last executing test programs: 1.195313048s ago: executing program 1 (id=402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 1.15525938s ago: executing program 1 (id=405): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1487ee83a120476b, 0x9, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700010025bd7000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000005000000000000000000000000000000000100000000000000000a"], 0x128}}, 0x0) 1.053084944s ago: executing program 1 (id=409): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140)={'geneve1', 0x32, 0x31}, 0xa) 1.029802775s ago: executing program 1 (id=410): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 879.346391ms ago: executing program 1 (id=416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 536.316777ms ago: executing program 2 (id=429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') 491.995718ms ago: executing program 2 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 461.77996ms ago: executing program 4 (id=434): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) 452.12544ms ago: executing program 0 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 402.233882ms ago: executing program 2 (id=438): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x28}}, 0x20000004) 387.244243ms ago: executing program 4 (id=440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 379.228613ms ago: executing program 0 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 333.967975ms ago: executing program 0 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) 331.506175ms ago: executing program 2 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 323.017455ms ago: executing program 3 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 307.644686ms ago: executing program 4 (id=446): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) mbind(&(0x7f0000199000/0xa000)=nil, 0xa000, 0x4003, &(0x7f00000000c0)=0xc, 0x9, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 290.765207ms ago: executing program 4 (id=447): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x20001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 281.068748ms ago: executing program 0 (id=448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = timerfd_create(0x9, 0x80000) timerfd_gettime(r2, &(0x7f0000000040)) 275.231087ms ago: executing program 3 (id=449): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfe}], 0x2, 0x10041, 0x0) 249.177428ms ago: executing program 3 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x10000000000000) 246.552919ms ago: executing program 0 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffc8b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) sigaltstack(0x0, 0x0) 230.202049ms ago: executing program 2 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) writev(r2, &(0x7f0000003a00)=[{&(0x7f0000001700)='C', 0x1}], 0x1) 222.77222ms ago: executing program 3 (id=453): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x20000409) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 219.28012ms ago: executing program 0 (id=454): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r0) exit(0xffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 196.384171ms ago: executing program 4 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f00000002c0), 0xc, &(0x7f0000000240)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x1000000, 0x27dfdbfd, {}, [{0x4}]}, 0x18}}, 0x0) 189.930241ms ago: executing program 2 (id=456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) 155.213693ms ago: executing program 4 (id=457): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7", 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 45.039717ms ago: executing program 3 (id=458): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r0) 32.838848ms ago: executing program 1 (id=459): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x48051}, 0x4044000) 0s ago: executing program 3 (id=460): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000000040000000400000001000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="19"], 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 26.824147][ T29] audit: type=1400 audit(1764573990.985:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.847160][ T29] audit: type=1400 audit(1764573991.005:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.850637][ T3301] cgroup: Unknown subsys name 'net' [ 26.875137][ T29] audit: type=1400 audit(1764573991.035:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.970648][ T3301] cgroup: Unknown subsys name 'cpuset' [ 26.976844][ T3301] cgroup: Unknown subsys name 'rlimit' [ 27.166397][ T29] audit: type=1400 audit(1764573991.325:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.194371][ T29] audit: type=1400 audit(1764573991.325:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.198239][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.215593][ T29] audit: type=1400 audit(1764573991.325:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.244851][ T29] audit: type=1400 audit(1764573991.325:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.265335][ T29] audit: type=1400 audit(1764573991.335:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.290715][ T29] audit: type=1400 audit(1764573991.335:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.314299][ T29] audit: type=1400 audit(1764573991.385:71): avc: denied { relabelto } for pid=3304 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.342225][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.211795][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 29.249967][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.295313][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.304251][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.316240][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.323409][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.330653][ T3311] bridge_slave_0: entered allmulticast mode [ 29.337096][ T3311] bridge_slave_0: entered promiscuous mode [ 29.371839][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.378918][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.386210][ T3311] bridge_slave_1: entered allmulticast mode [ 29.392526][ T3311] bridge_slave_1: entered promiscuous mode [ 29.432583][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.439745][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.446980][ T3317] bridge_slave_0: entered allmulticast mode [ 29.453457][ T3317] bridge_slave_0: entered promiscuous mode [ 29.464908][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.474542][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 29.483616][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.490734][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.497966][ T3317] bridge_slave_1: entered allmulticast mode [ 29.504483][ T3317] bridge_slave_1: entered promiscuous mode [ 29.517930][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.548431][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.555618][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.562831][ T3312] bridge_slave_0: entered allmulticast mode [ 29.569243][ T3312] bridge_slave_0: entered promiscuous mode [ 29.593402][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.600577][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.607764][ T3312] bridge_slave_1: entered allmulticast mode [ 29.614215][ T3312] bridge_slave_1: entered promiscuous mode [ 29.623255][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.637509][ T3311] team0: Port device team_slave_0 added [ 29.650494][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.659588][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.666672][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.673939][ T3316] bridge_slave_0: entered allmulticast mode [ 29.680469][ T3316] bridge_slave_0: entered promiscuous mode [ 29.687287][ T3311] team0: Port device team_slave_1 added [ 29.708529][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.715712][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.723006][ T3316] bridge_slave_1: entered allmulticast mode [ 29.729432][ T3316] bridge_slave_1: entered promiscuous mode [ 29.741517][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.750813][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.757761][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.783956][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.809616][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.819151][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.826138][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.852278][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.868297][ T3317] team0: Port device team_slave_0 added [ 29.889394][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.896515][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.903884][ T3319] bridge_slave_0: entered allmulticast mode [ 29.910362][ T3319] bridge_slave_0: entered promiscuous mode [ 29.917398][ T3317] team0: Port device team_slave_1 added [ 29.924323][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.939754][ T3312] team0: Port device team_slave_0 added [ 29.945602][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.952825][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.960102][ T3319] bridge_slave_1: entered allmulticast mode [ 29.966512][ T3319] bridge_slave_1: entered promiscuous mode [ 29.973896][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.989004][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.996160][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.022098][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.033701][ T3312] team0: Port device team_slave_1 added [ 30.061412][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.068410][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.094354][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.110688][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.131029][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.138266][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.164386][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.176040][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.190863][ T3316] team0: Port device team_slave_0 added [ 30.199138][ T3311] hsr_slave_0: entered promiscuous mode [ 30.205373][ T3311] hsr_slave_1: entered promiscuous mode [ 30.217903][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.224979][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.250922][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.272923][ T3316] team0: Port device team_slave_1 added [ 30.290772][ T3317] hsr_slave_0: entered promiscuous mode [ 30.296935][ T3317] hsr_slave_1: entered promiscuous mode [ 30.302819][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 30.308565][ T3317] Cannot create hsr debugfs directory [ 30.316957][ T3319] team0: Port device team_slave_0 added [ 30.342832][ T3319] team0: Port device team_slave_1 added [ 30.359284][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.366323][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.392349][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.416230][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.423246][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.449257][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.464598][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.471598][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.497676][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.511481][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.518531][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.544608][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.564250][ T3312] hsr_slave_0: entered promiscuous mode [ 30.570270][ T3312] hsr_slave_1: entered promiscuous mode [ 30.576020][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 30.581784][ T3312] Cannot create hsr debugfs directory [ 30.642115][ T3319] hsr_slave_0: entered promiscuous mode [ 30.648247][ T3319] hsr_slave_1: entered promiscuous mode [ 30.654396][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 30.660172][ T3319] Cannot create hsr debugfs directory [ 30.672646][ T3316] hsr_slave_0: entered promiscuous mode [ 30.678696][ T3316] hsr_slave_1: entered promiscuous mode [ 30.684630][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 30.690452][ T3316] Cannot create hsr debugfs directory [ 30.794203][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.820670][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.846851][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.859051][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.879332][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.890075][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.898748][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.909140][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.939245][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.949075][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.964145][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.980369][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.994038][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.007115][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.015932][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.035613][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.069204][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.085605][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.094466][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.103162][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.112119][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.137205][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.159454][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.168037][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.175149][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.192582][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.199709][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.234479][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.247456][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.262444][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.269607][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.280521][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.287674][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.297124][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.307406][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.325290][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.338753][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.358793][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.366050][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.375160][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.382232][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.394079][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.401223][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.412038][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.426261][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.433396][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.446912][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.471768][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.478985][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.488060][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.495272][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.512440][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.585417][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.670753][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.680984][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.695496][ T3311] veth0_vlan: entered promiscuous mode [ 31.704672][ T3311] veth1_vlan: entered promiscuous mode [ 31.726086][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.757537][ T3317] veth0_vlan: entered promiscuous mode [ 31.764577][ T3311] veth0_macvtap: entered promiscuous mode [ 31.773062][ T3311] veth1_macvtap: entered promiscuous mode [ 31.783438][ T3317] veth1_vlan: entered promiscuous mode [ 31.796183][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.812072][ T3317] veth0_macvtap: entered promiscuous mode [ 31.835989][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.845577][ T3317] veth1_macvtap: entered promiscuous mode [ 31.870942][ T176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.887619][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.899107][ T3316] veth0_vlan: entered promiscuous mode [ 31.906439][ T176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.915293][ T176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.928063][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.941444][ T176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.955140][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.955154][ T29] audit: type=1400 audit(1764573996.115:81): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.nhbULo/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.958140][ T3316] veth1_vlan: entered promiscuous mode [ 31.973865][ T29] audit: type=1400 audit(1764573996.125:82): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.990092][ T3319] veth0_vlan: entered promiscuous mode [ 31.991081][ T29] audit: type=1400 audit(1764573996.125:83): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.nhbULo/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.019181][ T3319] veth1_vlan: entered promiscuous mode [ 32.044876][ T29] audit: type=1400 audit(1764573996.125:84): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.059717][ T176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.072410][ T29] audit: type=1400 audit(1764573996.125:85): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.nhbULo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.107905][ T29] audit: type=1400 audit(1764573996.125:86): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.nhbULo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.135269][ T29] audit: type=1400 audit(1764573996.125:87): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.156975][ T29] audit: type=1400 audit(1764573996.315:88): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.179792][ T29] audit: type=1400 audit(1764573996.315:89): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="gadgetfs" ino=3733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.205914][ T176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.216869][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.219330][ T3316] veth0_macvtap: entered promiscuous mode [ 32.239890][ T3316] veth1_macvtap: entered promiscuous mode [ 32.260478][ T176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.277013][ T176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.286181][ T29] audit: type=1400 audit(1764573996.445:90): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.294424][ T3319] veth0_macvtap: entered promiscuous mode [ 32.328923][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.358094][ T3319] veth1_macvtap: entered promiscuous mode [ 32.382734][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.404657][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.432356][ T3450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.447406][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.454786][ T3450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.463963][ T3312] veth0_vlan: entered promiscuous mode [ 32.483526][ T3450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.498022][ T3450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.527098][ T3312] veth1_vlan: entered promiscuous mode [ 32.544566][ T3450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.562564][ T3450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.576858][ T3492] tipc: Started in network mode [ 32.581979][ T3492] tipc: Node identity ac14140f, cluster identity 4711 [ 32.602432][ T3492] tipc: New replicast peer: 255.255.255.83 [ 32.608400][ T3492] tipc: Enabled bearer , priority 10 [ 32.623672][ T3450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.634753][ T3312] veth0_macvtap: entered promiscuous mode [ 32.679593][ T3450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.689145][ T3312] veth1_macvtap: entered promiscuous mode [ 32.731312][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.767395][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.828078][ T3450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.870767][ T3450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.896879][ T176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.919949][ T176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.935959][ T3495] mmap: syz.3.4 (3495) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.937349][ T3521] netlink: 96 bytes leftover after parsing attributes in process `syz.0.19'. [ 32.983663][ T3529] loop4: detected capacity change from 0 to 164 [ 33.023233][ T3529] process 'syz.4.5' launched '/dev/fd/3' with NULL argv: empty string added [ 33.042016][ T3529] syz.4.5: attempt to access beyond end of device [ 33.042016][ T3529] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 33.088733][ T3529] syz.4.5: attempt to access beyond end of device [ 33.088733][ T3529] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 33.279102][ T3564] SELinux: Context is not valid (left unmapped). [ 33.289151][ T3563] loop2: detected capacity change from 0 to 1024 [ 33.319238][ T3563] ======================================================= [ 33.319238][ T3563] WARNING: The mand mount option has been deprecated and [ 33.319238][ T3563] and is ignored by this kernel. Remove the mand [ 33.319238][ T3563] option from the mount to silence this warning. [ 33.319238][ T3563] ======================================================= [ 33.422479][ T3563] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 33.439726][ T3563] System zones: 0-1, 3-12 [ 33.448935][ T3563] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.519559][ T3587] netlink: 'syz.3.40': attribute type 12 has an invalid length. [ 33.646906][ T3408] tipc: Node number set to 2886997007 [ 33.739679][ T3607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3607 comm=syz.1.47 [ 33.739737][ T3607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3607 comm=syz.1.47 [ 33.784917][ T3605] syz.3.46 (3605) used greatest stack depth: 10552 bytes left [ 33.946954][ T3619] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET) [ 33.981498][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 34.184224][ T3633] netlink: 'syz.2.59': attribute type 21 has an invalid length. [ 34.184328][ T3633] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 34.184341][ T3633] netlink: 144 bytes leftover after parsing attributes in process `syz.2.59'. [ 34.727883][ T3656] loop2: detected capacity change from 0 to 8192 [ 34.742006][ T3656] FAT-fs (loop2): bogus logical sector size 516 [ 34.748368][ T3656] FAT-fs (loop2): Can't find a valid FAT filesystem [ 35.076167][ T3680] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.294832][ T3698] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 35.371648][ T3702] rdma_op ffff88811af49980 conn xmit_rdma 0000000000000000 [ 35.469750][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.612932][ T3726] loop0: detected capacity change from 0 to 1024 [ 35.637435][ T3731] netlink: 256 bytes leftover after parsing attributes in process `syz.1.101'. [ 35.646906][ T3731] unsupported nlmsg_type 40 [ 35.652174][ T3726] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.99: bad orphan inode 134217728 [ 35.667227][ T3726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.700604][ T3733] loop1: detected capacity change from 0 to 1024 [ 35.709292][ T3733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.718188][ T3728] SELinux: failed to load policy [ 35.733059][ T3733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.825312][ T3742] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 35.977016][ T3751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.019742][ T3751] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 36.101420][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.140954][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.194114][ T3768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'. [ 36.213568][ T3768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'. [ 36.222642][ T3768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 36.345834][ T3789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.128'. [ 36.469367][ T3803] loop4: detected capacity change from 0 to 2048 [ 36.501604][ T3812] xt_policy: neither incoming nor outgoing policy selected [ 36.509494][ T3811] netlink: 830 bytes leftover after parsing attributes in process `syz.3.138'. [ 36.535266][ T3803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.579274][ T3818] syz.3.141 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 36.625872][ T3803] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.654243][ T3803] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 36.666718][ T3803] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.666718][ T3803] [ 36.677125][ T3803] EXT4-fs (loop4): Total free blocks count 0 [ 36.683475][ T3803] EXT4-fs (loop4): Free/Dirty block details [ 36.689391][ T3803] EXT4-fs (loop4): free_blocks=2415919104 [ 36.695569][ T3803] EXT4-fs (loop4): dirty_blocks=32 [ 36.700804][ T3803] EXT4-fs (loop4): Block reservation details [ 36.706786][ T3803] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 36.718592][ T3803] syz.4.136 (3803) used greatest stack depth: 10072 bytes left [ 36.740639][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.800019][ T3842] loop4: detected capacity change from 0 to 128 [ 37.016867][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 37.016884][ T29] audit: type=1400 audit(1764574001.175:299): avc: denied { audit_write } for pid=3862 comm="syz.4.162" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.052508][ T29] audit: type=1107 audit(1764574001.205:300): pid=3862 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 37.108178][ T29] audit: type=1400 audit(1764574001.265:301): avc: denied { read append } for pid=3871 comm="syz.1.167" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.133002][ T29] audit: type=1400 audit(1764574001.265:302): avc: denied { ioctl open } for pid=3871 comm="syz.1.167" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.182779][ T29] audit: type=1326 audit(1764574001.345:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc280e6f749 code=0x7ffc0000 [ 37.231898][ T29] audit: type=1400 audit(1764574001.365:304): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.251917][ T29] audit: type=1326 audit(1764574001.365:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc280e6f749 code=0x7ffc0000 [ 37.275767][ T29] audit: type=1326 audit(1764574001.365:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc280e6f749 code=0x7ffc0000 [ 37.275797][ T29] audit: type=1326 audit(1764574001.365:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc280e6f749 code=0x7ffc0000 [ 37.323020][ T29] audit: type=1326 audit(1764574001.365:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3877 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc280e6f749 code=0x7ffc0000 [ 37.373235][ T3888] xt_hashlimit: max too large, truncated to 1048576 [ 37.424248][ T3895] loop4: detected capacity change from 0 to 512 [ 37.451182][ T3895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.478949][ T3895] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.551451][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.581976][ T3913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.605746][ T3919] IPv6: NLM_F_CREATE should be specified when creating new route [ 37.610141][ T3913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.776244][ T3938] SELinux: failed to load policy [ 37.955172][ T3966] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3966 comm=syz.1.210 [ 37.967742][ T3966] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3966 comm=syz.1.210 [ 37.986824][ T3969] ref_ctr_offset mismatch. inode: 0x88 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x23000000 [ 38.071244][ T3978] loop3: detected capacity change from 0 to 1024 [ 38.072064][ T3977] atomic_op ffff88810106a928 conn xmit_atomic 0000000000000000 [ 38.136510][ T3978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.157543][ T3986] IPv6: Can't replace route, no match found [ 38.169763][ T3978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.271214][ T3993] vhci_hcd: invalid port number 9 [ 38.276301][ T3993] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 38.462057][ T4024] loop2: detected capacity change from 0 to 2048 [ 38.496031][ T4024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.663766][ T4022] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.682244][ T4022] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 10 with error 28 [ 38.694724][ T4022] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.694724][ T4022] [ 38.704593][ T4022] EXT4-fs (loop2): Total free blocks count 0 [ 38.710648][ T4022] EXT4-fs (loop2): Free/Dirty block details [ 38.716555][ T4022] EXT4-fs (loop2): free_blocks=2415919504 [ 38.722316][ T4022] EXT4-fs (loop2): dirty_blocks=16 [ 38.727823][ T4022] EXT4-fs (loop2): Block reservation details [ 38.730557][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e3e6e00: rx timeout, send abort [ 38.733924][ T4022] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 38.763542][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.003376][ T4066] Driver unsupported XDP return value 0 on prog (id 203) dev N/A, expect packet loss! [ 39.148598][ T4080] SELinux: ebitmap: truncated map [ 39.156229][ T4080] SELinux: failed to load policy [ 39.193599][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 39.203289][ T4087] loop4: detected capacity change from 0 to 1024 [ 39.212637][ T4087] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.223642][ T4087] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.233460][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e3e6c00: rx timeout, send abort [ 39.242166][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e3e6e00: abort rx timeout. Force session deactivation [ 39.260375][ T4087] JBD2: no valid journal superblock found [ 39.266248][ T4087] EXT4-fs (loop4): Could not load journal inode [ 39.302679][ T4087] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 39.327403][ T4099] IPv6: Can't replace route, no match found [ 39.531003][ T4125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.593562][ T4125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.693318][ T4125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.733502][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812e3e6c00: abort rx timeout. Force session deactivation [ 39.761343][ T4125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.814511][ T176] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.849360][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.872834][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.881357][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.088678][ T4176] loop3: detected capacity change from 0 to 512 [ 40.100238][ T4176] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.367054][ T4200] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 40.437396][ T4207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 40.444764][ T4207] IPv6: NLM_F_CREATE should be set when creating new route [ 40.452016][ T4207] IPv6: NLM_F_CREATE should be set when creating new route [ 40.459324][ T4207] IPv6: NLM_F_CREATE should be set when creating new route [ 40.520962][ T4217] netlink: 'syz.0.319': attribute type 12 has an invalid length. [ 40.645815][ T4234] netlink: 'syz.3.328': attribute type 21 has an invalid length. [ 40.653668][ T4234] netlink: 128 bytes leftover after parsing attributes in process `syz.3.328'. [ 40.654692][ T4238] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 40.668617][ T4234] netlink: 'syz.3.328': attribute type 5 has an invalid length. [ 40.678070][ T4234] netlink: 'syz.3.328': attribute type 6 has an invalid length. [ 40.685781][ T4234] netlink: 3 bytes leftover after parsing attributes in process `syz.3.328'. [ 40.717688][ T4238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.768470][ T4238] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 40.777397][ T4238] bond1: (slave batadv1): making interface the new active one [ 40.786596][ T4238] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 40.946168][ T4261] netlink: 19 bytes leftover after parsing attributes in process `syz.0.340'. [ 41.085963][ T4279] SELinux: policydb version 38290 does not match my version range 15-35 [ 41.097225][ T4283] netlink: 'syz.4.350': attribute type 29 has an invalid length. [ 41.124570][ T4279] SELinux: failed to load policy [ 41.151239][ T4291] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4291 comm=syz.4.353 [ 41.163869][ T4291] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4291 comm=syz.4.353 [ 41.218009][ T4295] loop3: detected capacity change from 0 to 512 [ 41.250655][ T4295] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.293163][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 41.309181][ T4295] EXT4-fs (loop3): mount failed [ 41.436339][ T4319] loop9: detected capacity change from 0 to 7 [ 41.444932][ T4322] SELinux: failed to load policy [ 41.455015][ T3560] Buffer I/O error on dev loop9, logical block 0, async page read [ 41.463108][ T3560] Buffer I/O error on dev loop9, logical block 0, async page read [ 41.471006][ T3560] loop9: unable to read partition table [ 41.482890][ T4319] Buffer I/O error on dev loop9, logical block 0, async page read [ 41.509922][ T4319] Buffer I/O error on dev loop9, logical block 0, async page read [ 41.517795][ T4319] loop9: unable to read partition table [ 41.550600][ T4319] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 41.550600][ T4319] ) failed (rc=-5) [ 41.551015][ T3560] Buffer I/O error on dev loop9, logical block 0, async page read [ 41.599871][ T3560] Buffer I/O error on dev loop9, logical block 0, async page read [ 41.622805][ T3560] Buffer I/O error on dev loop9, logical block 0, async page read [ 41.640233][ T3560] Buffer I/O error on dev loop9, logical block 0, async page read [ 41.674225][ T3560] Buffer I/O error on dev loop9, logical block 0, async page read [ 41.701449][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 41.755505][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 41.795896][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 41.821931][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 42.150401][ T4399] loop4: detected capacity change from 0 to 1024 [ 42.165325][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 42.165340][ T29] audit: type=1400 audit(1764574006.325:473): avc: denied { connect } for pid=4400 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.205146][ T29] audit: type=1400 audit(1764574006.355:474): avc: denied { read } for pid=4400 comm="syz.0.404" path="socket:[7996]" dev="sockfs" ino=7996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 42.228524][ T29] audit: type=1400 audit(1764574006.365:475): avc: denied { nlmsg_write } for pid=4402 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.240830][ T4399] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.260038][ T4399] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.284782][ T4399] JBD2: no valid journal superblock found [ 42.290793][ T4399] EXT4-fs (loop4): Could not load journal inode [ 42.299900][ T4409] netlink: 'syz.0.407': attribute type 3 has an invalid length. [ 42.312585][ T4413] unsupported nla_type 52263 [ 42.316175][ T4409] netlink: 'syz.0.407': attribute type 3 has an invalid length. [ 42.372929][ T4419] loop2: detected capacity change from 0 to 1024 [ 42.390268][ T4399] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 42.400519][ T4419] EXT4-fs: inline encryption not supported [ 42.406372][ T4419] EXT4-fs: Ignoring removed i_version option [ 42.457722][ T4419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.479906][ T29] audit: type=1326 audit(1764574006.635:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577ef4f749 code=0x7ffc0000 [ 42.503626][ T29] audit: type=1326 audit(1764574006.635:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577ef4f749 code=0x7ffc0000 [ 42.527141][ T29] audit: type=1326 audit(1764574006.635:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f577ef4f749 code=0x7ffc0000 [ 42.533654][ T4419] EXT4-fs warning (device loop2): ext4_rename_delete:3731: inode #12: comm syz.2.413: Deleting old file: nlink 2, error=-2 [ 42.550597][ T29] audit: type=1326 audit(1764574006.635:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577ef4f749 code=0x7ffc0000 [ 42.587172][ T29] audit: type=1326 audit(1764574006.635:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577ef4f749 code=0x7ffc0000 [ 42.610570][ T29] audit: type=1326 audit(1764574006.635:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f577ef4f749 code=0x7ffc0000 [ 42.634029][ T29] audit: type=1326 audit(1764574006.635:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.0.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577ef4f749 code=0x7ffc0000 [ 42.660715][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.928769][ T4477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.438'. [ 43.126357][ T4508] hub 6-0:1.0: USB hub found [ 43.139963][ T4508] hub 6-0:1.0: 8 ports detected [ 43.160624][ T4517] loop4: detected capacity change from 0 to 128 [ 43.293729][ T4517] ================================================================== [ 43.301875][ T4517] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 43.309993][ T4517] [ 43.312365][ T4517] write to 0xffff88810721cb14 of 4 bytes by task 4519 on cpu 1: [ 43.320014][ T4517] xas_set_mark+0x12b/0x140 [ 43.324548][ T4517] tag_pages_for_writeback+0xc2/0x290 [ 43.329965][ T4517] writeback_iter+0x340/0x820 [ 43.334672][ T4517] mpage_writepages+0x87/0x1250 [ 43.339575][ T4517] fat_writepages+0x24/0x30 [ 43.344101][ T4517] do_writepages+0x1c6/0x310 [ 43.348720][ T4517] file_write_and_wait_range+0x156/0x2c0 [ 43.354569][ T4517] __generic_file_fsync+0x46/0x140 [ 43.359715][ T4517] fat_file_fsync+0x49/0x100 [ 43.364332][ T4517] vfs_fsync_range+0x10d/0x130 [ 43.369126][ T4517] generic_file_write_iter+0x1b8/0x2f0 [ 43.374624][ T4517] iter_file_splice_write+0x666/0xa60 [ 43.380030][ T4517] direct_splice_actor+0x156/0x2a0 [ 43.385190][ T4517] splice_direct_to_actor+0x312/0x680 [ 43.390677][ T4517] do_splice_direct+0xda/0x150 [ 43.395478][ T4517] do_sendfile+0x380/0x650 [ 43.399914][ T4517] __x64_sys_sendfile64+0x105/0x150 [ 43.405150][ T4517] x64_sys_call+0x2bb4/0x3000 [ 43.409852][ T4517] do_syscall_64+0xd2/0x200 [ 43.414360][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.420256][ T4517] [ 43.422582][ T4517] read to 0xffff88810721cb14 of 4 bytes by task 4517 on cpu 0: [ 43.430128][ T4517] file_write_and_wait_range+0x10e/0x2c0 [ 43.435780][ T4517] __generic_file_fsync+0x46/0x140 [ 43.440923][ T4517] fat_file_fsync+0x49/0x100 [ 43.445528][ T4517] vfs_fsync_range+0x10d/0x130 [ 43.450300][ T4517] generic_file_write_iter+0x1b8/0x2f0 [ 43.455764][ T4517] iter_file_splice_write+0x666/0xa60 [ 43.461137][ T4517] direct_splice_actor+0x156/0x2a0 [ 43.466262][ T4517] splice_direct_to_actor+0x312/0x680 [ 43.471638][ T4517] do_splice_direct+0xda/0x150 [ 43.476428][ T4517] do_sendfile+0x380/0x650 [ 43.480854][ T4517] __x64_sys_sendfile64+0x105/0x150 [ 43.486064][ T4517] x64_sys_call+0x2bb4/0x3000 [ 43.490792][ T4517] do_syscall_64+0xd2/0x200 [ 43.495390][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.501299][ T4517] [ 43.503625][ T4517] value changed: 0x02000021 -> 0x04000021 [ 43.509354][ T4517] [ 43.511780][ T4517] Reported by Kernel Concurrency Sanitizer on: [ 43.517938][ T4517] CPU: 0 UID: 0 PID: 4517 Comm: syz.4.457 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.527835][ T4517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 43.537992][ T4517] ================================================================== [ 43.895675][ T4519] syz.4.457: attempt to access beyond end of device [ 43.895675][ T4519] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 43.909062][ T4519] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 43.919529][ T4517] syz.4.457: attempt to access beyond end of device [ 43.919529][ T4517] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128