last executing test programs: 11.431431656s ago: executing program 0 (id=138): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4d811}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendto$isdn(r2, &(0x7f0000000140)={0x8, 0x5, "aee1e1eb8c5c42b670893c78cc8e576bc5f0bf7db4032463839a255bfb7ab2b287eaa6c9c242c524b3fa20131e9c1e32b222bab3d6c0ceda4bd0843252b6b8f93a4bea518f95991995ff06fb9d20046813fb72e9ccf0f66055e9fa33c651ebb35f51fd5d80ed2b9e0d7640b6d5e7557f25020bb43a72f3aee4561c845281342f8b3c18ed93ec2d3f83a5bba39dee28a6f75bdf4f623f93d58a9b403b743b49a3"}, 0xa8, 0x800, &(0x7f0000000040)={0x22, 0x8, 0x3, 0xc, 0x7}, 0x6) 11.115674332s ago: executing program 0 (id=154): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000740)="0000e2a2") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 10.244818991s ago: executing program 0 (id=176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x0, 0x20000000, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}}, 0x0) 10.073884741s ago: executing program 0 (id=179): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@errors_remount}, {@jqfmt_vfsold}, {@data_err_abort}, {@norecovery}, {@norecovery}]}, 0x1, 0x4cd, &(0x7f0000000a00)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x7000) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x200000, 0x1718, 0x0, 0x0, 0x1c, 0x8, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x3, 0x5]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000000, 0x1000000}]) 9.699638553s ago: executing program 0 (id=188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff73, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x500}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 9.316476977s ago: executing program 0 (id=204): socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000540)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"}) 9.316208757s ago: executing program 32 (id=204): socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000540)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"}) 1.657621521s ago: executing program 2 (id=419): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, 0x0, 0x1ff) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 1.637964953s ago: executing program 2 (id=421): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1e, 0x80005, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) 1.622587885s ago: executing program 3 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="00008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) 1.430755517s ago: executing program 2 (id=427): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.205414462s ago: executing program 2 (id=435): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) 1.152757089s ago: executing program 2 (id=436): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) io_setup(0x29e, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f0000000640)=[{}, {}, {}, {}, {}], &(0x7f0000000400)={0x0, 0x3938700}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 860.088402ms ago: executing program 5 (id=449): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 822.751116ms ago: executing program 5 (id=451): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x24, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 747.522435ms ago: executing program 5 (id=453): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000", @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x1dc}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x3e0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)='9', 0x1}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 747.012545ms ago: executing program 3 (id=454): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000c80)='./file1\x00', 0x81100) 720.810008ms ago: executing program 5 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 599.784232ms ago: executing program 5 (id=458): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000280)={0x0}) ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 599.379912ms ago: executing program 3 (id=459): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) 475.008776ms ago: executing program 4 (id=462): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) r3 = getpid() r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000680)={r2, r2, 0x3}) 433.338501ms ago: executing program 4 (id=465): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f000000009cf8dc420f2b1e277fffffeb"}) r3 = dup(r2) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x82fb, 0x0, "1eb4d100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xff) 423.521222ms ago: executing program 5 (id=466): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00'}, 0x10) 384.667266ms ago: executing program 1 (id=467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)="98", 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 365.239158ms ago: executing program 4 (id=468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 361.931179ms ago: executing program 3 (id=469): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000002"], 0x34}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 316.014884ms ago: executing program 1 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 303.616916ms ago: executing program 3 (id=471): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1250a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_config_ext={0xfffffffffffffe8d, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 256.650701ms ago: executing program 4 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8002) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 200.590567ms ago: executing program 2 (id=473): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f00"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 175.97098ms ago: executing program 1 (id=474): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000002000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) syz_open_procfs(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x3}}) 169.171951ms ago: executing program 4 (id=475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) 78.284341ms ago: executing program 1 (id=476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a00"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) 61.133283ms ago: executing program 1 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 28.967057ms ago: executing program 3 (id=478): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000264, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 12.477179ms ago: executing program 4 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) sendfile(r2, r3, 0x0, 0x4) 0s ago: executing program 1 (id=480): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) kernel console output (not intermixed with test programs): [ 21.552369][ T29] audit: type=1400 audit(1730441941.000:81): avc: denied { read } for pid=3003 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 27.192011][ T29] audit: type=1400 audit(1730441946.630:82): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.193246][ T3308] cgroup: Unknown subsys name 'net' [ 27.214855][ T29] audit: type=1400 audit(1730441946.630:83): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.242279][ T29] audit: type=1400 audit(1730441946.670:84): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.475080][ T3308] cgroup: Unknown subsys name 'cpuset' [ 27.481253][ T3308] cgroup: Unknown subsys name 'rlimit' [ 27.609540][ T29] audit: type=1400 audit(1730441947.050:85): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.632991][ T29] audit: type=1400 audit(1730441947.050:86): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.653535][ T29] audit: type=1400 audit(1730441947.050:87): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.674182][ T29] audit: type=1400 audit(1730441947.050:88): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.682928][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.694486][ T29] audit: type=1400 audit(1730441947.050:89): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.727875][ T29] audit: type=1400 audit(1730441947.050:90): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.751203][ T29] audit: type=1400 audit(1730441947.150:91): avc: denied { relabelto } for pid=3311 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.790287][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.566266][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.606621][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 29.649730][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 29.667738][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.687504][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.694618][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.701751][ T3320] bridge_slave_0: entered allmulticast mode [ 29.708145][ T3320] bridge_slave_0: entered promiscuous mode [ 29.731931][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.739027][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.746282][ T3320] bridge_slave_1: entered allmulticast mode [ 29.752789][ T3320] bridge_slave_1: entered promiscuous mode [ 29.787853][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.794957][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.802135][ T3319] bridge_slave_0: entered allmulticast mode [ 29.808567][ T3319] bridge_slave_0: entered promiscuous mode [ 29.829487][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.838685][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.845878][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.852997][ T3319] bridge_slave_1: entered allmulticast mode [ 29.859451][ T3319] bridge_slave_1: entered promiscuous mode [ 29.870990][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.878139][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.885506][ T3326] bridge_slave_0: entered allmulticast mode [ 29.892044][ T3326] bridge_slave_0: entered promiscuous mode [ 29.901331][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.925147][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.932282][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.939518][ T3326] bridge_slave_1: entered allmulticast mode [ 29.946139][ T3326] bridge_slave_1: entered promiscuous mode [ 29.963863][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 29.976505][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.997484][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.004656][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.011783][ T3318] bridge_slave_0: entered allmulticast mode [ 30.018354][ T3318] bridge_slave_0: entered promiscuous mode [ 30.025451][ T3320] team0: Port device team_slave_0 added [ 30.039027][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.052767][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.059878][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.067235][ T3318] bridge_slave_1: entered allmulticast mode [ 30.073596][ T3318] bridge_slave_1: entered promiscuous mode [ 30.080650][ T3320] team0: Port device team_slave_1 added [ 30.103098][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.121735][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.128782][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.154824][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.166194][ T3319] team0: Port device team_slave_0 added [ 30.175055][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.194511][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.204038][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.211012][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.237087][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.248378][ T3319] team0: Port device team_slave_1 added [ 30.270722][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.296620][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.303699][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.310954][ T3324] bridge_slave_0: entered allmulticast mode [ 30.317307][ T3324] bridge_slave_0: entered promiscuous mode [ 30.324044][ T3326] team0: Port device team_slave_0 added [ 30.329841][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.336971][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.344099][ T3324] bridge_slave_1: entered allmulticast mode [ 30.350452][ T3324] bridge_slave_1: entered promiscuous mode [ 30.367658][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.374659][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.400662][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.412147][ T3326] team0: Port device team_slave_1 added [ 30.432220][ T3318] team0: Port device team_slave_0 added [ 30.438739][ T3318] team0: Port device team_slave_1 added [ 30.444786][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.451754][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.477866][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.493935][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.509735][ T3320] hsr_slave_0: entered promiscuous mode [ 30.518222][ T3320] hsr_slave_1: entered promiscuous mode [ 30.536986][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.546497][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.553547][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.579469][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.590801][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.597821][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.623816][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.635058][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.642034][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.668252][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.702222][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.709303][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.735429][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.757796][ T3324] team0: Port device team_slave_0 added [ 30.765168][ T3324] team0: Port device team_slave_1 added [ 30.806202][ T3318] hsr_slave_0: entered promiscuous mode [ 30.812265][ T3318] hsr_slave_1: entered promiscuous mode [ 30.818227][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.825850][ T3318] Cannot create hsr debugfs directory [ 30.838229][ T3319] hsr_slave_0: entered promiscuous mode [ 30.844155][ T3319] hsr_slave_1: entered promiscuous mode [ 30.850116][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.858011][ T3319] Cannot create hsr debugfs directory [ 30.873622][ T3326] hsr_slave_0: entered promiscuous mode [ 30.879757][ T3326] hsr_slave_1: entered promiscuous mode [ 30.885780][ T3326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.893327][ T3326] Cannot create hsr debugfs directory [ 30.899171][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.906196][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.932312][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.943899][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.950909][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.977099][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.069250][ T3324] hsr_slave_0: entered promiscuous mode [ 31.075310][ T3324] hsr_slave_1: entered promiscuous mode [ 31.081180][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.088785][ T3324] Cannot create hsr debugfs directory [ 31.164898][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.188493][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.198717][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.217823][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.255647][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.264836][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.275669][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.296317][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.313184][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.326570][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.343054][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.351577][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.373945][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.383277][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.392743][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.415075][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.433384][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.442128][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.457969][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.466839][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.486670][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.519788][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.541383][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.548476][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.557486][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.564557][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.598217][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.615703][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.627514][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.641923][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.664040][ T1753] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.671169][ T1753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.679951][ T1753] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.687111][ T1753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.701156][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.709495][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.731494][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.741193][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.748275][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.756920][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.764020][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.775032][ T1753] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.782102][ T1753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.798896][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.806000][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.821629][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.849559][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.856798][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.878320][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.885506][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.899671][ T3326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.910275][ T3326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.940400][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.952974][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.987324][ T3324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.997880][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.047422][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.062143][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.153680][ T3320] veth0_vlan: entered promiscuous mode [ 32.173562][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.195537][ T3320] veth1_vlan: entered promiscuous mode [ 32.204026][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.232167][ T3320] veth0_macvtap: entered promiscuous mode [ 32.249154][ T3320] veth1_macvtap: entered promiscuous mode [ 32.259668][ T3319] veth0_vlan: entered promiscuous mode [ 32.284975][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.308887][ T3319] veth1_vlan: entered promiscuous mode [ 32.331504][ T3318] veth0_vlan: entered promiscuous mode [ 32.340695][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.356366][ T3318] veth1_vlan: entered promiscuous mode [ 32.368007][ T3320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.376971][ T3320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.385835][ T3320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.394587][ T3320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.422784][ T3319] veth0_macvtap: entered promiscuous mode [ 32.430943][ T3319] veth1_macvtap: entered promiscuous mode [ 32.448970][ T3326] veth0_vlan: entered promiscuous mode [ 32.456989][ T3318] veth0_macvtap: entered promiscuous mode [ 32.465052][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.475583][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.486235][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.496514][ T3318] veth1_macvtap: entered promiscuous mode [ 32.510379][ T3324] veth0_vlan: entered promiscuous mode [ 32.517214][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.527879][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.538534][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.551699][ T3326] veth1_vlan: entered promiscuous mode [ 32.558082][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.568619][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.578625][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.589200][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.599903][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.611918][ T3319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.620693][ T3319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.629484][ T3319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.638200][ T3319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.650953][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 32.650968][ T29] audit: type=1400 audit(1730441952.090:110): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.20h3pe/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.682627][ T29] audit: type=1400 audit(1730441952.090:111): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.686724][ T3324] veth1_vlan: entered promiscuous mode [ 32.704915][ T29] audit: type=1400 audit(1730441952.090:112): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.20h3pe/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.718693][ T3326] veth0_macvtap: entered promiscuous mode [ 32.735540][ T29] audit: type=1400 audit(1730441952.090:113): avc: denied { mount } for pid=3320 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.743697][ T3326] veth1_macvtap: entered promiscuous mode [ 32.763040][ T29] audit: type=1400 audit(1730441952.090:114): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.20h3pe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.773809][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.795553][ T29] audit: type=1400 audit(1730441952.090:115): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/root/syzkaller.20h3pe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.806058][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.833608][ T29] audit: type=1400 audit(1730441952.110:116): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.848459][ T29] audit: type=1400 audit(1730441952.130:117): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.863069][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.896521][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.907837][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.908703][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.946127][ T29] audit: type=1400 audit(1730441952.380:118): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.952050][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.970551][ T29] audit: type=1400 audit(1730441952.380:119): avc: denied { open } for pid=3320 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.979256][ T3318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.979369][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.020899][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.052096][ T3324] veth0_macvtap: entered promiscuous mode [ 33.060073][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.070671][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.080724][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.091215][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.101375][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.111892][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.123948][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.137421][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.147976][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.157976][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.168471][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.178651][ T3326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.189140][ T3326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.200179][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.218422][ T3324] veth1_macvtap: entered promiscuous mode [ 33.236390][ T3326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.245318][ T3326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.254044][ T3326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.262893][ T3326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.363498][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.374174][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.384029][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.394487][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.404440][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.415088][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.425036][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.435662][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.448675][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.457441][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.467934][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.477851][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.488347][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.498217][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.508669][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.518502][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.528964][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.543126][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.567566][ T3324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.576378][ T3324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.585214][ T3324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.593943][ T3324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.622764][ T3475] IPv6: Can't replace route, no match found [ 33.682310][ T3482] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 33.724961][ T3482] netlink: 'syz.2.11': attribute type 17 has an invalid length. [ 33.786072][ T3490] loop3: detected capacity change from 0 to 128 [ 33.812538][ T3494] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.951264][ T3512] syz.3.25[3512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.951362][ T3512] syz.3.25[3512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.974530][ T3512] syz.3.25[3512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.005645][ T3512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.099197][ T3529] Illegal XDP return value 4294967274 on prog (id 24) dev N/A, expect packet loss! [ 34.143916][ T3537] lo: entered allmulticast mode [ 34.161299][ T3537] lo: entered promiscuous mode [ 34.166224][ T3537] lo: left allmulticast mode [ 34.283288][ T3554] pim6reg1: entered allmulticast mode [ 34.315700][ T3558] loop1: detected capacity change from 0 to 2048 [ 34.343339][ T3558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.397633][ T3569] capability: warning: `syz.2.50' uses deprecated v2 capabilities in a way that may be insecure [ 34.418257][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.512310][ T3587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.58'. [ 34.538875][ T3589] loop1: detected capacity change from 0 to 128 [ 34.579690][ T3589] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.624181][ T3589] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.631319][ T3597] loop4: detected capacity change from 0 to 1024 [ 34.717431][ T3597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.758753][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.782778][ T3597] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 34.823178][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.982227][ T3625] loop4: detected capacity change from 0 to 512 [ 34.991636][ T3625] ======================================================= [ 34.991636][ T3625] WARNING: The mand mount option has been deprecated and [ 34.991636][ T3625] and is ignored by this kernel. Remove the mand [ 34.991636][ T3625] option from the mount to silence this warning. [ 34.991636][ T3625] ======================================================= [ 35.041255][ T3625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.079473][ T3631] Zero length message leads to an empty skb [ 35.087011][ T3625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.102092][ T3625] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.120772][ T3635] loop0: detected capacity change from 0 to 512 [ 35.138118][ T3635] EXT4-fs: Ignoring removed orlov option [ 35.141280][ T3639] loop1: detected capacity change from 0 to 512 [ 35.155356][ T3639] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.168627][ T3639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.180372][ T3635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.195950][ T3635] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.196346][ T3639] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.202939][ T3635] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.76: bg 0: block 248: padding at end of block bitmap is not set [ 35.217524][ T3639] EXT4-fs (loop1): 1 truncate cleaned up [ 35.230152][ T3635] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.76: Failed to acquire dquot type 1 [ 35.239141][ T3639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.263342][ T3635] EXT4-fs (loop0): 1 truncate cleaned up [ 35.270000][ T3635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.287972][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.293074][ T3635] EXT4-fs: Ignoring removed orlov option [ 35.303617][ T3635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.325863][ T3635] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.76: Abort forced by user [ 35.327415][ T3644] loop1: detected capacity change from 0 to 256 [ 35.337321][ T3635] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 35.356561][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.367225][ T3635] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 35.383012][ T3644] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097162) [ 35.383409][ T3635] ext4 filesystem being remounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.390944][ T3644] FAT-fs (loop1): Filesystem has been set read-only [ 35.427414][ T3635] syz.0.76 (3635) used greatest stack depth: 9368 bytes left [ 35.452416][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.504614][ T3655] loop0: detected capacity change from 0 to 512 [ 35.512448][ T3512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.515424][ T3655] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.541910][ T3655] EXT4-fs (loop0): 1 truncate cleaned up [ 35.554552][ T3655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.598210][ T3663] loop2: detected capacity change from 0 to 2048 [ 35.598639][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.632596][ T3663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.633577][ T3667] loop0: detected capacity change from 0 to 1024 [ 35.654722][ T3667] EXT4-fs: Ignoring removed orlov option [ 35.660557][ T3667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.688896][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.708197][ T3667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.730535][ T3674] loop4: detected capacity change from 0 to 1764 [ 35.750900][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.760751][ T3674] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 35.822023][ T3683] loop2: detected capacity change from 0 to 2048 [ 35.853503][ T3683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.874230][ T3689] loop4: detected capacity change from 0 to 512 [ 35.877014][ T3683] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.901421][ T3683] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 35.914150][ T3683] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.914150][ T3683] [ 35.923939][ T3683] EXT4-fs (loop2): Total free blocks count 0 [ 35.927520][ T3689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.929964][ T3683] EXT4-fs (loop2): Free/Dirty block details [ 35.948372][ T3683] EXT4-fs (loop2): free_blocks=2415919104 [ 35.954169][ T3683] EXT4-fs (loop2): dirty_blocks=16 [ 35.956092][ T3689] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.959300][ T3683] EXT4-fs (loop2): Block reservation details [ 35.975863][ T3683] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 35.983873][ T3696] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 36.002328][ T3512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.025913][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.048239][ T3512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.071012][ T3700] syz.0.103[3700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.071175][ T3700] syz.0.103[3700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.082742][ T3700] syz.0.103[3700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.105778][ T3702] loop4: detected capacity change from 0 to 512 [ 36.126746][ T3702] EXT4-fs: Ignoring removed oldalloc option [ 36.137878][ T3702] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.160446][ T3702] EXT4-fs (loop4): 1 truncate cleaned up [ 36.166493][ T3702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.191990][ T3512] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.204574][ T3512] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.213847][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.218052][ T3512] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.237233][ T3512] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.341264][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 36.372120][ T3732] blktrace: Concurrent blktraces are not allowed on loop5 [ 36.505340][ T3750] loop2: detected capacity change from 0 to 1024 [ 36.534363][ T3750] EXT4-fs: Ignoring removed oldalloc option [ 36.562340][ T3750] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 36.609570][ T3750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.733708][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.839598][ T3770] bridge0: port 3(bond0) entered blocking state [ 36.846073][ T3770] bridge0: port 3(bond0) entered disabled state [ 36.860972][ T3770] bond0: entered allmulticast mode [ 36.866235][ T3770] bond_slave_0: entered allmulticast mode [ 36.872173][ T3770] bond_slave_1: entered allmulticast mode [ 36.883945][ T3770] bond0: entered promiscuous mode [ 36.889248][ T3770] bond_slave_0: entered promiscuous mode [ 36.895207][ T3770] bond_slave_1: entered promiscuous mode [ 36.903564][ T3770] bridge0: port 3(bond0) entered blocking state [ 36.909907][ T3770] bridge0: port 3(bond0) entered forwarding state [ 36.916736][ T3777] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 36.957403][ T3777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 36.965513][ T3777] bond1: (slave bond2): making interface the new active one [ 36.973416][ T3777] bond1: (slave bond2): Enslaving as an active interface with an up link [ 37.018714][ T3777] bond1 (unregistering): (slave bond2): Releasing backup interface [ 37.034970][ T3777] bond1 (unregistering): Released all slaves [ 37.048216][ T3785] loop0: detected capacity change from 0 to 256 [ 37.061057][ T3787] mmap: syz.2.137 (3787) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.115488][ T3791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.140'. [ 37.149249][ T3795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3795 comm=syz.0.138 [ 37.170650][ T3794] loop3: detected capacity change from 0 to 512 [ 37.181831][ T3795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 37.199721][ T3794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.214985][ T3794] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.238614][ T3795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.272493][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.288968][ T3805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.302638][ T3805] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 37.316604][ T3805] bond1: (slave vti0): Error -95 calling set_mac_address [ 37.697574][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 37.697588][ T29] audit: type=1400 audit(1730441957.140:476): avc: denied { write } for pid=3848 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 37.840927][ T29] audit: type=1326 audit(1730441957.280:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b085fe719 code=0x7ffc0000 [ 37.865148][ T29] audit: type=1326 audit(1730441957.280:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b085fe719 code=0x7ffc0000 [ 37.888627][ T29] audit: type=1326 audit(1730441957.280:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8b085fe719 code=0x7ffc0000 [ 37.912024][ T29] audit: type=1326 audit(1730441957.280:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b085fe719 code=0x7ffc0000 [ 37.935315][ T29] audit: type=1326 audit(1730441957.280:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f8b085fe719 code=0x7ffc0000 [ 37.948549][ T3874] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.167'. [ 37.958643][ T29] audit: type=1326 audit(1730441957.280:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b085fe719 code=0x7ffc0000 [ 37.968003][ T3874] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 37.999539][ T29] audit: type=1326 audit(1730441957.280:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b085fe719 code=0x7ffc0000 [ 38.023012][ T29] audit: type=1326 audit(1730441957.280:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b085fe719 code=0x7ffc0000 [ 38.046483][ T29] audit: type=1326 audit(1730441957.310:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b085fe719 code=0x7ffc0000 [ 38.262029][ T3891] loop3: detected capacity change from 0 to 128 [ 38.298166][ T3891] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.310682][ T3891] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.344447][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 38.353512][ T3897] netlink: 'syz.2.175': attribute type 13 has an invalid length. [ 38.361334][ T3897] netlink: 'syz.2.175': attribute type 12 has an invalid length. [ 38.372155][ T3897] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.380983][ T3897] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.389803][ T3897] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.398593][ T3897] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.407899][ T3897] vxlan0: entered promiscuous mode [ 38.408431][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.433144][ T3899] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.459100][ T3902] loop0: detected capacity change from 0 to 512 [ 38.472204][ T3902] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.486354][ T3902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.501781][ T3902] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.555462][ T3902] loop0: detected capacity change from 512 to 0 [ 38.566601][ T3902] syz.0.179: attempt to access beyond end of device [ 38.566601][ T3902] loop0: rw=12288, sector=104, nr_sectors = 2 limit=0 [ 38.580335][ T3902] syz.0.179: attempt to access beyond end of device [ 38.580335][ T3902] loop0: rw=524288, sector=70, nr_sectors = 2 limit=0 [ 38.596348][ T3902] syz.0.179: attempt to access beyond end of device [ 38.596348][ T3902] loop0: rw=524288, sector=74, nr_sectors = 2 limit=0 [ 38.610406][ T3902] syz.0.179: attempt to access beyond end of device [ 38.610406][ T3902] loop0: rw=524288, sector=76, nr_sectors = 2 limit=0 [ 38.624279][ T3902] syz.0.179: attempt to access beyond end of device [ 38.624279][ T3902] loop0: rw=524288, sector=78, nr_sectors = 2 limit=0 [ 38.637759][ T3902] syz.0.179: attempt to access beyond end of device [ 38.637759][ T3902] loop0: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 38.651073][ T3902] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #16: block 36: comm syz.0.179: unable to read itable block [ 38.687120][ T3902] syz.0.179: attempt to access beyond end of device [ 38.687120][ T3902] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 38.700387][ T3902] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 38.710372][ T3902] EXT4-fs (loop0): I/O error while writing superblock [ 38.717768][ T3902] EXT4-fs (loop0): Remounting filesystem read-only [ 38.758654][ T3851] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.766866][ T3851] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.784842][ T3851] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 38.801675][ T3324] syz-executor: attempt to access beyond end of device [ 38.801675][ T3324] loop0: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 38.823915][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.841068][ T3324] syz-executor: attempt to access beyond end of device [ 38.841068][ T3324] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 38.854811][ T3324] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 38.900152][ T3324] EXT4-fs (loop0): I/O error while writing superblock [ 38.910931][ T3904] kmmpd-loop0: attempt to access beyond end of device [ 38.910931][ T3904] loop0: rw=14337, sector=34, nr_sectors = 2 limit=0 [ 38.910958][ T3904] Buffer I/O error on dev loop0, logical block 17, lost sync page write [ 38.935381][ T3929] block device autoloading is deprecated and will be removed. [ 39.009539][ T3944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 39.027259][ T3944] batman_adv: batadv1: Adding interface: netdevsim0 [ 39.033918][ T3944] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.068771][ T3944] batman_adv: batadv1: Interface activated: netdevsim0 [ 39.116509][ T3955] loop1: detected capacity change from 0 to 512 [ 39.170317][ T3955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.195074][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.207886][ T3961] netlink: 32 bytes leftover after parsing attributes in process `syz.3.202'. [ 39.220085][ T3963] loop2: detected capacity change from 0 to 256 [ 39.238249][ T3955] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.280467][ T3963] FAT-fs (loop2): Directory bread(block 64) failed [ 39.281447][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.289305][ T3963] FAT-fs (loop2): Directory bread(block 65) failed [ 39.311149][ T3963] FAT-fs (loop2): Directory bread(block 66) failed [ 39.318225][ T3963] FAT-fs (loop2): Directory bread(block 67) failed [ 39.325016][ T3963] FAT-fs (loop2): Directory bread(block 68) failed [ 39.335982][ T3970] pim6reg1: entered promiscuous mode [ 39.341361][ T3970] pim6reg1: entered allmulticast mode [ 39.349980][ T3963] FAT-fs (loop2): Directory bread(block 69) failed [ 39.359485][ T3963] FAT-fs (loop2): Directory bread(block 70) failed [ 39.366360][ T3319] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 39.375831][ T3963] FAT-fs (loop2): Directory bread(block 71) failed [ 39.391463][ T3963] FAT-fs (loop2): Directory bread(block 72) failed [ 39.398184][ T3963] FAT-fs (loop2): Directory bread(block 73) failed [ 39.418270][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.441086][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.499064][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.534748][ T3989] loop1: detected capacity change from 0 to 1024 [ 39.571420][ T3989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.617091][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.709781][ T4007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 39.718915][ T36] bond0: left allmulticast mode [ 39.723820][ T36] bond_slave_0: left allmulticast mode [ 39.729402][ T36] bond_slave_1: left allmulticast mode [ 39.735106][ T36] bond0: left promiscuous mode [ 39.739941][ T36] bond_slave_0: left promiscuous mode [ 39.745523][ T36] bond_slave_1: left promiscuous mode [ 39.751280][ T36] bridge0: port 3(bond0) entered disabled state [ 39.762832][ T36] bridge_slave_1: left allmulticast mode [ 39.768650][ T36] bridge_slave_1: left promiscuous mode [ 39.774589][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.785530][ T36] bridge_slave_0: left allmulticast mode [ 39.791222][ T36] bridge_slave_0: left promiscuous mode [ 39.797003][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.917509][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.928574][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.938960][ T36] bond0 (unregistering): Released all slaves [ 39.948304][ T36] bond1 (unregistering): Released all slaves [ 39.963650][ T3967] chnl_net:caif_netlink_parms(): no params data found [ 40.008683][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.015980][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.023630][ T3967] bridge_slave_0: entered allmulticast mode [ 40.030671][ T3967] bridge_slave_0: entered promiscuous mode [ 40.041254][ T36] hsr_slave_0: left promiscuous mode [ 40.049346][ T36] hsr_slave_1: left promiscuous mode [ 40.057133][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.064686][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.072846][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.080554][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.090545][ T36] veth1_macvtap: left promiscuous mode [ 40.096146][ T36] veth0_macvtap: left promiscuous mode [ 40.101685][ T36] veth1_vlan: left promiscuous mode [ 40.107102][ T36] veth0_vlan: left promiscuous mode [ 40.199835][ T36] team0 (unregistering): Port device team_slave_1 removed [ 40.210739][ T36] team0 (unregistering): Port device team_slave_0 removed [ 40.254735][ T3967] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.261996][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.269617][ T3967] bridge_slave_1: entered allmulticast mode [ 40.276424][ T3967] bridge_slave_1: entered promiscuous mode [ 40.319240][ T3967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.330556][ T3967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.352853][ T3967] team0: Port device team_slave_0 added [ 40.363769][ T3967] team0: Port device team_slave_1 added [ 40.413808][ T3967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.420979][ T3967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.447131][ T3967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.466652][ T3967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.473658][ T3967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.499982][ T3967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.562411][ T3967] hsr_slave_0: entered promiscuous mode [ 40.571664][ T3967] hsr_slave_1: entered promiscuous mode [ 40.584740][ T3967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.592413][ T3967] Cannot create hsr debugfs directory [ 40.623575][ T4055] loop1: detected capacity change from 0 to 8192 [ 40.731915][ T4055] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.821041][ T3967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.828472][ T4080] process 'syz.1.236' launched './file0' with NULL argv: empty string added [ 40.844454][ T3967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.863375][ T3967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.884731][ T3967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.022846][ T3967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.033246][ T4104] loop3: detected capacity change from 0 to 1024 [ 41.051528][ T4104] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 41.062578][ T4104] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 41.079934][ T4115] syz.1.245 uses obsolete (PF_INET,SOCK_PACKET) [ 41.087810][ T4104] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 41.108790][ T4104] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: comm syz.3.244: inode #1: comm syz.3.244: iget: illegal inode # [ 41.136492][ T3967] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.143913][ T4104] EXT4-fs (loop3): no journal found [ 41.149191][ T4104] EXT4-fs (loop3): can't get journal size [ 41.164462][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.165262][ T4104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.171562][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.217282][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.230581][ T4130] loop1: detected capacity change from 0 to 512 [ 41.245844][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.253067][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.309749][ T4130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.328274][ T4130] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.411141][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.429819][ T3967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.468839][ T4165] loop3: detected capacity change from 0 to 512 [ 41.499023][ T4165] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.256: bg 0: block 393: padding at end of block bitmap is not set [ 41.523991][ T4165] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 41.544265][ T4165] EXT4-fs (loop3): 2 truncates cleaned up [ 41.550403][ T4165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.585947][ T4172] loop1: detected capacity change from 0 to 2048 [ 41.625890][ T4180] loop4: detected capacity change from 0 to 512 [ 41.632565][ T4180] EXT4-fs: Ignoring removed oldalloc option [ 41.643632][ T4172] loop1: p1 < > p4 [ 41.650357][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.660252][ T4172] loop1: p4 size 8388608 extends beyond EOD, truncated [ 41.670654][ T4180] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.685466][ T4180] EXT4-fs (loop4): 1 truncate cleaned up [ 41.700966][ T4180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.725776][ T3021] loop1: p1 < > p4 [ 41.738880][ T3021] loop1: p4 size 8388608 extends beyond EOD, truncated [ 41.798897][ T3021] loop1: p1 < > p4 [ 41.804357][ T3021] loop1: p4 size 8388608 extends beyond EOD, truncated [ 41.819832][ T3967] veth0_vlan: entered promiscuous mode [ 41.832212][ T4203] loop3: detected capacity change from 0 to 1024 [ 41.862524][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 41.877265][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 41.877336][ T3967] veth1_vlan: entered promiscuous mode [ 41.892889][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 41.904416][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 41.919658][ T4203] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 41.939081][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.940186][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.956200][ T3967] veth0_macvtap: entered promiscuous mode [ 41.978653][ T3967] veth1_macvtap: entered promiscuous mode [ 41.986170][ T4203] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 42.003797][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.014373][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.024264][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.034795][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.044745][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.055251][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.065206][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.075693][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.086008][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.101310][ T3967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.112265][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.122857][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.132787][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.143281][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.153154][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.163672][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.173532][ T3967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.184004][ T3967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.195747][ T3967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.205553][ T3967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.214491][ T3967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.223198][ T3967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.232074][ T3967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.319781][ T4238] loop4: detected capacity change from 0 to 128 [ 42.388004][ T4247] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 42.430394][ T4253] loop4: detected capacity change from 0 to 128 [ 42.451604][ T4253] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.467851][ T4253] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.503742][ T4259] loop5: detected capacity change from 0 to 128 [ 42.523944][ T4259] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.540187][ T4259] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.573927][ T3326] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.629581][ T3967] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.754970][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 42.754987][ T29] audit: type=1400 audit(1730441962.200:719): avc: denied { create } for pid=4283 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 42.804164][ T29] audit: type=1400 audit(1730441962.230:720): avc: denied { getopt } for pid=4283 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 42.878025][ T29] audit: type=1400 audit(1730441962.320:721): avc: denied { read write } for pid=4299 comm="syz.1.280" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.901237][ T29] audit: type=1400 audit(1730441962.320:722): avc: denied { open } for pid=4299 comm="syz.1.280" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.935477][ T4300] ALSA: seq fatal error: cannot create timer (-19) [ 43.012827][ T4313] loop3: detected capacity change from 0 to 512 [ 43.063472][ T4317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'. [ 43.109445][ T29] audit: type=1400 audit(1730441962.550:723): avc: denied { listen } for pid=4324 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 43.110236][ T4313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.160388][ T4313] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.223398][ T29] audit: type=1400 audit(1730441962.660:724): avc: denied { setattr } for pid=4312 comm="syz.3.286" path="/37/file1/hugetlb.1GB.rsvd.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.254744][ T4343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.295'. [ 43.266485][ T4343] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.275321][ T4343] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.284136][ T4343] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.292933][ T4343] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.301878][ T4343] vxlan0: entered promiscuous mode [ 43.309791][ T29] audit: type=1400 audit(1730441962.730:725): avc: denied { setopt } for pid=4339 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.314051][ T4342] batman_adv: The newly added mac address (16:d1:47:5d:52:7e) already exists on: netdevsim0 [ 43.339874][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.340437][ T4313] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.286: corrupted inode contents [ 43.359329][ T4342] vlan2: entered promiscuous mode [ 43.366582][ T4342] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 43.368376][ T4313] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #19: comm syz.3.286: mark_inode_dirty error [ 43.387555][ T4313] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.286: corrupted inode contents [ 43.399540][ T4342] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 43.399573][ T29] audit: type=1400 audit(1730441962.840:726): avc: denied { sys_chroot } for pid=4345 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 43.427867][ T29] audit: type=1400 audit(1730441962.840:727): avc: denied { setgid } for pid=4345 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 43.436214][ T4313] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.286: mark_inode_dirty error [ 43.448668][ T29] audit: type=1400 audit(1730441962.840:728): avc: denied { setuid } for pid=4345 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 43.475567][ T4313] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.286: mark inode dirty (error -117) [ 43.512203][ T4313] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 43.555518][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.614471][ T4354] syz.1.300[4354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.614605][ T4354] syz.1.300[4354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.627724][ T4354] syz.1.300[4354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.642559][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 43.681024][ T4354] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.766313][ T4359] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 43.775021][ T4359] SELinux: failed to load policy [ 43.824366][ T4362] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 43.833877][ T4362] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 43.923351][ T4369] loop1: detected capacity change from 0 to 512 [ 43.937109][ T4369] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.308: Failed to acquire dquot type 1 [ 43.959540][ T4369] EXT4-fs (loop1): 1 truncate cleaned up [ 43.971616][ T4369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.990646][ T4369] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.010294][ T4374] syz.3.309[4374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.010376][ T4374] syz.3.309[4374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.022599][ T4374] syz.3.309[4374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.042920][ T4374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.070720][ T4369] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.308: Failed to acquire dquot type 1 [ 44.078477][ T4376] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 44.094335][ T4374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.150749][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.231117][ T4384] loop1: detected capacity change from 0 to 512 [ 44.259865][ T4384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.467399][ T4405] syz.2.322[4405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.467467][ T4405] syz.2.322[4405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.485401][ T4405] syz.2.322[4405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.504648][ T4405] loop2: detected capacity change from 0 to 764 [ 44.524854][ T4405] rock: directory entry would overflow storage [ 44.531035][ T4405] rock: sig=0x4654, size=5, remaining=4 [ 44.539837][ T4405] ISOFS: unable to read i-node block [ 44.558787][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.792540][ T4430] batadv0: entered promiscuous mode [ 44.806337][ T4430] batadv_slave_0: entered promiscuous mode [ 44.812347][ T4430] batadv_slave_0: left promiscuous mode [ 44.823765][ T4430] batadv0: left promiscuous mode [ 44.994814][ T4447] loop3: detected capacity change from 0 to 2048 [ 45.028355][ T4449] loop5: detected capacity change from 0 to 2048 [ 45.037271][ T4447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.056151][ T4449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.101679][ T4447] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.339: Abort forced by user [ 45.121595][ T4447] EXT4-fs (loop3): Remounting filesystem read-only [ 45.127834][ T4457] loop4: detected capacity change from 0 to 512 [ 45.128863][ T4447] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 45.134986][ T4457] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.155028][ T3967] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.159299][ T4457] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.174949][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.175383][ T4457] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.341: corrupted in-inode xattr: e_value out of bounds [ 45.201452][ T4457] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.341: couldn't read orphan inode 15 (err -117) [ 45.206780][ T4456] SELinux: failed to load policy [ 45.225593][ T4457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.341520][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.358403][ T4469] loop3: detected capacity change from 0 to 512 [ 45.393279][ T4469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.420452][ T4480] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.424515][ T4469] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.476303][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.512850][ T4491] loop1: detected capacity change from 0 to 512 [ 45.567992][ T4491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.584381][ T4491] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.654607][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.664932][ T4510] syz.5.364 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.885016][ T4536] loop5: detected capacity change from 0 to 512 [ 45.891853][ T4536] EXT4-fs: Ignoring removed orlov option [ 45.900551][ T4536] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 45.943531][ T4542] loop4: detected capacity change from 0 to 764 [ 45.950004][ T4536] EXT4-fs (loop5): 1 orphan inode deleted [ 45.955915][ T4536] EXT4-fs (loop5): 1 truncate cleaned up [ 45.962958][ T4536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.964408][ T4542] iso9660: Unknown parameter 'proc' [ 45.981246][ T4536] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.982955][ T4544] loop1: detected capacity change from 0 to 512 [ 46.012900][ T3967] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.039473][ T4544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.059797][ T4544] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.102906][ T4554] loop5: detected capacity change from 0 to 256 [ 46.131971][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.172922][ T4562] team_slave_0: entered promiscuous mode [ 46.178649][ T4562] team_slave_1: entered promiscuous mode [ 46.185960][ T4562] team_slave_0: left promiscuous mode [ 46.191417][ T4562] team_slave_1: left promiscuous mode [ 46.217997][ T4567] syz.5.390[4567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.221055][ T4567] block device autoloading is deprecated and will be removed. [ 46.240317][ T4567] bio_check_eod: 2 callbacks suppressed [ 46.240331][ T4567] syz.5.390: attempt to access beyond end of device [ 46.240331][ T4567] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 46.278764][ T4569] loop5: detected capacity change from 0 to 512 [ 46.307893][ T4569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.320743][ T4569] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.348519][ T3967] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.403665][ T4581] loop2: detected capacity change from 0 to 1024 [ 46.418822][ T4581] ext4: Unknown parameter 'uid' [ 46.482232][ T4591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.401'. [ 46.511306][ T4593] netlink: 'syz.5.402': attribute type 10 has an invalid length. [ 46.531435][ T4593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.609145][ T4604] netlink: 36 bytes leftover after parsing attributes in process `syz.5.407'. [ 46.636293][ T4608] netlink: 'syz.1.409': attribute type 30 has an invalid length. [ 46.655960][ T4608] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 46.665222][ T4608] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 46.680495][ T4610] loop2: detected capacity change from 0 to 512 [ 46.689123][ T4610] EXT4-fs: Ignoring removed oldalloc option [ 46.695561][ T4610] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.706983][ T4610] EXT4-fs (loop2): 1 truncate cleaned up [ 46.713185][ T4610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.739431][ T4618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 46.748645][ T4618] netlink: 'syz.1.409': attribute type 30 has an invalid length. [ 46.777976][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.778398][ T4619] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.412'. [ 46.796485][ T4619] netlink: 24 bytes leftover after parsing attributes in process `syz.5.412'. [ 46.907095][ C0] hrtimer: interrupt took 56860 ns [ 47.070051][ T4646] tipc: Started in network mode [ 47.075122][ T4646] tipc: Node identity ac1414aa, cluster identity 4711 [ 47.082322][ T4646] tipc: Enabled bearer , priority 10 [ 47.115393][ T4650] loop2: detected capacity change from 0 to 512 [ 47.135617][ T4650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.148354][ T4650] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.212530][ T4650] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.427: corrupted inode contents [ 47.230424][ T4650] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #19: comm syz.2.427: mark_inode_dirty error [ 47.245767][ T4650] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #19: comm syz.2.427: corrupted inode contents [ 47.265924][ T4650] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.427: mark_inode_dirty error [ 47.279078][ T4650] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.427: mark inode dirty (error -117) [ 47.292872][ T4650] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 47.318596][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.438954][ T4672] ALSA: seq fatal error: cannot create timer (-22) [ 47.469824][ T4675] loop4: detected capacity change from 0 to 2048 [ 47.504718][ T4675] loop4: p3 < > p4 < > [ 47.508934][ T4675] loop4: partition table partially beyond EOD, truncated [ 47.516167][ T4675] loop4: p3 start 4284289 is beyond EOD, truncated [ 47.554903][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 47.710346][ T4698] loop1: detected capacity change from 0 to 512 [ 47.734630][ T4704] netlink: 'syz.4.452': attribute type 3 has an invalid length. [ 47.738109][ T4698] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.450: Failed to acquire dquot type 1 [ 47.781503][ T4698] EXT4-fs (loop1): 1 truncate cleaned up [ 47.788532][ T4698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.811909][ T4698] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.820827][ T4706] sctp: [Deprecated]: syz.4.455 (pid 4706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.820827][ T4706] Use struct sctp_sack_info instead [ 47.839799][ T4706] sctp: [Deprecated]: syz.4.455 (pid 4706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 47.839799][ T4706] Use struct sctp_sack_info instead [ 47.849035][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 47.849055][ T29] audit: type=1400 audit(1730441967.280:1135): avc: denied { getopt } for pid=4705 comm="syz.4.455" lport=57908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.884946][ T4698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.946218][ T29] audit: type=1400 audit(1730441967.390:1136): avc: denied { read } for pid=4717 comm="syz.5.458" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.977828][ T29] audit: type=1400 audit(1730441967.410:1137): avc: denied { open } for pid=4717 comm="syz.5.458" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.001780][ T29] audit: type=1400 audit(1730441967.420:1138): avc: denied { ioctl } for pid=4717 comm="syz.5.458" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.084118][ T3394] tipc: Node number set to 2886997162 [ 48.231271][ T4747] loop3: detected capacity change from 0 to 128 [ 48.323513][ T4747] syz.3.471: attempt to access beyond end of device [ 48.323513][ T4747] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 48.392416][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 48.401303][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 48.496382][ T1753] kworker/u8:7: attempt to access beyond end of device [ 48.496382][ T1753] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 48.570220][ T4766] ================================================================== [ 48.578386][ T4766] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 48.585579][ T4766] [ 48.587914][ T4766] write to 0xffff888237d1ffa0 of 8 bytes by interrupt on cpu 1: [ 48.595563][ T4766] hrtimer_interrupt+0x18c/0x7b0 [ 48.600526][ T4766] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 48.606458][ T4766] sysvec_apic_timer_interrupt+0x6e/0x80 [ 48.612182][ T4766] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 48.618304][ T4766] kcsan_setup_watchpoint+0x404/0x410 [ 48.623804][ T4766] _raw_spin_lock_irqsave+0x28/0xb0 [ 48.629044][ T4766] prepare_to_wait+0x20/0xa0 [ 48.633679][ T4766] unix_stream_read_generic+0xe2d/0x1470 [ 48.639348][ T4766] unix_stream_recvmsg+0xc4/0xf0 [ 48.644323][ T4766] sock_recvmsg+0x13f/0x170 [ 48.648856][ T4766] ____sys_recvmsg+0xf9/0x280 [ 48.653562][ T4766] __sys_recvmsg+0x1da/0x270 [ 48.658175][ T4766] __x64_sys_recvmsg+0x46/0x50 [ 48.662960][ T4766] x64_sys_call+0xb84/0x2d60 [ 48.667586][ T4766] do_syscall_64+0xc9/0x1c0 [ 48.672110][ T4766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.678082][ T4766] [ 48.680421][ T4766] read to 0xffff888237d1ffa0 of 8 bytes by task 4766 on cpu 0: [ 48.687984][ T4766] print_cpu+0x2fb/0x670 [ 48.692259][ T4766] timer_list_show+0x115/0x180 [ 48.697057][ T4766] seq_read_iter+0x2d1/0x930 [ 48.701677][ T4766] proc_reg_read_iter+0x118/0x190 [ 48.706739][ T4766] copy_splice_read+0x3a0/0x5d0 [ 48.711616][ T4766] splice_direct_to_actor+0x269/0x670 [ 48.717014][ T4766] do_splice_direct+0xd7/0x150 [ 48.721817][ T4766] do_sendfile+0x39b/0x970 [ 48.726273][ T4766] __x64_sys_sendfile64+0x110/0x150 [ 48.731513][ T4766] x64_sys_call+0xed5/0x2d60 [ 48.736147][ T4766] do_syscall_64+0xc9/0x1c0 [ 48.740683][ T4766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.746618][ T4766] [ 48.748955][ T4766] value changed: 0x0000000b4e294ede -> 0x7fffffffffffffff [ 48.756080][ T4766] [ 48.758459][ T4766] Reported by Kernel Concurrency Sanitizer on: [ 48.764643][ T4766] CPU: 0 UID: 0 PID: 4766 Comm: syz.4.479 Not tainted 6.12.0-rc5-syzkaller-00176-g5635f189425e #0 [ 48.775263][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.785345][ T4766] ==================================================================