87, 0x57, 0x1000002, 0x0) 1.789748485s ago: executing program 4 (id=374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x12e, &(0x7f00000000c0)={0x0, 0x5cb1, 0x2, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x1e76, 0xf728, 0x5, 0x0, 0x0) 1.571390886s ago: executing program 4 (id=380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) 1.363787717s ago: executing program 4 (id=384): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x24000040) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) 1.232615367s ago: executing program 3 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) 1.139884267s ago: executing program 3 (id=387): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xd44) 1.127023707s ago: executing program 2 (id=390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 1.081781547s ago: executing program 3 (id=391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f80)=ANY=[@ANYBLOB="2f0002"], 0x8) 999.918238ms ago: executing program 4 (id=392): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 999.747318ms ago: executing program 1 (id=393): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 999.570207ms ago: executing program 3 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) 999.368627ms ago: executing program 2 (id=395): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x74, 0x0, 0x0, @time={0x5, 0x1}, {0xfd, 0xfb}, {0x7, 0x3d}, @raw32={[0x2, 0x7c, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @time={0x9, 0x6}, {0xa}, {0x0, 0x2}, @note={0x81, 0x0, 0x0, 0x8}}, {0x6, 0x3, 0x9, 0x3, @tick=0x2001, {0x10, 0x3}, {0xd, 0x4}, @addr={0x9, 0x1}}], 0x54) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x3) 756.674638ms ago: executing program 1 (id=398): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x5, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 754.495978ms ago: executing program 3 (id=399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r2, &(0x7f0000000040)=""/190, 0xbe) 723.178389ms ago: executing program 3 (id=400): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{0x0, 0x633b}, {0x2, 0x0, 0x2000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)) 715.632098ms ago: executing program 1 (id=401): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 688.050609ms ago: executing program 1 (id=402): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 675.009858ms ago: executing program 4 (id=403): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) write(r0, 0x0, 0x0) 470.180959ms ago: executing program 4 (id=407): socket$vsock_stream(0x28, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) 470.020499ms ago: executing program 2 (id=408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) 446.451189ms ago: executing program 2 (id=409): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 250.43567ms ago: executing program 0 (id=412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x5, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 227.61189ms ago: executing program 2 (id=413): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 225.43091ms ago: executing program 0 (id=414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) 204.11949ms ago: executing program 2 (id=415): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c", 0x15) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 139.974179ms ago: executing program 0 (id=416): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) write(r0, 0x0, 0x0) 113.05831ms ago: executing program 0 (id=417): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_clone3(&(0x7f0000000a00)={0x1000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 61.66342ms ago: executing program 0 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}], 0x1, 0x4000004) 0s ago: executing program 0 (id=419): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts. [ 27.296865][ T29] audit: type=1400 audit(1762449433.775:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.319919][ T29] audit: type=1400 audit(1762449433.795:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.320667][ T3304] cgroup: Unknown subsys name 'net' [ 27.347662][ T29] audit: type=1400 audit(1762449433.825:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.485344][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.491450][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.621533][ T29] audit: type=1400 audit(1762449434.095:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.644841][ T29] audit: type=1400 audit(1762449434.095:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.665276][ T29] audit: type=1400 audit(1762449434.095:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.672078][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.685656][ T29] audit: type=1400 audit(1762449434.095:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.714483][ T29] audit: type=1400 audit(1762449434.095:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.739347][ T29] audit: type=1400 audit(1762449434.095:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.754006][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.762661][ T29] audit: type=1400 audit(1762449434.165:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.809586][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.885655][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.892853][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.900078][ T3316] bridge_slave_0: entered allmulticast mode [ 28.906425][ T3316] bridge_slave_0: entered promiscuous mode [ 28.926669][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.934028][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.941288][ T3316] bridge_slave_1: entered allmulticast mode [ 28.947638][ T3316] bridge_slave_1: entered promiscuous mode [ 28.956058][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.987511][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.006615][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.027739][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 29.043787][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.096588][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.103717][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.110902][ T3313] bridge_slave_0: entered allmulticast mode [ 29.117097][ T3313] bridge_slave_0: entered promiscuous mode [ 29.124320][ T3316] team0: Port device team_slave_0 added [ 29.132914][ T3316] team0: Port device team_slave_1 added [ 29.145649][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.152728][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.159882][ T3313] bridge_slave_1: entered allmulticast mode [ 29.166375][ T3313] bridge_slave_1: entered promiscuous mode [ 29.172662][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.185241][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.192280][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.199512][ T3320] bridge_slave_0: entered allmulticast mode [ 29.206029][ T3320] bridge_slave_0: entered promiscuous mode [ 29.232046][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.239021][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.265015][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.275746][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.282807][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.290308][ T3320] bridge_slave_1: entered allmulticast mode [ 29.296784][ T3320] bridge_slave_1: entered promiscuous mode [ 29.306322][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.320174][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.329651][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.336616][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.362597][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.401827][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.418021][ T3313] team0: Port device team_slave_0 added [ 29.427254][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.436530][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.443742][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.451053][ T3323] bridge_slave_0: entered allmulticast mode [ 29.457407][ T3323] bridge_slave_0: entered promiscuous mode [ 29.465101][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.472314][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.479466][ T3323] bridge_slave_1: entered allmulticast mode [ 29.485990][ T3323] bridge_slave_1: entered promiscuous mode [ 29.492704][ T3313] team0: Port device team_slave_1 added [ 29.545902][ T3320] team0: Port device team_slave_0 added [ 29.553776][ T3316] hsr_slave_0: entered promiscuous mode [ 29.559801][ T3316] hsr_slave_1: entered promiscuous mode [ 29.566828][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.576297][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.583219][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.609126][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.620126][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.627235][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.634417][ T3314] bridge_slave_0: entered allmulticast mode [ 29.640897][ T3314] bridge_slave_0: entered promiscuous mode [ 29.647956][ T3320] team0: Port device team_slave_1 added [ 29.653630][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.660742][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.667891][ T3314] bridge_slave_1: entered allmulticast mode [ 29.674240][ T3314] bridge_slave_1: entered promiscuous mode [ 29.681633][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.695795][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.702738][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.728777][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.775211][ T3323] team0: Port device team_slave_0 added [ 29.793401][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.800429][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.826540][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.838290][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.848311][ T3323] team0: Port device team_slave_1 added [ 29.856553][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.872600][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.879600][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.905486][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.929328][ T3313] hsr_slave_0: entered promiscuous mode [ 29.935255][ T3313] hsr_slave_1: entered promiscuous mode [ 29.941090][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 29.946886][ T3313] Cannot create hsr debugfs directory [ 29.979071][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.986171][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.012291][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.023726][ T3314] team0: Port device team_slave_0 added [ 30.041229][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.048291][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.074302][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.085543][ T3314] team0: Port device team_slave_1 added [ 30.111716][ T3320] hsr_slave_0: entered promiscuous mode [ 30.117854][ T3320] hsr_slave_1: entered promiscuous mode [ 30.123705][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 30.129568][ T3320] Cannot create hsr debugfs directory [ 30.168993][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.175980][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.201893][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.225859][ T3323] hsr_slave_0: entered promiscuous mode [ 30.231838][ T3323] hsr_slave_1: entered promiscuous mode [ 30.237945][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 30.243774][ T3323] Cannot create hsr debugfs directory [ 30.250179][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.257174][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.283326][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.344036][ T3314] hsr_slave_0: entered promiscuous mode [ 30.350141][ T3314] hsr_slave_1: entered promiscuous mode [ 30.356669][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 30.362399][ T3314] Cannot create hsr debugfs directory [ 30.372962][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.384411][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.407805][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.419341][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.510543][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.519933][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.530801][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.541482][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.558410][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.567071][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.575913][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.587232][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.622924][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.635476][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.648885][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.662430][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.683983][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.696903][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.706271][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.715265][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.729806][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.750313][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.773852][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.781034][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.792110][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.799221][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.840612][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.852505][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.867139][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.881252][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.896093][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.903226][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.911960][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.919039][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.934274][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.948684][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.964943][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.971972][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.980370][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.987461][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.998075][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.017056][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.030244][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.039706][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.046802][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.059680][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.066759][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.082793][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.093181][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.106170][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.113312][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.135589][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.142732][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.203805][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.214254][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.271353][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.286348][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.314260][ T3316] veth0_vlan: entered promiscuous mode [ 31.324227][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.343054][ T3316] veth1_vlan: entered promiscuous mode [ 31.364795][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.400032][ T3316] veth0_macvtap: entered promiscuous mode [ 31.425730][ T3316] veth1_macvtap: entered promiscuous mode [ 31.445726][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.458417][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.471781][ T3323] veth0_vlan: entered promiscuous mode [ 31.489707][ T318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.507216][ T318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.516480][ T318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.528765][ T3320] veth0_vlan: entered promiscuous mode [ 31.540516][ T3323] veth1_vlan: entered promiscuous mode [ 31.546915][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.555921][ T3313] veth0_vlan: entered promiscuous mode [ 31.563398][ T3320] veth1_vlan: entered promiscuous mode [ 31.589047][ T3320] veth0_macvtap: entered promiscuous mode [ 31.600630][ T3313] veth1_vlan: entered promiscuous mode [ 31.612194][ T3320] veth1_macvtap: entered promiscuous mode [ 31.620087][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.640098][ T3314] veth0_vlan: entered promiscuous mode [ 31.650657][ T3482] Zero length message leads to an empty skb [ 31.657855][ T3323] veth0_macvtap: entered promiscuous mode [ 31.679610][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.689083][ T3314] veth1_vlan: entered promiscuous mode [ 31.707027][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.715772][ T3314] veth0_macvtap: entered promiscuous mode [ 31.722113][ T3323] veth1_macvtap: entered promiscuous mode [ 31.729174][ T3313] veth0_macvtap: entered promiscuous mode [ 31.739785][ T3313] veth1_macvtap: entered promiscuous mode [ 31.752427][ T3314] veth1_macvtap: entered promiscuous mode [ 31.766490][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.777919][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.791541][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.810296][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.817914][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.829977][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.840115][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.849793][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.863263][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.877156][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.899954][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.916200][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.933555][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.978532][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.004347][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.020951][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.031252][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.059492][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.068934][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.091000][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.091347][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.127746][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.137388][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.180985][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.236995][ T3531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'. [ 32.366493][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 32.366508][ T29] audit: type=1326 audit(1762449438.845:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3527 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbde39ff6c9 code=0x7ffc0000 [ 32.418090][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 32.453790][ T29] audit: type=1326 audit(1762449438.875:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbde399b779 code=0x7ffc0000 [ 32.477248][ T29] audit: type=1326 audit(1762449438.875:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde39ff6c9 code=0x7ffc0000 [ 32.500661][ T29] audit: type=1326 audit(1762449438.875:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3519 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde39ff6c9 code=0x7ffc0000 [ 32.533938][ T29] audit: type=1400 audit(1762449439.005:113): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.563448][ T3553] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 32.577136][ T3553] team0: Port device dummy0 added [ 32.586271][ T3553] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 32.597647][ T3553] team0: Port device dummy0 removed [ 32.610720][ T3553] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 32.622894][ T29] audit: type=1400 audit(1762449439.095:114): avc: denied { open } for pid=3554 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.631019][ T3555] netlink: 'syz.1.27': attribute type 13 has an invalid length. [ 32.642060][ T29] audit: type=1400 audit(1762449439.095:115): avc: denied { kernel } for pid=3554 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.686687][ T3553] syz.0.26 (3553) used greatest stack depth: 9968 bytes left [ 32.717722][ T29] audit: type=1400 audit(1762449439.095:116): avc: denied { write } for pid=3554 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.805199][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.812736][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.889718][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.943623][ T41] Bluetooth: hci1: Frame reassembly failed (-84) [ 32.955772][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.043232][ T318] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.066939][ T318] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.076109][ T318] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.091173][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.117787][ T29] audit: type=1400 audit(1762449439.585:117): avc: denied { create } for pid=3575 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.117815][ T29] audit: type=1400 audit(1762449439.585:118): avc: denied { write } for pid=3575 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.441961][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.449443][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.458912][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.466391][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.324734][ T3539] Bluetooth: hci0: command 0x1003 tx timeout [ 34.324912][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.597973][ T3631] netlink: 'syz.4.56': attribute type 1 has an invalid length. [ 34.611478][ T3631] bond1 (unregistering): Released all slaves [ 34.679374][ T3636] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 34.691784][ T3636] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 34.702865][ T3636] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 34.768452][ T3640] syz.4.60: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 34.783045][ T3640] CPU: 0 UID: 0 PID: 3640 Comm: syz.4.60 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.783069][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.783081][ T3640] Call Trace: [ 34.783204][ T3640] [ 34.783212][ T3640] __dump_stack+0x1d/0x30 [ 34.783240][ T3640] dump_stack_lvl+0xe8/0x140 [ 34.783262][ T3640] dump_stack+0x15/0x1b [ 34.783279][ T3640] warn_alloc+0x12b/0x1a0 [ 34.783322][ T3640] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 34.783465][ T3640] __vmalloc_node_range_noprof+0x9d/0xed0 [ 34.783544][ T3640] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 34.783563][ T3640] ? slow_avc_audit+0x104/0x140 [ 34.783581][ T3640] ? should_fail_ex+0x30/0x280 [ 34.783592][ T3640] ? xskq_create+0x36/0xe0 [ 34.783672][ T3640] vmalloc_user_noprof+0x7d/0xb0 [ 34.783689][ T3640] ? xskq_create+0x80/0xe0 [ 34.783701][ T3640] xskq_create+0x80/0xe0 [ 34.783712][ T3640] xsk_init_queue+0x95/0xf0 [ 34.783724][ T3640] xsk_setsockopt+0x477/0x640 [ 34.783811][ T3640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 34.783887][ T3640] __sys_setsockopt+0x184/0x200 [ 34.783908][ T3640] __x64_sys_setsockopt+0x64/0x80 [ 34.783948][ T3640] x64_sys_call+0x20ec/0x3000 [ 34.783961][ T3640] do_syscall_64+0xd2/0x200 [ 34.784023][ T3640] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.784040][ T3640] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.784085][ T3640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.784097][ T3640] RIP: 0033:0x7fe54e6ff6c9 [ 34.784138][ T3640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.784192][ T3640] RSP: 002b:00007fe54d15f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 34.784204][ T3640] RAX: ffffffffffffffda RBX: 00007fe54e955fa0 RCX: 00007fe54e6ff6c9 [ 34.784211][ T3640] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 34.784219][ T3640] RBP: 00007fe54e781f91 R08: 0000000000000004 R09: 0000000000000000 [ 34.784269][ T3640] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 34.784276][ T3640] R13: 00007fe54e956038 R14: 00007fe54e955fa0 R15: 00007ffce23b16d8 [ 34.784285][ T3640] [ 34.784293][ T3640] Mem-Info: [ 34.965195][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 34.973083][ T3640] active_anon:7420 inactive_anon:0 isolated_anon:0 [ 34.973083][ T3640] active_file:8693 inactive_file:2229 isolated_file:0 [ 34.973083][ T3640] unevictable:0 dirty:1349 writeback:0 [ 34.973083][ T3640] slab_reclaimable:3068 slab_unreclaimable:42300 [ 34.973083][ T3640] mapped:29562 shmem:900 pagetables:1093 [ 34.973083][ T3640] sec_pagetables:0 bounce:0 [ 34.973083][ T3640] kernel_misc_reclaimable:0 [ 34.973083][ T3640] free:1868607 free_pcp:13109 free_cma:0 [ 35.054290][ T3640] Node 0 active_anon:30840kB inactive_anon:0kB active_file:36280kB inactive_file:8916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119524kB dirty:5396kB writeback:0kB shmem:4992kB kernel_stack:3344kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 35.067419][ T3540] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 35.081741][ T3640] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 35.117468][ T3640] lowmem_reserve[]: 0 2881 7859 7859 [ 35.122803][ T3640] Node 0 DMA32 free:2946732kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 35.154317][ T3640] lowmem_reserve[]: 0 0 4978 4978 [ 35.159498][ T3640] Node 0 Normal free:4512336kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38844kB inactive_anon:0kB active_file:43936kB inactive_file:8916kB unevictable:0kB writepending:5396kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:30524kB local_pcp:2164kB free_cma:0kB [ 35.192444][ T3640] lowmem_reserve[]: 0 0 0 0 [ 35.197092][ T3640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 35.210571][ T3640] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946732kB [ 35.226847][ T3640] Node 0 Normal: 2*4kB (UE) 2*8kB (ME) 2*16kB (ME) 1*32kB (M) 0*64kB 2*128kB (UE) 2*256kB (UE) 2*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 1099*4096kB (UM) = 4508504kB [ 35.243753][ T3640] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 35.253083][ T3640] 20779 total pagecache pages [ 35.257777][ T3640] 0 pages in swap cache [ 35.261989][ T3640] Free swap = 124996kB [ 35.266240][ T3640] Total swap = 124996kB [ 35.270392][ T3640] 2097051 pages RAM [ 35.274185][ T3640] 0 pages HighMem/MovableOnly [ 35.278883][ T3640] 81086 pages reserved [ 35.416686][ T3657] bridge_slave_0: left allmulticast mode [ 35.422471][ T3657] bridge_slave_0: left promiscuous mode [ 35.427183][ T3661] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.428210][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.461057][ T3663] loop1: detected capacity change from 0 to 128 [ 35.500782][ T3657] bridge_slave_1: left allmulticast mode [ 35.506486][ T3657] bridge_slave_1: left promiscuous mode [ 35.512145][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.529526][ T3657] bond0: (slave bond_slave_0): Releasing backup interface [ 35.540232][ T3657] bond0: (slave bond_slave_1): Releasing backup interface [ 35.553811][ T3657] team0: Port device team_slave_0 removed [ 35.566290][ T3657] team0: Port device team_slave_1 removed [ 35.578938][ T3657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 35.869888][ T3663] syz.1.70: attempt to access beyond end of device [ 35.869888][ T3663] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 35.883647][ T3663] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 35.900632][ T3679] netlink: 'syz.0.76': attribute type 12 has an invalid length. [ 35.908234][ T3668] syz.1.70: attempt to access beyond end of device [ 35.908234][ T3668] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 35.921735][ T3668] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 35.955021][ T3668] syz.1.70: attempt to access beyond end of device [ 35.955021][ T3668] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 35.968404][ T3668] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 35.996125][ T318] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.086472][ T3689] loop0: detected capacity change from 0 to 256 [ 36.120728][ T3689] ======================================================= [ 36.120728][ T3689] WARNING: The mand mount option has been deprecated and [ 36.120728][ T3689] and is ignored by this kernel. Remove the mand [ 36.120728][ T3689] option from the mount to silence this warning. [ 36.120728][ T3689] ======================================================= [ 36.206525][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 36.215282][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 36.224067][ T3693] netlink: 'syz.4.82': attribute type 20 has an invalid length. [ 36.243529][ T3693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 36.252598][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 36.261878][ T3693] netlink: 'syz.4.82': attribute type 20 has an invalid length. [ 36.263066][ T318] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.296636][ T3689] FAT-fs (loop0): codepage cp950 not found [ 36.313847][ T31] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.323303][ T31] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.388064][ T31] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.801939][ T3745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.978167][ T3762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.111'. [ 37.121843][ T3772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 37.145208][ T3774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 37.154599][ T3774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 37.472783][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 37.472797][ T29] audit: type=1326 audit(1762449443.945:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54e6ff6c9 code=0x7fc00000 [ 37.546016][ T29] audit: type=1400 audit(1762449444.025:138): avc: denied { mounton } for pid=3796 comm="syz.0.124" path="/43/file0" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 37.660086][ T3808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 37.721919][ T29] audit: type=1400 audit(1762449444.195:139): avc: denied { mount } for pid=3811 comm="syz.1.131" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 37.829865][ T3822] netlink: 51 bytes leftover after parsing attributes in process `syz.1.135'. [ 37.926840][ T3832] netlink: 'syz.4.140': attribute type 7 has an invalid length. [ 38.004714][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 38.004732][ T3540] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.034849][ T3832] netlink: 'syz.4.140': attribute type 7 has an invalid length. [ 38.089482][ T29] audit: type=1400 audit(1762449444.565:140): avc: denied { name_bind } for pid=3843 comm="syz.2.145" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 38.167308][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.176550][ T29] audit: type=1400 audit(1762449444.655:141): avc: denied { read } for pid=3849 comm="syz.1.148" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.197913][ T29] audit: type=1400 audit(1762449444.655:142): avc: denied { open } for pid=3849 comm="syz.1.148" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.230101][ T29] audit: type=1400 audit(1762449444.655:143): avc: denied { ioctl } for pid=3849 comm="syz.1.148" path="socket:[6401]" dev="sockfs" ino=6401 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.288442][ T29] audit: type=1400 audit(1762449444.765:144): avc: denied { getopt } for pid=3858 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.778886][ T3895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 38.863498][ T3905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.179'. [ 38.873641][ T3907] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 38.904580][ T3907] bond1 (unregistering): Released all slaves [ 39.142902][ T3934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 39.399986][ T3949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'. [ 39.435076][ T3953] netlink: 51 bytes leftover after parsing attributes in process `syz.3.189'. [ 39.566069][ T3964] netlink: 'syz.2.192': attribute type 7 has an invalid length. [ 39.600701][ T3964] netlink: 'syz.2.192': attribute type 7 has an invalid length. [ 39.600954][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.627051][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.644580][ T318] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.659290][ T318] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.862112][ T3984] netlink: 'syz.0.211': attribute type 7 has an invalid length. [ 39.873664][ T3984] netlink: 'syz.0.211': attribute type 7 has an invalid length. [ 39.899900][ T318] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.909428][ T123] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.918313][ T123] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.933639][ T123] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.244737][ T3540] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.244744][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 40.331510][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.670728][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 41.820041][ T4053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.338599][ T4090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.346745][ T4090] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.356060][ T4090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.404968][ T3539] Bluetooth: hci0: command 0x1003 tx timeout [ 42.411124][ T3540] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.724720][ T3540] Bluetooth: hci1: command 0x1003 tx timeout [ 42.724720][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 42.760442][ T4111] loop2: detected capacity change from 0 to 256 [ 42.785584][ T4111] FAT-fs (loop2): codepage cp950 not found [ 42.841262][ T4118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.947524][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.068695][ T29] audit: type=1326 audit(1762449449.545:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4084 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c40ff6c9 code=0x7fc00000 [ 43.415610][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 43.469971][ T4144] loop1: detected capacity change from 0 to 256 [ 43.485116][ T4144] FAT-fs (loop1): codepage cp950 not found [ 44.013230][ T29] audit: type=1326 audit(1762449450.485:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74933f6c9 code=0x7fc00000 [ 44.964767][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.964801][ T3539] Bluetooth: hci0: command 0x1003 tx timeout [ 45.022996][ T4153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.105534][ T4167] loop0: detected capacity change from 0 to 164 [ 45.124644][ T29] audit: type=1400 audit(1762449451.595:147): avc: denied { read write } for pid=4168 comm="syz.1.289" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.149267][ T29] audit: type=1400 audit(1762449451.595:148): avc: denied { open } for pid=4168 comm="syz.1.289" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.154287][ T4167] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.181825][ T29] audit: type=1400 audit(1762449451.655:149): avc: denied { mount } for pid=4166 comm="syz.0.275" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.209233][ T4167] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.218090][ T4167] Symlink component flag not implemented [ 45.223784][ T4167] Symlink component flag not implemented [ 45.229891][ T4167] Symlink component flag not implemented (7) [ 45.235931][ T4167] Symlink component flag not implemented (116) [ 45.249650][ T29] audit: type=1400 audit(1762449451.725:150): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.296909][ T4174] netlink: 'syz.1.293': attribute type 39 has an invalid length. [ 45.309803][ T29] audit: type=1400 audit(1762449451.785:151): avc: denied { connect } for pid=4173 comm="syz.0.292" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.333362][ T29] audit: type=1400 audit(1762449451.785:152): avc: denied { setopt } for pid=4173 comm="syz.0.292" laddr=fe80::a8aa:aaff:feaa:aaaa lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.444748][ T3540] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 45.451012][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 45.501988][ T4185] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.595545][ T29] audit: type=1400 audit(1762449452.075:153): avc: denied { create } for pid=4194 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.621578][ T29] audit: type=1400 audit(1762449452.095:154): avc: denied { setopt } for pid=4194 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.679616][ T4202] vhci_hcd: invalid port number 23 [ 45.843756][ T4219] __nla_validate_parse: 9 callbacks suppressed [ 45.843772][ T4219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.303'. [ 45.859260][ T4219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.303'. [ 45.886000][ T4223] macvtap1: entered promiscuous mode [ 45.891451][ T4223] macvtap1: entered allmulticast mode [ 45.897607][ T4223] veth1: entered allmulticast mode [ 45.902778][ T4223] veth1: entered promiscuous mode [ 45.908651][ T4223] team0: Device macvtap1 failed to register rx_handler [ 45.916203][ T4223] veth1: left allmulticast mode [ 45.921082][ T4223] veth1: left promiscuous mode [ 46.760738][ C1] hrtimer: interrupt took 38555 ns [ 46.864996][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 46.872723][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 46.895182][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 46.902911][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 46.910634][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 46.918404][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 46.926188][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 46.933937][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 46.941676][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 46.949558][ T3409] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 46.960058][ T3409] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 47.030027][ T4274] sit0: Caught tx_queue_len zero misconfig [ 47.044640][ T4276] netlink: 148 bytes leftover after parsing attributes in process `syz.4.329'. [ 47.053878][ T4276] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 47.074175][ T4280] SELinux: policydb version 768 does not match my version range 15-35 [ 47.082186][ T4268] fido_id[4268]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 47.103069][ T4280] SELinux: failed to load policy [ 47.125067][ T4284] Driver unsupported XDP return value 0 on prog (id 83) dev N/A, expect packet loss! [ 47.168051][ T4290] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 47.311046][ T4311] loop4: detected capacity change from 0 to 512 [ 47.334254][ T4311] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.344: bg 0: block 393: padding at end of block bitmap is not set [ 47.417723][ T4311] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 47.427799][ T4311] EXT4-fs (loop4): 2 truncates cleaned up [ 47.433901][ T4311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.570477][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.664342][ T4332] loop3: detected capacity change from 0 to 512 [ 47.708517][ T4335] loop4: detected capacity change from 0 to 512 [ 47.747327][ T4338] lo: Caught tx_queue_len zero misconfig [ 47.754120][ T4338] netem: incorrect ge model size [ 47.759174][ T4338] netem: change failed [ 47.787514][ T4335] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.353: inode has both inline data and extents flags [ 47.858103][ T4335] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.353: couldn't read orphan inode 15 (err -117) [ 47.894428][ T4335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.041662][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.097288][ T4374] syz.4.369 uses obsolete (PF_INET,SOCK_PACKET) [ 48.104422][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 48.104434][ T29] audit: type=1400 audit(1762449454.575:265): avc: denied { create } for pid=4373 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.152314][ T29] audit: type=1400 audit(1762449454.615:266): avc: denied { ioctl } for pid=4373 comm="syz.4.369" path="socket:[7445]" dev="sockfs" ino=7445 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.233639][ T29] audit: type=1400 audit(1762449454.705:267): avc: denied { sqpoll } for pid=4381 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.276020][ T4388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4388 comm=syz.2.376 [ 48.289307][ T4388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4388 comm=syz.2.376 [ 48.629208][ T29] audit: type=1400 audit(1762449455.105:268): avc: denied { create } for pid=4401 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.648816][ T29] audit: type=1400 audit(1762449455.105:269): avc: denied { setopt } for pid=4401 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.716112][ T29] audit: type=1400 audit(1762449455.195:270): avc: denied { write } for pid=4406 comm="syz.0.385" path="socket:[8442]" dev="sockfs" ino=8442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.866539][ T29] audit: type=1400 audit(1762449455.345:271): avc: denied { bind } for pid=4403 comm="syz.4.384" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.886645][ T29] audit: type=1400 audit(1762449455.345:272): avc: denied { name_bind } for pid=4403 comm="syz.4.384" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 48.908444][ T29] audit: type=1400 audit(1762449455.345:273): avc: denied { node_bind } for pid=4403 comm="syz.4.384" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 48.965830][ T4422] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.006415][ T4426] bridge_slave_0: left allmulticast mode [ 49.012083][ T4426] bridge_slave_0: left promiscuous mode [ 49.017872][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.036281][ T4426] bridge_slave_1: left allmulticast mode [ 49.042068][ T4426] bridge_slave_1: left promiscuous mode [ 49.047909][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.068015][ T4435] loop0: detected capacity change from 0 to 128 [ 49.088258][ T4426] bond0: (slave bond_slave_0): Releasing backup interface [ 49.097060][ T4426] bond0: (slave bond_slave_1): Releasing backup interface [ 49.106859][ T4426] team0: Port device team_slave_0 removed [ 49.117084][ T4426] team0: Port device team_slave_1 removed [ 49.147210][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.158017][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.182832][ T4426] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 49.253759][ T4438] bond0: Caught tx_queue_len zero misconfig [ 49.330644][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.371724][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 49.380651][ T4453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 49.389608][ T4453] netlink: 'syz.0.405': attribute type 20 has an invalid length. [ 49.425051][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 49.433888][ T4453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 49.442814][ T4453] netlink: 'syz.0.405': attribute type 20 has an invalid length. [ 49.511822][ T4459] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 49.525526][ T4459] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 49.536676][ T4459] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 49.574342][ T4463] bridge_slave_0: left allmulticast mode [ 49.580035][ T4463] bridge_slave_0: left promiscuous mode [ 49.585899][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.594586][ T4463] bridge_slave_1: left allmulticast mode [ 49.600313][ T4463] bridge_slave_1: left promiscuous mode [ 49.606129][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.620429][ T4463] bond0: (slave bond_slave_0): Releasing backup interface [ 49.630910][ T4463] bond0: (slave bond_slave_1): Releasing backup interface [ 49.649176][ T4463] team0: Port device team_slave_0 removed [ 49.663546][ T4463] team0: Port device team_slave_1 removed [ 49.670879][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.678360][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.689550][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.697016][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.707715][ T4463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 49.759390][ T4470] bond0: Caught tx_queue_len zero misconfig [ 49.804124][ T4476] loop2: detected capacity change from 0 to 128 [ 49.901242][ T29] audit: type=1326 audit(1762449456.375:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.0.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a3f0f6c9 code=0x7ffc0000 [ 50.035653][ T4479] ================================================================== [ 50.037564][ T4476] syz.2.415: attempt to access beyond end of device [ 50.037564][ T4476] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 50.043762][ T4479] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 50.057160][ T4476] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 50.064956][ T4479] [ 50.064964][ T4479] write to 0xffff888119c38a28 of 4 bytes by task 4476 on cpu 1: [ 50.064979][ T4479] __mark_inode_dirty+0x248/0x750 [ 50.088839][ T4479] fat_update_time+0x1ec/0x200 [ 50.093649][ T4479] touch_atime+0x148/0x340 [ 50.098169][ T4479] filemap_splice_read+0x6ba/0x740 [ 50.103445][ T4479] splice_direct_to_actor+0x26f/0x680 [ 50.108824][ T4479] do_splice_direct+0xda/0x150 [ 50.113691][ T4479] do_sendfile+0x380/0x650 [ 50.118205][ T4479] __x64_sys_sendfile64+0x105/0x150 [ 50.123424][ T4479] x64_sys_call+0x2bb4/0x3000 [ 50.128213][ T4479] do_syscall_64+0xd2/0x200 [ 50.132719][ T4479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.138692][ T4479] [ 50.141028][ T4479] read to 0xffff888119c38a28 of 4 bytes by task 4479 on cpu 0: [ 50.148624][ T4479] __mark_inode_dirty+0x55/0x750 [ 50.153563][ T4479] fat_update_time+0x1ec/0x200 [ 50.158426][ T4479] touch_atime+0x148/0x340 [ 50.162856][ T4479] filemap_splice_read+0x6ba/0x740 [ 50.167974][ T4479] splice_direct_to_actor+0x26f/0x680 [ 50.173464][ T4479] do_splice_direct+0xda/0x150 [ 50.178233][ T4479] do_sendfile+0x380/0x650 [ 50.182653][ T4479] __x64_sys_sendfile64+0x105/0x150 [ 50.187860][ T4479] x64_sys_call+0x2bb4/0x3000 [ 50.192714][ T4479] do_syscall_64+0xd2/0x200 [ 50.197211][ T4479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.203108][ T4479] [ 50.205692][ T4479] value changed: 0x00000000 -> 0x00000070 [ 50.211409][ T4479] [ 50.213722][ T4479] Reported by Kernel Concurrency Sanitizer on: [ 50.220042][ T4479] CPU: 0 UID: 0 PID: 4479 Comm: syz.2.415 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.229668][ T4479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.239712][ T4479] ================================================================== [ 50.263082][ T4479] syz.2.415: attempt to access beyond end of device [ 50.263082][ T4479] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 50.276598][ T4479] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 51.364763][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 51.370862][ T3540] Bluetooth: hci0: Opcode 0x1003 failed: -110