last executing test programs: 28.869181045s ago: executing program 4 (id=182): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 27.966291672s ago: executing program 4 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e459, 0x700000000000000) 27.905744002s ago: executing program 4 (id=195): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 27.235572031s ago: executing program 4 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) unshare(0x22020600) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 27.21633122s ago: executing program 4 (id=211): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x5}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xffffffff, 0x2, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 26.743248089s ago: executing program 4 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21081e, &(0x7f0000000880)={[], [{@measure}, {@seclabel}, {@dont_hash}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}]}, 0xfd, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") 26.699102879s ago: executing program 32 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21081e, &(0x7f0000000880)={[], [{@measure}, {@seclabel}, {@dont_hash}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}]}, 0xfd, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") 1.197677983s ago: executing program 0 (id=1156): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x20, 0x0, 0x64) 1.111644513s ago: executing program 0 (id=1161): unshare(0x22020400) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) ptrace(0x10, r0) tgkill(r0, r0, 0x12) 1.111013913s ago: executing program 2 (id=1162): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.039098603s ago: executing program 2 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 961.305243ms ago: executing program 2 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="380100001000130700000000ffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000010000000032000000ff0100000000000000000000000000010700000000000000fcffffffffffffff0000000000000000000000000000000000000001000000000000001000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001f8ffffffffffff0000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe, 0x0, 0x40}, 0x4044010) 890.498072ms ago: executing program 2 (id=1171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x30d1, &(0x7f0000000880)={0x0, 0xd277, 0x80, 0x0, 0x128}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 503.465801ms ago: executing program 5 (id=1189): unshare(0x62040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00', 0x0, [0x14, 0x200203, 0x5, 0x200003fe, 0x2008]}, &(0x7f0000000300)=0x54) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0xa8, 0x1e8, 0xfeffffff, 0x290, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'dummy0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x67, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) truncate(0x0, 0x7) 414.799271ms ago: executing program 3 (id=1194): syz_io_uring_setup(0x2701, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x2, 0x188}, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) 383.806431ms ago: executing program 3 (id=1196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f00000005c0)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2, 0x0, 0x2, 0x75, 0x100, @val=0x80}, "b3"}}}}}}}, 0x0) 378.481871ms ago: executing program 5 (id=1197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 344.210521ms ago: executing program 3 (id=1199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) 328.297681ms ago: executing program 5 (id=1200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlockall(0x7) 297.345021ms ago: executing program 1 (id=1201): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0x7}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 296.167471ms ago: executing program 3 (id=1202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 235.4987ms ago: executing program 0 (id=1203): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 232.535531ms ago: executing program 1 (id=1204): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 231.65809ms ago: executing program 5 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001280)={0x6c, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @random=0x6, 0x0, @void, @void, @val={0x3, 0x1, 0xb4}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x0, 0xb3}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x6c}}, 0x0) 199.49696ms ago: executing program 5 (id=1206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 196.69526ms ago: executing program 1 (id=1207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 196.25493ms ago: executing program 0 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000300000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 159.4753ms ago: executing program 0 (id=1209): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xfffffffb) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 148.63027ms ago: executing program 5 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) unshare(0x46060480) 110.84965ms ago: executing program 3 (id=1211): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0x0, &(0x7f0000000200)) 106.684151ms ago: executing program 1 (id=1212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0xa) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r2 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440)=r1, 0x1) 85.05544ms ago: executing program 3 (id=1213): socket$kcm(0x2, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, 0x0, 0xd28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 77.66934ms ago: executing program 1 (id=1214): rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r1, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f000000000000000000080008000d40ff000000", 0x24) 56.95756ms ago: executing program 1 (id=1215): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r0, &(0x7f0000000480)="ccd089f9ff", 0x5, 0x4004, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 42.35451ms ago: executing program 2 (id=1216): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 15.41158ms ago: executing program 0 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 2 (id=1218): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 21.419820][ T29] audit: type=1400 audit(1737099276.486:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 26.022464][ T29] audit: type=1400 audit(1737099281.086:82): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.023746][ T3285] cgroup: Unknown subsys name 'net' [ 26.045183][ T29] audit: type=1400 audit(1737099281.086:83): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.072594][ T29] audit: type=1400 audit(1737099281.126:84): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.236459][ T3285] cgroup: Unknown subsys name 'cpuset' [ 26.242726][ T3285] cgroup: Unknown subsys name 'rlimit' [ 26.354010][ T29] audit: type=1400 audit(1737099281.416:85): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.379381][ T29] audit: type=1400 audit(1737099281.416:86): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.399854][ T29] audit: type=1400 audit(1737099281.416:87): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.410590][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.420293][ T29] audit: type=1400 audit(1737099281.426:88): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.449334][ T29] audit: type=1400 audit(1737099281.426:89): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.474269][ T29] audit: type=1400 audit(1737099281.426:90): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.487594][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.497484][ T29] audit: type=1400 audit(1737099281.496:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.651002][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 27.677816][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 27.691188][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 27.741430][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.825860][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 27.843882][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.851056][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.858481][ T3302] bridge_slave_0: entered allmulticast mode [ 27.864906][ T3302] bridge_slave_0: entered promiscuous mode [ 27.871845][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.878957][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.886156][ T3297] bridge_slave_0: entered allmulticast mode [ 27.892455][ T3297] bridge_slave_0: entered promiscuous mode [ 27.901052][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.908150][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.915284][ T3297] bridge_slave_1: entered allmulticast mode [ 27.921686][ T3297] bridge_slave_1: entered promiscuous mode [ 27.930671][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.937778][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.944932][ T3296] bridge_slave_0: entered allmulticast mode [ 27.951428][ T3296] bridge_slave_0: entered promiscuous mode [ 27.958085][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.965171][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.972581][ T3302] bridge_slave_1: entered allmulticast mode [ 27.979005][ T3302] bridge_slave_1: entered promiscuous mode [ 28.001032][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.008209][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.015340][ T3296] bridge_slave_1: entered allmulticast mode [ 28.021884][ T3296] bridge_slave_1: entered promiscuous mode [ 28.038374][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.047565][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.054621][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.061903][ T3307] bridge_slave_0: entered allmulticast mode [ 28.068303][ T3307] bridge_slave_0: entered promiscuous mode [ 28.089754][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.099011][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.106219][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.113484][ T3307] bridge_slave_1: entered allmulticast mode [ 28.120128][ T3307] bridge_slave_1: entered promiscuous mode [ 28.134760][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.160836][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.171094][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.181471][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.191221][ T3297] team0: Port device team_slave_0 added [ 28.219384][ T3297] team0: Port device team_slave_1 added [ 28.230953][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.245136][ T3302] team0: Port device team_slave_0 added [ 28.251925][ T3302] team0: Port device team_slave_1 added [ 28.258504][ T3296] team0: Port device team_slave_0 added [ 28.274623][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.283925][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.290981][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.317006][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.337255][ T3296] team0: Port device team_slave_1 added [ 28.347985][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.354943][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.380974][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.394204][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.401278][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.408868][ T3300] bridge_slave_0: entered allmulticast mode [ 28.415288][ T3300] bridge_slave_0: entered promiscuous mode [ 28.427714][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.434691][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.460630][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.486417][ T3307] team0: Port device team_slave_0 added [ 28.492741][ T3307] team0: Port device team_slave_1 added [ 28.499336][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.506478][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.513685][ T3300] bridge_slave_1: entered allmulticast mode [ 28.520116][ T3300] bridge_slave_1: entered promiscuous mode [ 28.526583][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.533536][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.559548][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.570662][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.577725][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.604045][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.631971][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.639031][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.664945][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.680464][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.687474][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.713411][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.741472][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.748454][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.774447][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.787026][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.797147][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.808985][ T3297] hsr_slave_0: entered promiscuous mode [ 28.815036][ T3297] hsr_slave_1: entered promiscuous mode [ 28.865203][ T3296] hsr_slave_0: entered promiscuous mode [ 28.871341][ T3296] hsr_slave_1: entered promiscuous mode [ 28.877386][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.884955][ T3296] Cannot create hsr debugfs directory [ 28.890973][ T3300] team0: Port device team_slave_0 added [ 28.898654][ T3302] hsr_slave_0: entered promiscuous mode [ 28.904719][ T3302] hsr_slave_1: entered promiscuous mode [ 28.910753][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.918337][ T3302] Cannot create hsr debugfs directory [ 28.934352][ T3300] team0: Port device team_slave_1 added [ 28.949726][ T3307] hsr_slave_0: entered promiscuous mode [ 28.955901][ T3307] hsr_slave_1: entered promiscuous mode [ 28.961753][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.969368][ T3307] Cannot create hsr debugfs directory [ 29.009963][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.016994][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.043072][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.054262][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.061283][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.087223][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.170256][ T3300] hsr_slave_0: entered promiscuous mode [ 29.176272][ T3300] hsr_slave_1: entered promiscuous mode [ 29.182146][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.189884][ T3300] Cannot create hsr debugfs directory [ 29.274519][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.287707][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.300391][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.309027][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.341679][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.350768][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.361128][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.377558][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.401809][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.411120][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.420642][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.437804][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.457979][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.488571][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.497873][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.507097][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.516615][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.525710][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.535264][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.543985][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.598587][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.616849][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.632587][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.649500][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.656570][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.672659][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.684556][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.691733][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.700643][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.707795][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.719090][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.726249][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.735353][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.783586][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.808455][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.823844][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.830917][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.840212][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.847296][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.857885][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.871195][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.899292][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.917884][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.937338][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.944567][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.955279][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.962376][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.981337][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.988479][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.003810][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.021233][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.029582][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.036748][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.069227][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.115837][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.126339][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.147885][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.240514][ T3307] veth0_vlan: entered promiscuous mode [ 30.267162][ T3307] veth1_vlan: entered promiscuous mode [ 30.302698][ T3297] veth0_vlan: entered promiscuous mode [ 30.312315][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.324529][ T3302] veth0_vlan: entered promiscuous mode [ 30.339924][ T3307] veth0_macvtap: entered promiscuous mode [ 30.350356][ T3297] veth1_vlan: entered promiscuous mode [ 30.357271][ T3307] veth1_macvtap: entered promiscuous mode [ 30.366325][ T3302] veth1_vlan: entered promiscuous mode [ 30.375972][ T3296] veth0_vlan: entered promiscuous mode [ 30.398951][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.409580][ T3296] veth1_vlan: entered promiscuous mode [ 30.422446][ T3296] veth0_macvtap: entered promiscuous mode [ 30.434498][ T3302] veth0_macvtap: entered promiscuous mode [ 30.442561][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.450529][ T3302] veth1_macvtap: entered promiscuous mode [ 30.457937][ T3296] veth1_macvtap: entered promiscuous mode [ 30.468838][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.477618][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.486360][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.495072][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.518643][ T3297] veth0_macvtap: entered promiscuous mode [ 30.529372][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.539937][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.550807][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.559537][ T3297] veth1_macvtap: entered promiscuous mode [ 30.577934][ T3300] veth0_vlan: entered promiscuous mode [ 30.583704][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.594228][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.604105][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.614546][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.625400][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.633359][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.643874][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.654376][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.663093][ T3296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.671887][ T3296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.680790][ T3296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.689574][ T3296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.701946][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.712441][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.722281][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.732726][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.743217][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.760912][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.769797][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.778779][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.787590][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.799434][ T3300] veth1_vlan: entered promiscuous mode [ 30.807906][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.816560][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.818495][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.842871][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.853351][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.863327][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.873905][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.884524][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.894997][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.905656][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.915492][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.926191][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.936173][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.946646][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.957394][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.999764][ T3297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.008608][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.017407][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.026155][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.050864][ T3300] veth0_macvtap: entered promiscuous mode [ 31.073876][ T3300] veth1_macvtap: entered promiscuous mode [ 31.115259][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.125894][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.135962][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.146566][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.152737][ T3446] loop2: detected capacity change from 0 to 512 [ 31.156511][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.169776][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 31.169795][ T29] audit: type=1400 audit(1737099286.226:129): avc: denied { map_create } for pid=3442 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.173233][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.179248][ T29] audit: type=1400 audit(1737099286.226:130): avc: denied { map_read map_write } for pid=3442 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.227683][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.238247][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.251209][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.268092][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.276169][ T3446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.278658][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.300906][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.311424][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.311823][ T3446] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.321286][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.321321][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.321333][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.362472][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.372767][ T29] audit: type=1400 audit(1737099286.386:131): avc: denied { mount } for pid=3445 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.395650][ T29] audit: type=1400 audit(1737099286.446:132): avc: denied { open } for pid=3445 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.405068][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.414601][ T29] audit: type=1400 audit(1737099286.446:133): avc: denied { kernel } for pid=3445 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.426471][ T29] audit: type=1326 audit(1737099286.496:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aeb025d29 code=0x7ffc0000 [ 31.464269][ T29] audit: type=1326 audit(1737099286.516:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5aeb025d29 code=0x7ffc0000 [ 31.487275][ T29] audit: type=1326 audit(1737099286.516:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aeb025d29 code=0x7ffc0000 [ 31.510924][ T29] audit: type=1326 audit(1737099286.536:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aeb025d29 code=0x7ffc0000 [ 31.534149][ T29] audit: type=1400 audit(1737099286.556:138): avc: denied { write } for pid=3445 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.568236][ T3300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.577161][ T3300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.585906][ T3300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.594692][ T3300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.669093][ T3457] 9pnet_fd: Insufficient options for proto=fd [ 31.750087][ T3463] capability: warning: `syz.0.9' uses 32-bit capabilities (legacy support in use) [ 31.770968][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.058920][ T3493] syz.0.23[3493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.058991][ T3493] syz.0.23[3493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.108476][ T3493] syz.0.23[3493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.189923][ T3508] loop3: detected capacity change from 0 to 128 [ 32.233194][ T3512] syz.0.32[3512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.233333][ T3512] syz.0.32[3512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.246726][ T3512] syz.0.32[3512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.260673][ T3512] netlink: 'syz.0.32': attribute type 10 has an invalid length. [ 32.279262][ T3508] syz.3.30: attempt to access beyond end of device [ 32.279262][ T3508] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 32.296946][ T3512] team0: Device hsr_slave_0 failed to register rx_handler [ 32.356971][ T3517] loop1: detected capacity change from 0 to 512 [ 32.366783][ T3517] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.379909][ T3517] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.391512][ T3517] EXT4-fs (loop1): 1 truncate cleaned up [ 32.397641][ T3517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.430236][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.651557][ T3542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.660417][ T3542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.683277][ T3545] SELinux: Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped). [ 32.725858][ T3542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.734704][ T3542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.806504][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 32.815877][ T3542] Zero length message leads to an empty skb [ 32.862250][ T3554] loop0: detected capacity change from 0 to 2048 [ 32.885881][ T3554] loop0: p1 < > p3 [ 32.890649][ T3554] loop0: p3 size 134217728 extends beyond EOD, truncated [ 33.022427][ T3567] loop0: detected capacity change from 0 to 512 [ 33.034539][ T3569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 33.044472][ T3567] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 33.053700][ T3567] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 33.061818][ T3567] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.55: bad orphan inode 13 [ 33.072570][ T3567] EXT4-fs (loop0): Remounting filesystem read-only [ 33.079851][ T3567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.079919][ T3572] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.092415][ T3567] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 33.107875][ T3567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.351074][ T3593] process 'syz.4.68' launched './file0' with NULL argv: empty string added [ 33.378109][ T3596] loop2: detected capacity change from 0 to 256 [ 33.558137][ T3615] macsec0: entered promiscuous mode [ 33.563520][ T3615] macsec0: entered allmulticast mode [ 33.569009][ T3615] veth1_macvtap: entered allmulticast mode [ 33.584826][ T3615] veth1_macvtap: left allmulticast mode [ 33.590674][ T3615] veth1_macvtap: left promiscuous mode [ 33.596199][ T3615] macsec0: left allmulticast mode [ 33.665600][ T3628] syz.4.79 uses obsolete (PF_INET,SOCK_PACKET) [ 33.834111][ T3642] syz.3.88[3642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.834215][ T3642] syz.3.88[3642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.886914][ T3647] loop3: detected capacity change from 0 to 512 [ 33.888852][ T3642] syz.3.88[3642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.908097][ T3647] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 33.936149][ T3648] syz.0.91[3648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.986492][ T3647] EXT4-fs (loop3): invalid journal inode [ 34.036986][ T3659] netlink: 'syz.4.96': attribute type 13 has an invalid length. [ 34.076739][ T3659] gretap0: refused to change device tx_queue_len [ 34.103088][ T3659] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 34.150770][ T3672] netlink: 'syz.1.99': attribute type 10 has an invalid length. [ 34.180490][ T3678] loop2: detected capacity change from 0 to 128 [ 34.189686][ T3672] veth1_macvtap: left promiscuous mode [ 34.197415][ T3672] batman_adv: batadv0: Adding interface: macsec0 [ 34.203770][ T3672] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.229172][ T3672] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 34.844158][ T3754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.128'. [ 34.887009][ T3752] syz.1.127 (3752) used greatest stack depth: 10592 bytes left [ 35.084132][ T3772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 35.166428][ T3776] capability: warning: `syz.1.137' uses deprecated v2 capabilities in a way that may be insecure [ 35.230388][ T3780] loop4: detected capacity change from 0 to 512 [ 35.279574][ T3780] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.345094][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.368320][ T3780] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.139: corrupted inode contents [ 35.381854][ T3780] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.139: mark_inode_dirty error [ 35.395836][ T3780] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.139: corrupted inode contents [ 35.450656][ T3800] netlink: 'syz.3.147': attribute type 10 has an invalid length. [ 35.454325][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.473027][ T3800] team0: Device hsr_slave_0 failed to register rx_handler [ 35.480066][ T3802] program syz.2.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.534765][ T3808] loop1: detected capacity change from 0 to 256 [ 35.548535][ T3800] syz.3.147 (3800) used greatest stack depth: 10336 bytes left [ 35.625449][ T3820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.158'. [ 35.853342][ T3851] IPv4: Oversized IP packet from 172.20.20.24 [ 35.859607][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 35.865766][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 35.988627][ T3861] loop1: detected capacity change from 0 to 1024 [ 35.995655][ T3861] EXT4-fs: Ignoring removed orlov option [ 36.001460][ T3861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.020664][ T3861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.099397][ T3872] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 36.105990][ T3872] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 36.113815][ T3872] vhci_hcd vhci_hcd.0: Device attached [ 36.143922][ T3873] vhci_hcd: connection closed [ 36.154449][ T1724] vhci_hcd: stop threads [ 36.163510][ T1724] vhci_hcd: release socket [ 36.167958][ T1724] vhci_hcd: disconnect device [ 36.175018][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.249713][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 36.249727][ T29] audit: type=1400 audit(1737099804.273:430): avc: denied { setopt } for pid=3879 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 36.318132][ T29] audit: type=1400 audit(1737099804.293:431): avc: denied { connect } for pid=3879 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 36.337520][ T29] audit: type=1400 audit(1737099804.312:432): avc: denied { accept } for pid=3877 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 36.479769][ T3885] loop2: detected capacity change from 0 to 128 [ 36.515621][ T29] audit: type=1400 audit(1737099804.535:433): avc: denied { module_load } for pid=3884 comm="syz.2.184" path="/23/file0/bus" dev="loop2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 36.545723][ T3885] Invalid ELF header magic: != ELF [ 36.684030][ T3892] loop2: detected capacity change from 0 to 512 [ 36.700383][ T3894] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 36.741185][ T3892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.789000][ T3892] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.956677][ T29] audit: type=1400 audit(1737099804.933:434): avc: denied { bind } for pid=3904 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.975980][ T29] audit: type=1400 audit(1737099804.933:435): avc: denied { name_bind } for pid=3904 comm="syz.3.192" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 36.996751][ T29] audit: type=1400 audit(1737099804.933:436): avc: denied { node_bind } for pid=3904 comm="syz.3.192" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 37.017426][ T29] audit: type=1400 audit(1737099804.933:437): avc: denied { connect } for pid=3904 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.036962][ T29] audit: type=1400 audit(1737099804.933:438): avc: denied { name_connect } for pid=3904 comm="syz.3.192" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 37.057977][ T29] audit: type=1400 audit(1737099804.933:439): avc: denied { getopt } for pid=3904 comm="syz.3.192" laddr=172.20.20.10 lport=47660 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.498172][ T3926] sd 0:0:1:0: device reset [ 37.660513][ T3941] loop1: detected capacity change from 0 to 512 [ 37.685619][ T3943] loop0: detected capacity change from 0 to 164 [ 37.701373][ T3941] ======================================================= [ 37.701373][ T3941] WARNING: The mand mount option has been deprecated and [ 37.701373][ T3941] and is ignored by this kernel. Remove the mand [ 37.701373][ T3941] option from the mount to silence this warning. [ 37.701373][ T3941] ======================================================= [ 37.774228][ T3941] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.875952][ T3943] syz.0.208: attempt to access beyond end of device [ 37.875952][ T3943] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 37.890113][ T3941] EXT4-fs (loop1): 1 truncate cleaned up [ 37.899210][ T3945] infiniband syz!: set active [ 37.904101][ T3945] infiniband syz!: added team_slave_0 [ 37.910070][ T3943] syz.0.208: attempt to access beyond end of device [ 37.910070][ T3943] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.027509][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.045050][ T3945] RDS/IB: syz!: added [ 38.084277][ T3945] smc: adding ib device syz! with port count 1 [ 38.090553][ T3945] smc: ib device syz! port 1 has pnetid [ 38.137697][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.173399][ T3953] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 38.174520][ T3951] loop0: detected capacity change from 0 to 1024 [ 38.190843][ T3951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.200823][ T3951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.225131][ T3951] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #4: comm syz.0.212: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 38.254217][ T3892] syz.2.187 (3892) used greatest stack depth: 6288 bytes left [ 38.261929][ T3951] EXT4-fs error (device loop0): ext4_quota_enable:7115: comm syz.0.212: Bad quota inode: 4, type: 1 [ 38.274275][ T3951] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.276983][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.318113][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.328988][ T3951] EXT4-fs (loop0): mount failed [ 38.392199][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.465079][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.482143][ T3967] mmap: syz.0.220 (3967) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.543140][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.679786][ T36] bridge_slave_1: left allmulticast mode [ 38.685558][ T36] bridge_slave_1: left promiscuous mode [ 38.691307][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.729619][ T36] bridge_slave_0: left allmulticast mode [ 38.735497][ T36] bridge_slave_0: left promiscuous mode [ 38.741298][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.983813][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.000540][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.033747][ T36] bond0 (unregistering): Released all slaves [ 39.161287][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 39.170139][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 39.178966][ T4028] netlink: 2 bytes leftover after parsing attributes in process `syz.1.235'. [ 39.307413][ T36] hsr_slave_0: left promiscuous mode [ 39.332469][ T36] hsr_slave_1: left promiscuous mode [ 39.357676][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.365170][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.383734][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.391238][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.414352][ T36] veth1_macvtap: left promiscuous mode [ 39.419978][ T36] veth0_macvtap: left promiscuous mode [ 39.425680][ T36] veth1_vlan: left promiscuous mode [ 39.430995][ T36] veth0_vlan: left promiscuous mode [ 39.559526][ T36] team0 (unregistering): Port device team_slave_1 removed [ 39.570158][ T36] team0 (unregistering): Port device team_slave_0 removed [ 39.609257][ T4053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.244'. [ 39.656220][ T3969] chnl_net:caif_netlink_parms(): no params data found [ 39.679727][ T4087] loop2: detected capacity change from 0 to 512 [ 39.686852][ T4087] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.694983][ T4087] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 39.716555][ T4087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 39.724675][ T4087] System zones: 1-12 [ 39.732052][ T4087] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.254: corrupted in-inode xattr: e_value size too large [ 39.772370][ T4087] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.254: couldn't read orphan inode 15 (err -117) [ 39.788212][ T4087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.819210][ T3969] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.826358][ T3969] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.843794][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.870976][ T3969] bridge_slave_0: entered allmulticast mode [ 39.906157][ T3969] bridge_slave_0: entered promiscuous mode [ 39.921744][ T3969] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.928977][ T3969] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.946248][ T3969] bridge_slave_1: entered allmulticast mode [ 39.958059][ T3969] bridge_slave_1: entered promiscuous mode [ 40.047343][ T3969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.065062][ T3969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.099451][ T3969] team0: Port device team_slave_0 added [ 40.119849][ T3969] team0: Port device team_slave_1 added [ 40.194813][ T3969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.202057][ T3969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.228070][ T3969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.251837][ T3969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.258815][ T3969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.284769][ T3969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.536232][ T3969] hsr_slave_0: entered promiscuous mode [ 40.583671][ T4132] Set syz1 is full, maxelem 65536 reached [ 40.599575][ T3969] hsr_slave_1: entered promiscuous mode [ 40.621507][ T3969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.641509][ T3969] Cannot create hsr debugfs directory [ 40.826229][ T3969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.846162][ T3969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.864966][ T3969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.873966][ T3969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.970228][ T4179] netlink: 96 bytes leftover after parsing attributes in process `syz.0.275'. [ 40.993022][ T3969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.006892][ T3969] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.019764][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.026844][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.038420][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.045634][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.122125][ T4195] loop0: detected capacity change from 0 to 1024 [ 41.136502][ T4195] EXT4-fs: Ignoring removed nobh option [ 41.142216][ T4195] EXT4-fs: Ignoring removed oldalloc option [ 41.206804][ T3969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.245559][ T4195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.342622][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.471549][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 41.506996][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 41.559385][ T3969] veth0_vlan: entered promiscuous mode [ 41.582683][ T3969] veth1_vlan: entered promiscuous mode [ 41.636188][ T3969] veth0_macvtap: entered promiscuous mode [ 41.657229][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 41.657245][ T29] audit: type=1326 audit(1737099809.547:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f6a5d29 code=0x7ffc0000 [ 41.665106][ T3969] veth1_macvtap: entered promiscuous mode [ 41.702231][ T29] audit: type=1326 audit(1737099809.586:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10f6a5d29 code=0x7ffc0000 [ 41.725577][ T29] audit: type=1326 audit(1737099809.586:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f6a5d29 code=0x7ffc0000 [ 41.737549][ T3969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.749070][ T29] audit: type=1326 audit(1737099809.586:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f6a5d29 code=0x7ffc0000 [ 41.759697][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.793016][ T3969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.793327][ T29] audit: type=1326 audit(1737099809.586:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10f6a5d29 code=0x7ffc0000 [ 41.803484][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.803498][ T3969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.803515][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.826778][ T29] audit: type=1326 audit(1737099809.586:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f6a5d29 code=0x7ffc0000 [ 41.836562][ T3969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.836581][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.892418][ T3969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.900466][ T29] audit: type=1326 audit(1737099809.586:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f6a5d29 code=0x7ffc0000 [ 41.930957][ T29] audit: type=1326 audit(1737099809.596:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10f6a5d29 code=0x7ffc0000 [ 41.932188][ T3969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.954256][ T29] audit: type=1326 audit(1737099809.596:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f6a5d29 code=0x7ffc0000 [ 41.954290][ T29] audit: type=1326 audit(1737099809.596:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10f6a5d29 code=0x7ffc0000 [ 41.964796][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.021443][ T3969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.031935][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.041830][ T3969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.052333][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.062257][ T3969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.072770][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.103427][ T3969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.148243][ T3969] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.157112][ T3969] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.165880][ T3969] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.174766][ T3969] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.362297][ T4299] bpf_get_probe_write_proto: 5 callbacks suppressed [ 42.362317][ T4299] syz.0.307[4299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.369119][ T4299] syz.0.307[4299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.380498][ T4299] syz.0.307[4299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.426943][ T4302] xt_hashlimit: max too large, truncated to 1048576 [ 42.476148][ T4304] ebtables: ebtables: counters copy to user failed while replacing table [ 42.517232][ T4326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.314'. [ 42.975742][ T4391] netlink: 132 bytes leftover after parsing attributes in process `syz.5.335'. [ 43.006658][ T4391] netlink: 'syz.5.335': attribute type 10 has an invalid length. [ 43.037513][ T4400] 9pnet_fd: Insufficient options for proto=fd [ 43.041889][ T4391] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 43.087890][ T4402] loop3: detected capacity change from 0 to 2048 [ 43.116972][ T4411] cgroup: Unknown subsys name 'cpuset' [ 43.126733][ T4402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.183143][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.463744][ T3373] kernel write not supported for file /27/attr/exec (pid: 3373 comm: kworker/0:3) [ 43.465779][ T4442] loop3: detected capacity change from 0 to 512 [ 43.513875][ T4442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.543043][ T4442] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.673117][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.715455][ T4454] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 43.737031][ C0] hrtimer: interrupt took 47120 ns [ 43.777617][ T4458] syz.3.361[4458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.777748][ T4458] syz.3.361[4458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.852185][ T4458] syz.3.361[4458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.921256][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 43.941422][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 44.036080][ T4447] Set syz1 is full, maxelem 65536 reached [ 44.054148][ T4466] wireguard0: entered promiscuous mode [ 44.059706][ T4466] wireguard0: entered allmulticast mode [ 44.137446][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.145012][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.152576][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.160089][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.167555][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.175049][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.182491][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.189990][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.197512][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.205084][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.212509][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.219964][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.227623][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.235069][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.242476][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.249997][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.257495][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.264940][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.272339][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.279806][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.287267][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.294683][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.302158][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.309708][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.317160][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.324632][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.332123][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.339583][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.347066][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.354534][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.361975][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.369405][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.376901][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.384331][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.391806][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.399217][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.406632][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.414029][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.421441][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.428865][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.436275][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.443744][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.451305][ T3374] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.459589][ T3374] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz0] on syz0 [ 44.560482][ T4477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.578854][ T4477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.655702][ T4503] random: crng reseeded on system resumption [ 44.789468][ T4513] syz.3.384[4513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.789562][ T4513] syz.3.384[4513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.802395][ T4513] syz.3.384[4513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.893669][ T4519] SELinux: syz.3.386 (4519) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.001162][ T4529] loop5: detected capacity change from 0 to 128 [ 45.008096][ T4529] vfat: Bad value for 'time_offset' [ 45.043603][ T4532] loop5: detected capacity change from 0 to 164 [ 45.058438][ T4532] syz.5.393: attempt to access beyond end of device [ 45.058438][ T4532] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 45.073566][ T4532] syz.5.393: attempt to access beyond end of device [ 45.073566][ T4532] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 45.232510][ T4550] SELinux: Context Ü is not valid (left unmapped). [ 45.396796][ T4570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.419627][ T4570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.469180][ T4579] loop5: detected capacity change from 0 to 164 [ 45.496634][ T4579] Unable to read rock-ridge attributes [ 45.508797][ T4579] Unable to read rock-ridge attributes [ 45.585533][ T4591] syz.0.429[4591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.607906][ T4593] random: crng reseeded on system resumption [ 45.798890][ T4606] loop0: detected capacity change from 0 to 164 [ 45.816646][ T4606] syz.0.424: attempt to access beyond end of device [ 45.816646][ T4606] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 45.831527][ T4606] syz.0.424: attempt to access beyond end of device [ 45.831527][ T4606] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 46.613376][ T4655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.643538][ T4655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.659744][ T4661] loop2: detected capacity change from 0 to 164 [ 46.679298][ T4661] syz.2.448: attempt to access beyond end of device [ 46.679298][ T4661] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 46.713357][ T4661] syz.2.448: attempt to access beyond end of device [ 46.713357][ T4661] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 46.991205][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 46.991224][ T29] audit: type=1400 audit(1737099814.791:695): avc: denied { read } for pid=4675 comm="syz.1.455" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.034315][ T4680] netlink: 96 bytes leftover after parsing attributes in process `syz.2.457'. [ 47.253839][ T4697] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.269219][ T29] audit: type=1400 audit(1737099815.057:696): avc: denied { bind } for pid=4696 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.346949][ T29] audit: type=1400 audit(1737099815.135:697): avc: denied { execute } for pid=4699 comm="syz.5.465" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 47.419665][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 47.428625][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 47.482023][ T4707] loop5: detected capacity change from 0 to 2048 [ 47.503279][ T4682] Set syz1 is full, maxelem 65536 reached [ 47.507696][ T4707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.517179][ T4705] wireguard0: entered promiscuous mode [ 47.526638][ T4705] wireguard0: entered allmulticast mode [ 47.544958][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.600845][ T29] audit: type=1400 audit(1737099815.382:698): avc: denied { create } for pid=4714 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.633842][ T29] audit: type=1400 audit(1737099815.402:699): avc: denied { connect } for pid=4714 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.701007][ T4722] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4722 comm=syz.2.474 [ 47.713501][ T4722] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4722 comm=syz.2.474 [ 47.728145][ T29] audit: type=1326 audit(1737099815.510:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77945d29 code=0x7ffc0000 [ 47.751569][ T29] audit: type=1326 audit(1737099815.510:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77945d29 code=0x7ffc0000 [ 47.774968][ T29] audit: type=1326 audit(1737099815.510:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fca77945d29 code=0x7ffc0000 [ 47.798368][ T29] audit: type=1326 audit(1737099815.510:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4725 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77945d29 code=0x7ffc0000 [ 47.821828][ T29] audit: type=1326 audit(1737099815.540:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4729 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd848e35d29 code=0x7ffc0000 [ 48.068885][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.076332][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.085478][ T4755] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 48.161673][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 48.336928][ T4797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.507'. [ 48.346361][ T4797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.507'. [ 48.379318][ T4797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.507'. [ 48.390384][ T4797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.507'. [ 48.454664][ T4808] netlink: 'syz.0.511': attribute type 298 has an invalid length. [ 48.511803][ T4814] loop0: detected capacity change from 0 to 2048 [ 48.524697][ T4814] EXT4-fs: Ignoring removed bh option [ 48.569985][ T4814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.627084][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.693204][ T4837] netlink: 'syz.1.524': attribute type 7 has an invalid length. [ 48.700895][ T4837] netlink: 'syz.1.524': attribute type 8 has an invalid length. [ 48.752937][ T4843] bpf_get_probe_write_proto: 5 callbacks suppressed [ 48.752953][ T4843] syz.5.527[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.761468][ T4843] syz.5.527[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.775039][ T4843] syz.5.527[4843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.970660][ T4862] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.026275][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.064906][ T4868] __nla_validate_parse: 4 callbacks suppressed [ 49.064989][ T4868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.539'. [ 49.085231][ T4868] vlan2: entered promiscuous mode [ 49.443422][ T4899] syz.1.552[4899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.443494][ T4899] syz.1.552[4899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.454944][ T4899] syz.1.552[4899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.755713][ T4931] devtmpfs: Unknown parameter 'ƒí®H' [ 49.943129][ T4950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'. [ 49.973189][ T4952] loop0: detected capacity change from 0 to 512 [ 50.011791][ T4952] EXT4-fs (loop0): 1 orphan inode deleted [ 50.018044][ T4952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.030871][ T55] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:4: Failed to release dquot type 1 [ 50.043468][ T4952] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.068167][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.404419][ T4958] tipc: Enabling of bearer rejected, failed to enable media [ 50.434435][ T4960] netem: change failed [ 50.475052][ T4962] bridge_slave_0: left allmulticast mode [ 50.480798][ T4962] bridge_slave_0: left promiscuous mode [ 50.486547][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.500381][ T4962] bridge_slave_1: left allmulticast mode [ 50.506198][ T4962] bridge_slave_1: left promiscuous mode [ 50.512089][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.523217][ T4962] bond0: (slave bond_slave_0): Releasing backup interface [ 50.533178][ T4962] bond0: (slave bond_slave_1): Releasing backup interface [ 50.549294][ T4962] team0: Port device team_slave_0 removed [ 50.559774][ T4962] team0: Port device team_slave_1 removed [ 50.567394][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.574877][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.587816][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.595245][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.613570][ T4962] batman_adv: batadv0: Removing interface: macsec0 [ 50.642477][ T4975] syz.3.585: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 50.657077][ T4975] CPU: 0 UID: 0 PID: 4975 Comm: syz.3.585 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 50.667779][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.677849][ T4975] Call Trace: [ 50.681205][ T4975] [ 50.684148][ T4975] dump_stack_lvl+0xf2/0x150 [ 50.688844][ T4975] dump_stack+0x15/0x1a [ 50.693146][ T4975] warn_alloc+0x145/0x1b0 [ 50.697627][ T4975] ? __schedule+0x6fa/0x930 [ 50.702183][ T4975] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 50.708220][ T4975] __vmalloc_node_range_noprof+0xaa/0xe80 [ 50.713963][ T4975] ? __pfx_futex_wake_mark+0x10/0x10 [ 50.719291][ T4975] ? __rcu_read_unlock+0x4e/0x70 [ 50.724249][ T4975] ? avc_has_perm_noaudit+0x1cc/0x210 [ 50.729723][ T4975] ? should_fail_ex+0x31/0x230 [ 50.734533][ T4975] ? xskq_create+0x36/0xd0 [ 50.739021][ T4975] ? should_failslab+0x8f/0xb0 [ 50.743822][ T4975] vmalloc_user_noprof+0x59/0x70 [ 50.748865][ T4975] ? xskq_create+0x79/0xd0 [ 50.753355][ T4975] xskq_create+0x79/0xd0 [ 50.757615][ T4975] xsk_init_queue+0x82/0xd0 [ 50.762203][ T4975] xsk_setsockopt+0x388/0x520 [ 50.766890][ T4975] ? __pfx_xsk_setsockopt+0x10/0x10 [ 50.772113][ T4975] __sys_setsockopt+0x187/0x200 [ 50.776986][ T4975] __x64_sys_setsockopt+0x66/0x80 [ 50.782040][ T4975] x64_sys_call+0x282e/0x2dc0 [ 50.786800][ T4975] do_syscall_64+0xc9/0x1c0 [ 50.791328][ T4975] ? clear_bhb_loop+0x55/0xb0 [ 50.796114][ T4975] ? clear_bhb_loop+0x55/0xb0 [ 50.800807][ T4975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.806729][ T4975] RIP: 0033:0x7fb10f6a5d29 [ 50.811158][ T4975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.831013][ T4975] RSP: 002b:00007fb10dd17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.839439][ T4975] RAX: ffffffffffffffda RBX: 00007fb10f895fa0 RCX: 00007fb10f6a5d29 [ 50.847417][ T4975] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 50.855667][ T4975] RBP: 00007fb10f721b08 R08: 0000000000000004 R09: 0000000000000000 [ 50.863654][ T4975] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.871647][ T4975] R13: 0000000000000000 R14: 00007fb10f895fa0 R15: 00007ffc2dafd2a8 [ 50.879736][ T4975] [ 50.883072][ T4975] Mem-Info: [ 50.886284][ T4975] active_anon:5001 inactive_anon:2 isolated_anon:0 [ 50.886284][ T4975] active_file:4338 inactive_file:2138 isolated_file:0 [ 50.886284][ T4975] unevictable:0 dirty:228 writeback:0 [ 50.886284][ T4975] slab_reclaimable:2831 slab_unreclaimable:15665 [ 50.886284][ T4975] mapped:28395 shmem:256 pagetables:934 [ 50.886284][ T4975] sec_pagetables:0 bounce:0 [ 50.886284][ T4975] kernel_misc_reclaimable:0 [ 50.886284][ T4975] free:1904569 free_pcp:5421 free_cma:0 [ 50.931000][ T4975] Node 0 active_anon:19860kB inactive_anon:8kB active_file:17364kB inactive_file:8576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113576kB dirty:916kB writeback:0kB shmem:1048kB writeback_tmp:0kB kernel_stack:2992kB pagetables:3596kB sec_pagetables:0kB all_unreclaimable? no [ 50.958794][ T4975] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 50.985734][ T4975] lowmem_reserve[]: 0 2866 7844 0 [ 50.990816][ T4975] Node 0 DMA32 free:2950276kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953908kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 51.019467][ T4975] lowmem_reserve[]: 0 0 4978 0 [ 51.024425][ T4975] Node 0 Normal free:4652560kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:19744kB inactive_anon:8kB active_file:17364kB inactive_file:8576kB unevictable:0kB writepending:916kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:18256kB local_pcp:11912kB free_cma:0kB [ 51.054727][ T4975] lowmem_reserve[]: 0 0 0 0 [ 51.059368][ T4975] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 51.072206][ T4975] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950276kB [ 51.088496][ T4975] Node 0 Normal: 2*4kB (UE) 139*8kB (UE) 81*16kB (UE) 59*32kB (UME) 41*64kB (UME) 46*128kB (UM) 40*256kB (UME) 26*512kB (UM) 44*1024kB (UM) 48*2048kB (UM) 1092*4096kB (UM) = 4652560kB [ 51.107185][ T4975] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 51.116644][ T4975] 6751 total pagecache pages [ 51.121292][ T4975] 4 pages in swap cache [ 51.125612][ T4975] Free swap = 124676kB [ 51.129783][ T4975] Total swap = 124996kB [ 51.134012][ T4975] 2097051 pages RAM [ 51.137819][ T4975] 0 pages HighMem/MovableOnly [ 51.142530][ T4975] 80182 pages reserved [ 51.189615][ T4989] loop1: detected capacity change from 0 to 512 [ 51.208208][ T4989] EXT4-fs: Ignoring removed i_version option [ 51.214347][ T4989] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.236826][ T4989] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.266558][ T4998] openvswitch: netlink: Message has 12 unknown bytes. [ 51.315706][ T4989] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.330626][ T5002] 9pnet_fd: Insufficient options for proto=fd [ 51.336830][ T4989] EXT4-fs (loop1): 1 truncate cleaned up [ 51.347334][ T4989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.416366][ T5013] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿ [ 51.451669][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.461359][ T5022] loop3: detected capacity change from 0 to 512 [ 51.469035][ T5022] EXT4-fs: Ignoring removed orlov option [ 51.496791][ T5022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.519282][ T5022] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.526398][ T5022] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.602: bg 0: block 248: padding at end of block bitmap is not set [ 51.536534][ T5031] syzkaller1: entered promiscuous mode [ 51.542317][ T5022] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.602: Failed to acquire dquot type 1 [ 51.546246][ T5031] syzkaller1: entered allmulticast mode [ 51.559240][ T5022] EXT4-fs (loop3): 1 truncate cleaned up [ 51.569453][ T5022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.572561][ T5029] tmpfs: Unknown parameter '' [ 51.619648][ T5022] EXT4-fs: Ignoring removed orlov option [ 51.626830][ T5022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.636986][ T5022] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 51.660584][ T5022] EXT4-fs error (device loop3): __ext4_remount:6749: comm syz.3.602: Abort forced by user [ 51.685265][ T5022] EXT4-fs (loop3): Remounting filesystem read-only [ 51.691909][ T5022] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 51.720029][ T5022] ext4 filesystem being remounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.781155][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.846251][ T5052] xt_hashlimit: max too large, truncated to 1048576 [ 51.869629][ T5052] No such timeout policy "syz1" [ 51.974350][ T5061] 9pnet: p9_errstr2errno: server reported unknown error [ 52.075929][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 52.075944][ T29] audit: type=1326 audit(1737099819.805:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79de5d29 code=0x7ffc0000 [ 52.105767][ T29] audit: type=1326 audit(1737099819.805:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79de5d29 code=0x7ffc0000 [ 52.129072][ T29] audit: type=1326 audit(1737099819.805:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7efc79de5d29 code=0x7ffc0000 [ 52.191097][ T5074] netlink: 'syz.2.624': attribute type 1 has an invalid length. [ 52.198917][ T5074] netlink: 'syz.2.624': attribute type 2 has an invalid length. [ 52.223449][ T5076] dummy0: entered promiscuous mode [ 52.236972][ T5081] ref_ctr_offset mismatch. inode: 0x333 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 52.240135][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 52.250243][ T29] audit: type=1326 audit(1737099819.805:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc79e185e5 code=0x7ffc0000 [ 52.280196][ T29] audit: type=1326 audit(1737099819.805:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79de5d29 code=0x7ffc0000 [ 52.303732][ T29] audit: type=1326 audit(1737099819.805:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79de5d29 code=0x7ffc0000 [ 52.326999][ T29] audit: type=1326 audit(1737099819.815:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7efc79de5d29 code=0x7ffc0000 [ 52.350265][ T29] audit: type=1326 audit(1737099819.815:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79de5d29 code=0x7ffc0000 [ 52.373575][ T29] audit: type=1326 audit(1737099819.815:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79de5d29 code=0x7ffc0000 [ 52.397053][ T29] audit: type=1326 audit(1737099819.815:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5068 comm="syz.5.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7efc79de5d29 code=0x7ffc0000 [ 52.420441][ T5076] dummy0: left promiscuous mode [ 52.591544][ T5103] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.621490][ T5106] bridge0: port 3(ip6gretap0) entered blocking state [ 52.628296][ T5106] bridge0: port 3(ip6gretap0) entered disabled state [ 52.640412][ T5108] loop0: detected capacity change from 0 to 512 [ 52.657001][ T5108] EXT4-fs (loop0): #blocks per group too big: 65535 [ 52.664079][ T5106] ip6gretap0: entered allmulticast mode [ 52.671205][ T5106] ip6gretap0: entered promiscuous mode [ 52.689640][ T5108] loop0: detected capacity change from 0 to 512 [ 52.697152][ T5106] bridge0: port 3(ip6gretap0) entered blocking state [ 52.703988][ T5106] bridge0: port 3(ip6gretap0) entered forwarding state [ 52.715277][ T5115] syz.2.643[5115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.715476][ T5115] syz.2.643[5115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.728776][ T5115] syz.2.643[5115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.746195][ T5114] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 52.770566][ T5115] syz.2.643 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.798824][ T5108] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 52.820022][ T5108] System zones: 0-2, 18-18, 34-35 [ 52.830592][ T5108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.862270][ T5108] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.029705][ T5145] loop5: detected capacity change from 0 to 2048 [ 53.043458][ T5147] loop3: detected capacity change from 0 to 128 [ 53.076654][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.097398][ T5145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.153299][ T5145] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 53.220594][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.263286][ T5165] pimreg: entered allmulticast mode [ 53.295427][ T5165] pimreg: left allmulticast mode [ 53.394854][ T5178] netlink: 52 bytes leftover after parsing attributes in process `syz.5.672'. [ 53.577469][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 53.611698][ T3373] IPVS: starting estimator thread 0... [ 53.700513][ T5209] IPVS: using max 2448 ests per chain, 122400 per kthread [ 53.781208][ T5224] Illegal XDP return value 4294967274 on prog (id 551) dev N/A, expect packet loss! [ 53.793171][ T5227] serio: Serial port ptm0 [ 53.914512][ T5235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.950910][ T5246] rdma_op ffff88813abf2180 conn xmit_rdma 0000000000000000 [ 54.084128][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 54.093092][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 54.129436][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 54.207105][ T5276] netlink: 'syz.5.702': attribute type 6 has an invalid length. [ 54.276906][ T5288] macsec1: entered allmulticast mode [ 54.326619][ T5288] hsr_slave_1 (unregistering): left promiscuous mode [ 54.378035][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 54.386890][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 54.423980][ T5310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 54.434248][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 54.459167][ T5310] bond1: entered promiscuous mode [ 54.464247][ T5310] bond1: entered allmulticast mode [ 54.469897][ T5310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.489803][ T5320] loop3: detected capacity change from 0 to 512 [ 54.496632][ T5320] EXT4-fs: Ignoring removed i_version option [ 54.502753][ T5320] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.521194][ T5320] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.588292][ T5338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.719'. [ 54.599974][ T5320] EXT4-fs (loop3): 1 truncate cleaned up [ 54.606074][ T5320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.659088][ T5346] netlink: 87 bytes leftover after parsing attributes in process `syz.0.723'. [ 54.714484][ T5354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.725'. [ 54.759039][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.925476][ T5394] syz.1.737[5394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.925680][ T5394] syz.1.737[5394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.949061][ T5394] syz.1.737[5394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.973867][ T5401] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.072093][ T5415] netlink: 'syz.2.745': attribute type 3 has an invalid length. [ 55.138241][ T5426] loop2: detected capacity change from 0 to 512 [ 55.191011][ T5426] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.217225][ T5426] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 55.232271][ T5426] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 55.239325][ T5426] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.750: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 55.243225][ T5436] loop3: detected capacity change from 0 to 1024 [ 55.265406][ T5426] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.750: couldn't read orphan inode 13 (err -117) [ 55.278942][ T5436] EXT4-fs: Ignoring removed nobh option [ 55.284612][ T5436] EXT4-fs: Ignoring removed bh option [ 55.290594][ T5426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.361599][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.407887][ T5436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.528558][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.609889][ T5498] loop2: detected capacity change from 0 to 2048 [ 55.631555][ T5498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.661781][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.019605][ T5544] loop2: detected capacity change from 0 to 1024 [ 56.042534][ T5544] EXT4-fs: Ignoring removed nobh option [ 56.048306][ T5544] EXT4-fs: Ignoring removed bh option [ 56.078247][ T5544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.136292][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.228959][ T5570] loop2: detected capacity change from 0 to 1024 [ 56.263875][ T5570] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.283941][ T5570] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.306360][ T5570] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.313327][ T5570] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 56.325222][ T5570] EXT4-fs (loop2): Remounting filesystem read-only [ 56.333500][ T5570] EXT4-fs (loop2): 1 orphan inode deleted [ 56.354859][ T5570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 56.368348][ T5586] netlink: 3 bytes leftover after parsing attributes in process `syz.5.804'. [ 56.377703][ T5586] 0ªX¹¦À: renamed from caif0 [ 56.384209][ T5570] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 56.391304][ T5570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.401903][ T5586] 0ªX¹¦À: entered allmulticast mode [ 56.407247][ T5586] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 56.423071][ T5570] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.618777][ T5623] netlink: 133492 bytes leftover after parsing attributes in process `syz.0.831'. [ 56.635624][ T5626] loop1: detected capacity change from 0 to 512 [ 56.684096][ T5626] EXT4-fs (loop1): 1 orphan inode deleted [ 56.690337][ T5626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.703292][ T1724] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:5: Failed to release dquot type 1 [ 56.715933][ T5626] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.759415][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.774465][ T5639] sock: sock_set_timeout: `syz.0.827' (pid 5639) tries to set negative timeout [ 56.990855][ T5664] loop2: detected capacity change from 0 to 2048 [ 57.012275][ T5664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.033067][ T5664] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.063514][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.217525][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 57.217544][ T29] audit: type=1326 audit(1737099824.897:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff895d29 code=0x7ffc0000 [ 57.247339][ T29] audit: type=1326 audit(1737099824.897:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff895d29 code=0x7ffc0000 [ 57.270748][ T29] audit: type=1326 audit(1737099824.897:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f00ff895d29 code=0x7ffc0000 [ 57.294076][ T29] audit: type=1326 audit(1737099824.907:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff895d29 code=0x7ffc0000 [ 57.317717][ T29] audit: type=1326 audit(1737099824.907:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff895d29 code=0x7ffc0000 [ 57.341545][ T5681] loop1: detected capacity change from 0 to 512 [ 57.363671][ T5681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.376439][ T5681] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.395507][ T29] audit: type=1400 audit(1737099825.076:1177): avc: denied { setattr } for pid=5680 comm="syz.1.845" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.432472][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.482902][ T5692] SELinux: syz.1.850 (5692) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 57.554207][ T29] audit: type=1400 audit(1737099825.225:1178): avc: denied { bind } for pid=5696 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.593597][ T29] audit: type=1326 audit(1737099825.265:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff895d29 code=0x7ffc0000 [ 57.622325][ T29] audit: type=1326 audit(1737099825.294:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00ff895d29 code=0x7ffc0000 [ 57.646239][ T29] audit: type=1326 audit(1737099825.294:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00ff895d29 code=0x7ffc0000 [ 57.993389][ T5739] loop5: detected capacity change from 0 to 2048 [ 58.086215][ T5739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.151161][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.346359][ T5777] loop5: detected capacity change from 0 to 1024 [ 58.366194][ T5777] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 58.377280][ T5777] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 58.411732][ T5777] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 58.430415][ T5784] Process accounting resumed [ 58.435127][ T5784] kernel write not supported for file task/335/attr/sockcreate (pid: 5784 comm: syz.3.894) [ 58.446125][ T5777] EXT4-fs (loop5): invalid journal inode [ 58.452620][ T5782] netlink: 'syz.1.893': attribute type 4 has an invalid length. [ 58.461660][ T5777] EXT4-fs (loop5): can't get journal size [ 58.480641][ T5777] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.890: blocks 2-2 from inode overlap system zone [ 58.497478][ T5777] EXT4-fs (loop5): failed to initialize system zone (-117) [ 58.507345][ T5777] EXT4-fs (loop5): mount failed [ 58.566712][ T5799] xt_hashlimit: max too large, truncated to 1048576 [ 58.575597][ T5799] Cannot find set identified by id 0 to match [ 58.689069][ T5819] vcan0: entered allmulticast mode [ 58.696129][ T5819] vcan0 (unregistering): left allmulticast mode [ 58.738598][ T5826] loop1: detected capacity change from 0 to 1024 [ 58.753495][ T5826] EXT4-fs: Ignoring removed bh option [ 58.771785][ T5826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.834087][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.069633][ T5867] netlink: 'syz.1.932': attribute type 2 has an invalid length. [ 59.077398][ T5867] netlink: 'syz.1.932': attribute type 4 has an invalid length. [ 59.155305][ T5876] loop1: detected capacity change from 0 to 512 [ 59.181434][ T5876] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.208167][ T5876] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.936: bad orphan inode 131083 [ 59.227477][ T5876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.243803][ T5886] loop3: detected capacity change from 0 to 256 [ 59.264088][ T5886] FAT-fs (loop3): Directory bread(block 64) failed [ 59.271501][ T5886] FAT-fs (loop3): Directory bread(block 65) failed [ 59.278101][ T5886] FAT-fs (loop3): Directory bread(block 66) failed [ 59.284786][ T5886] FAT-fs (loop3): Directory bread(block 67) failed [ 59.291457][ T5886] FAT-fs (loop3): Directory bread(block 68) failed [ 59.298094][ T5886] FAT-fs (loop3): Directory bread(block 69) failed [ 59.304689][ T5886] FAT-fs (loop3): Directory bread(block 70) failed [ 59.312676][ T5886] FAT-fs (loop3): Directory bread(block 71) failed [ 59.319320][ T5886] FAT-fs (loop3): Directory bread(block 72) failed [ 59.327738][ T5886] FAT-fs (loop3): Directory bread(block 73) failed [ 59.408360][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.515653][ T5922] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 59.515984][ T5921] IPVS: stopping master sync thread 5922 ... [ 59.567421][ T5925] SELinux: policydb version 0 does not match my version range 15-33 [ 59.582962][ T5925] SELinux: failed to load policy [ 59.671209][ T5946] __nla_validate_parse: 8 callbacks suppressed [ 59.671263][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 59.797993][ T5959] netlink: 'syz.3.973': attribute type 3 has an invalid length. [ 59.805814][ T5959] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.973'. [ 59.834958][ T5963] netlink: 3 bytes leftover after parsing attributes in process `syz.3.975'. [ 59.846819][ T5963] batadv1: entered promiscuous mode [ 59.852079][ T5963] batadv1: entered allmulticast mode [ 60.017327][ T5980] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 60.074734][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 60.083912][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.091341][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.100017][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.107564][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.448574][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.999'. [ 60.561294][ T6025] syz.0.1004[6025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.561442][ T6025] syz.0.1004[6025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.574161][ T6025] syz.0.1004[6025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.591224][ T6025] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 60.678768][ T6033] blktrace: Concurrent blktraces are not allowed on loop10 [ 60.882793][ T6054] loop1: detected capacity change from 0 to 2048 [ 60.929427][ T6054] Alternate GPT is invalid, using primary GPT. [ 60.935727][ T6054] loop1: p1 p2 p3 [ 60.968074][ T6066] loop0: detected capacity change from 0 to 128 [ 60.975007][ T6066] FAT-fs (loop0): bogus logical sector size 0 [ 60.981192][ T6066] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 60.990570][ T6066] FAT-fs (loop0): Can't find a valid FAT filesystem [ 61.332807][ T6113] random: crng reseeded on system resumption [ 61.438077][ T6120] netlink: 'syz.3.1046': attribute type 3 has an invalid length. [ 61.653097][ T6152] atomic_op ffff88812bb14928 conn xmit_atomic 0000000000000000 [ 61.911192][ T6178] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1073'. [ 61.920382][ T6178] netlink: 'syz.0.1073': attribute type 2 has an invalid length. [ 62.002044][ T6193] random: crng reseeded on system resumption [ 62.048211][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1083'. [ 62.082148][ T6203] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.137738][ T6211] syz.5.1088: attempt to access beyond end of device [ 62.137738][ T6211] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 62.191741][ T6217] pim6reg: entered allmulticast mode [ 62.200927][ T6217] pim6reg: left allmulticast mode [ 62.255294][ T6225] loop1: detected capacity change from 0 to 1024 [ 62.270445][ T6225] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.281392][ T6225] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.293041][ T6225] JBD2: no valid journal superblock found [ 62.298792][ T6225] EXT4-fs (loop1): Could not load journal inode [ 62.331687][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 62.331720][ T29] audit: type=1400 audit(1737099829.990:1473): avc: denied { bind } for pid=6235 comm="syz.5.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.357390][ T29] audit: type=1400 audit(1737099829.990:1474): avc: denied { name_bind } for pid=6235 comm="syz.5.1100" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 62.378244][ T29] audit: type=1400 audit(1737099829.990:1475): avc: denied { node_bind } for pid=6235 comm="syz.5.1100" saddr=ff01::1 src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 62.546210][ T6244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1104'. [ 62.559429][ T6242] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1103'. [ 62.568668][ T6242] netlink: 'syz.5.1103': attribute type 2 has an invalid length. [ 62.605104][ T6249] loop5: detected capacity change from 0 to 2048 [ 62.630244][ T6249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.644122][ T29] audit: type=1400 audit(1737099830.300:1476): avc: denied { create } for pid=6246 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.666594][ T6256] smc: net device bond0 applied user defined pnetid SYZ2 [ 62.674752][ T6256] smc: net device bond0 erased user defined pnetid SYZ2 [ 62.682900][ T29] audit: type=1400 audit(1737099830.340:1477): avc: denied { write } for pid=6248 comm="syz.5.1106" path="/171/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.705709][ T29] audit: type=1400 audit(1737099830.340:1478): avc: denied { mounton } for pid=6248 comm="syz.5.1106" path="/171/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.751952][ T3969] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.786351][ T3969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.799906][ T29] audit: type=1400 audit(1737099830.360:1479): avc: denied { bind } for pid=6246 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.819478][ T29] audit: type=1400 audit(1737099830.410:1480): avc: denied { rmdir } for pid=3969 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.828348][ T6260] syz.3.1111[6260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.842370][ T29] audit: type=1400 audit(1737099830.440:1481): avc: denied { unlink } for pid=3969 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 62.842406][ T29] audit: type=1400 audit(1737099830.440:1482): avc: denied { unmount } for pid=3969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.882764][ T6260] syz.3.1111[6260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.900469][ T6260] syz.3.1111[6260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.191945][ T6289] pim6reg: entered allmulticast mode [ 63.224721][ T6289] pim6reg: left allmulticast mode [ 63.282650][ T6298] @ÿ: renamed from vlan0 (while UP) [ 63.452833][ T6309] netlink: 'syz.1.1132': attribute type 21 has an invalid length. [ 63.563499][ T6324] @ÿ: renamed from vlan0 (while UP) [ 63.596264][ T6328] loop3: detected capacity change from 0 to 512 [ 63.614611][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'. [ 63.640743][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.654824][ T6328] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.718040][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.878135][ T6370] syz.0.1156[6370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.878197][ T6370] syz.0.1156[6370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.902099][ T6370] syz.0.1156[6370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.985918][ T6385] xt_hashlimit: max too large, truncated to 1048576 [ 64.063854][ T6391] syz.5.1166: attempt to access beyond end of device [ 64.063854][ T6391] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 64.112279][ T6394] loop3: detected capacity change from 0 to 1024 [ 64.122741][ T6394] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.133698][ T6394] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.145727][ T6394] JBD2: no valid journal superblock found [ 64.151611][ T6394] EXT4-fs (loop3): Could not load journal inode [ 64.309379][ T6423] loop3: detected capacity change from 0 to 512 [ 64.316658][ T6423] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.328263][ T6423] EXT4-fs (loop3): 1 truncate cleaned up [ 64.334896][ T6423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.348471][ T6423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.457628][ T6443] loop5: detected capacity change from 0 to 1024 [ 64.469971][ T6443] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.481060][ T6443] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.492018][ T6443] JBD2: no valid journal superblock found [ 64.497765][ T6443] EXT4-fs (loop5): Could not load journal inode [ 64.694490][ T6469] ebt_among: dst integrity fail: 31d [ 64.733762][ T6473] xt_hashlimit: max too large, truncated to 1048576 [ 65.043726][ T6503] ================================================================== [ 65.051871][ T6503] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 65.059812][ T6503] [ 65.062147][ T6503] write to 0xffff88813d7ba900 of 8 bytes by task 6510 on cpu 0: [ 65.069790][ T6503] cpu_map_kthread_run+0x49b/0x11f0 [ 65.075019][ T6503] kthread+0x1d1/0x210 [ 65.079104][ T6503] ret_from_fork+0x4b/0x60 [ 65.083532][ T6503] ret_from_fork_asm+0x1a/0x30 [ 65.088317][ T6503] [ 65.090655][ T6503] read to 0xffff88813d7ba900 of 8 bytes by task 6503 on cpu 1: [ 65.098210][ T6503] bq_flush_to_queue+0x125/0x360 [ 65.103168][ T6503] cpu_map_enqueue+0x19e/0x1b0 [ 65.107950][ T6503] xdp_do_redirect_frame+0x2a4/0x6b0 [ 65.113251][ T6503] bpf_test_run_xdp_live+0x8c6/0x1040 [ 65.118732][ T6503] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 65.124035][ T6503] bpf_prog_test_run+0x20f/0x3a0 [ 65.128987][ T6503] __sys_bpf+0x400/0x7a0 [ 65.133235][ T6503] __x64_sys_bpf+0x43/0x50 [ 65.137670][ T6503] x64_sys_call+0x2914/0x2dc0 [ 65.142361][ T6503] do_syscall_64+0xc9/0x1c0 [ 65.146899][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.152802][ T6503] [ 65.155129][ T6503] value changed: 0xffff888118458070 -> 0x0000000000000000 [ 65.162257][ T6503] [ 65.164583][ T6503] Reported by Kernel Concurrency Sanitizer on: [ 65.170738][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.3.1213 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 65.181423][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.191492][ T6503] ==================================================================