last executing test programs: 970.363785ms ago: executing program 1 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 874.495626ms ago: executing program 1 (id=154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0xae86c2105fcab1db, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$inet(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 815.065376ms ago: executing program 1 (id=146): syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)='\x00', 0x1}], 0x1}, 0x50) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 781.572916ms ago: executing program 1 (id=148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 724.011186ms ago: executing program 1 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 687.116657ms ago: executing program 1 (id=155): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x6) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x24) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) pselect6(0x40, &(0x7f0000000100)={0xf, 0x5, 0x7, 0x2, 0x7, 0x9b, 0x92d, 0x5}, 0x0, 0x0, 0x0, 0x0) 660.852197ms ago: executing program 3 (id=157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 587.541697ms ago: executing program 3 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f00000002c0), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 525.517047ms ago: executing program 3 (id=162): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x26, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet6(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 501.433047ms ago: executing program 0 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa14001980"], 0x44}}, 0x0) 498.556747ms ago: executing program 3 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 467.431157ms ago: executing program 0 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) 455.960788ms ago: executing program 3 (id=169): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$eJzs20tvG0UcAPD/rpOUvkgo5dEHECiIiEfSpAV64AICiQsSEhzKMSRpFeI2qAkSrSIICHFFlbgjjkh8Ak5wQcAJiSsfAFWqUC4tnIzW3k1sx3k4deKCfz9pk5ndcWb+3hl7dicbQM8azn4kEYci4o+IGKxlGwsM137dXlma+ntlaSqJSuXtv5JquVsrS1NF0eJ1B/PMSBqRfp7EiRb1Lly9NjdZLs9cyfNji5c+GFu4eu352UuTF2cuzlyeOHfu7Jnxl16ceKEjcWZtunX84/mTx9549/qbU+evv/fLd0kRf1McHTK82cGnKpUOV9ddh+vSSV8XG0JbShGRna7+6vgfjFKsnbzBeP2zrjYO2FWVSqVycOPDyxXgfyyJbrcA6I7iiz67/i22PZp63BVuvlK7AMrivp1vtSN9keZl+puubztpOCLOL//zdbbF7tyHAABo8EM2/3mu1fwvjQfryt2brw0NRcR9EXEkIu6PiKMR8UBEtexDEfFwm/U3L5Ksn/+kN3YU2DZl87+X87WtxvlfMfuLoVKeO1yNvz+5MFueOZ2/JyPRvy/Lj29Sx4+v/f7lRsfq53/ZltVfzAXzdtzo29f4munJxck7ibnezU8jjve1ij9ZXQlIIuJYRBzfYR2zz3x7cqNjW8e/iQ6sM1W+iXi6dv6Xoyn+QrL5+uTYPVGeOT1W9Ir1fv3ti7c2qv+O4u+A7PwfaNn/V+MfSurXaxfa+/v7tji+0/4/kLxTTQ/k+z6aXFy8Mh4xMNfYKar7J9bni/JZ/COnWo//I7H2TpyIiKwTPxIRj0bEY3nbH4+IJyLi1CYx/vzqk+/vPP7dlcU/3db5X0sMRPOe1onS3E/fN1Q61E782fk/W02N5Hu28/m3nXa135sBAADgvymNiEORpKOr6TQdHa39v/zROJCW5xcWn70w/+Hl6dozAkPRnxZ3ugbr7oeO55f1RX6iKX8mv2/8VWl/NT86NV+e7nbw0OMObjD+M3+Wut06YNd5Xgt6l/EPvcv4h95l/EPvajH+93ejHcDea/X9/0kX2gHsvabxb9kPeojrf+hdxj/0LuMfetLC/tj6IXkJiXWJSO+KZkjsUqLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//9Oa5Js=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) write$binfmt_script(r1, &(0x7f0000000200), 0x4) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 439.935937ms ago: executing program 0 (id=170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 439.694677ms ago: executing program 2 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}, {&(0x7f0000000440)="8d808be20faddb0007da9a036558", 0xe}], 0x2) 335.151588ms ago: executing program 2 (id=174): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000000c0), 0xfffffff4) 334.490338ms ago: executing program 4 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f00000002c0), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 324.398078ms ago: executing program 0 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 301.050218ms ago: executing program 3 (id=177): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10ffff) 241.802149ms ago: executing program 2 (id=178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6c1, &(0x7f0000001640)="$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") open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) 225.122849ms ago: executing program 0 (id=179): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_secret(0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x2284, &(0x7f0000000000)) 192.176088ms ago: executing program 0 (id=180): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 141.766099ms ago: executing program 4 (id=181): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x8, 0x0) mq_timedreceive(r0, 0x0, 0xffffffffffffffe7, 0x20004000, 0x0) 137.528689ms ago: executing program 2 (id=182): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x11, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 106.978959ms ago: executing program 4 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="170000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r2, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0) 97.770789ms ago: executing program 2 (id=184): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000020850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) 77.486009ms ago: executing program 4 (id=185): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@multicast2, {0x100000001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {0x0, 0x7d8e}, {}, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2a, 0x400000, 0x70bd2b}}]}, 0x154}}, 0x0) 27.76489ms ago: executing program 4 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 12.54345ms ago: executing program 2 (id=187): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 0s ago: executing program 4 (id=188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}, {&(0x7f0000000440)="8d808be20faddb0007da9a036558", 0xe}], 0x2) kernel console output (not intermixed with test programs): [ 21.480879][ T29] audit: type=1400 audit(1733027944.042:81): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 26.461992][ T29] audit: type=1400 audit(1733027949.022:82): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.463256][ T3285] cgroup: Unknown subsys name 'net' [ 26.484756][ T29] audit: type=1400 audit(1733027949.022:83): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.512467][ T29] audit: type=1400 audit(1733027949.052:84): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.685853][ T3285] cgroup: Unknown subsys name 'cpuset' [ 26.692033][ T3285] cgroup: Unknown subsys name 'rlimit' [ 26.823744][ T29] audit: type=1400 audit(1733027949.382:85): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.849325][ T29] audit: type=1400 audit(1733027949.392:86): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.869820][ T29] audit: type=1400 audit(1733027949.392:87): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.890236][ T29] audit: type=1400 audit(1733027949.392:88): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.898824][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.910523][ T29] audit: type=1400 audit(1733027949.392:89): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.944094][ T29] audit: type=1400 audit(1733027949.392:90): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.967525][ T29] audit: type=1400 audit(1733027949.482:91): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.987680][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.674030][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.709384][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.725564][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 28.771746][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 28.795541][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 28.861441][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.868650][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.875982][ T3301] bridge_slave_0: entered allmulticast mode [ 28.882433][ T3301] bridge_slave_0: entered promiscuous mode [ 28.889055][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.896237][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.903641][ T3306] bridge_slave_0: entered allmulticast mode [ 28.910106][ T3306] bridge_slave_0: entered promiscuous mode [ 28.927339][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.934533][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.941783][ T3301] bridge_slave_1: entered allmulticast mode [ 28.948539][ T3301] bridge_slave_1: entered promiscuous mode [ 28.954894][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.962000][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.969337][ T3306] bridge_slave_1: entered allmulticast mode [ 28.975675][ T3306] bridge_slave_1: entered promiscuous mode [ 29.009464][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.016579][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.023755][ T3302] bridge_slave_0: entered allmulticast mode [ 29.030126][ T3302] bridge_slave_0: entered promiscuous mode [ 29.047052][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.060570][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.067719][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.075343][ T3300] bridge_slave_0: entered allmulticast mode [ 29.081710][ T3300] bridge_slave_0: entered promiscuous mode [ 29.088833][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.095929][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.103092][ T3302] bridge_slave_1: entered allmulticast mode [ 29.109505][ T3302] bridge_slave_1: entered promiscuous mode [ 29.116960][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.131466][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.145585][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.152690][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.159875][ T3298] bridge_slave_0: entered allmulticast mode [ 29.166412][ T3298] bridge_slave_0: entered promiscuous mode [ 29.172905][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.180000][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.187313][ T3300] bridge_slave_1: entered allmulticast mode [ 29.193816][ T3300] bridge_slave_1: entered promiscuous mode [ 29.201102][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.223723][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.230838][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.238056][ T3298] bridge_slave_1: entered allmulticast mode [ 29.244482][ T3298] bridge_slave_1: entered promiscuous mode [ 29.260947][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.271608][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.295546][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.305940][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.315772][ T3306] team0: Port device team_slave_0 added [ 29.327425][ T3301] team0: Port device team_slave_0 added [ 29.334077][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.352348][ T3306] team0: Port device team_slave_1 added [ 29.358658][ T3301] team0: Port device team_slave_1 added [ 29.365292][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.397438][ T3300] team0: Port device team_slave_0 added [ 29.403749][ T3302] team0: Port device team_slave_0 added [ 29.410410][ T3302] team0: Port device team_slave_1 added [ 29.421399][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.428385][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.454409][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.475537][ T3300] team0: Port device team_slave_1 added [ 29.486265][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.493224][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.519276][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.530312][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.537305][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.563334][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.574920][ T3298] team0: Port device team_slave_0 added [ 29.592412][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.599423][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.625390][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.636442][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.643393][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.669482][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.680783][ T3298] team0: Port device team_slave_1 added [ 29.696107][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.703081][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.729059][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.740868][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.747856][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.773784][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.789608][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.796622][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.822677][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.850145][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.857195][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.883131][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.911806][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.918842][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.944887][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.966040][ T3302] hsr_slave_0: entered promiscuous mode [ 29.972131][ T3302] hsr_slave_1: entered promiscuous mode [ 29.997913][ T3300] hsr_slave_0: entered promiscuous mode [ 30.003985][ T3300] hsr_slave_1: entered promiscuous mode [ 30.010046][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.017726][ T3300] Cannot create hsr debugfs directory [ 30.025566][ T3306] hsr_slave_0: entered promiscuous mode [ 30.031567][ T3306] hsr_slave_1: entered promiscuous mode [ 30.037507][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.045172][ T3306] Cannot create hsr debugfs directory [ 30.053514][ T3301] hsr_slave_0: entered promiscuous mode [ 30.059538][ T3301] hsr_slave_1: entered promiscuous mode [ 30.065614][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.073198][ T3301] Cannot create hsr debugfs directory [ 30.130245][ T3298] hsr_slave_0: entered promiscuous mode [ 30.136317][ T3298] hsr_slave_1: entered promiscuous mode [ 30.142185][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.149927][ T3298] Cannot create hsr debugfs directory [ 30.311922][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.322290][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.331547][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.342187][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.361185][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.370055][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.384932][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.393620][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.414899][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.432812][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.449513][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.463267][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.481865][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.493492][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.521053][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.529806][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.540620][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.550498][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.559252][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.572429][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.581455][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.620556][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.653524][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.660665][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.669967][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.677116][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.687804][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.719136][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.735448][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.748963][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.770037][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.777111][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.787434][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.794491][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.807467][ T1797] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.814605][ T1797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.835824][ T1797] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.842972][ T1797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.856787][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.865322][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.886745][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.902145][ T1797] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.909252][ T1797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.927729][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.940491][ T1797] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.947583][ T1797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.965230][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.972430][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.988800][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.995913][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.006872][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.116724][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.138384][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.158077][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.171377][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.210187][ T3302] veth0_vlan: entered promiscuous mode [ 31.241759][ T3302] veth1_vlan: entered promiscuous mode [ 31.298717][ T3302] veth0_macvtap: entered promiscuous mode [ 31.307290][ T3302] veth1_macvtap: entered promiscuous mode [ 31.329795][ T3306] veth0_vlan: entered promiscuous mode [ 31.340711][ T3306] veth1_vlan: entered promiscuous mode [ 31.351426][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.371994][ T3301] veth0_vlan: entered promiscuous mode [ 31.379541][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.394504][ T3301] veth1_vlan: entered promiscuous mode [ 31.403936][ T3298] veth0_vlan: entered promiscuous mode [ 31.411053][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.419915][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.428747][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.437546][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.464348][ T3298] veth1_vlan: entered promiscuous mode [ 31.482368][ T3306] veth0_macvtap: entered promiscuous mode [ 31.489380][ T3301] veth0_macvtap: entered promiscuous mode [ 31.505214][ T3306] veth1_macvtap: entered promiscuous mode [ 31.512101][ T3301] veth1_macvtap: entered promiscuous mode [ 31.527453][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.527472][ T29] audit: type=1400 audit(1733027954.092:110): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.vGftFp/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.531585][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.533577][ T29] audit: type=1400 audit(1733027954.092:111): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.558109][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.562932][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.607855][ T3300] veth0_vlan: entered promiscuous mode [ 31.613402][ T29] audit: type=1400 audit(1733027954.092:112): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.vGftFp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.624820][ T3300] veth1_vlan: entered promiscuous mode [ 31.638785][ T29] audit: type=1400 audit(1733027954.092:113): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.655259][ T3300] veth0_macvtap: entered promiscuous mode [ 31.666027][ T29] audit: type=1400 audit(1733027954.092:114): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.vGftFp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.674547][ T3300] veth1_macvtap: entered promiscuous mode [ 31.698310][ T29] audit: type=1400 audit(1733027954.092:115): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.vGftFp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.711193][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.731490][ T29] audit: type=1400 audit(1733027954.092:116): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.741992][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.762045][ T29] audit: type=1400 audit(1733027954.172:117): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.771775][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.771794][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.773304][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.823709][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.837281][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.848953][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.860161][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.887004][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.897552][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.907408][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.917887][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.927733][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.938169][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.949196][ T29] audit: type=1400 audit(1733027954.442:118): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.962376][ T3437] loop3: detected capacity change from 0 to 1024 [ 31.973376][ T29] audit: type=1400 audit(1733027954.442:119): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.985871][ T3437] EXT4-fs: Ignoring removed orlov option [ 32.006028][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.009578][ T3437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.025453][ T3301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.034203][ T3301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.043083][ T3301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.051814][ T3301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.067070][ T3298] veth0_macvtap: entered promiscuous mode [ 32.077140][ T3437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.078686][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.099875][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.109721][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.120202][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.130749][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.138279][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.148820][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.158732][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.169210][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.179221][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.189769][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.201012][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.213082][ T3298] veth1_macvtap: entered promiscuous mode [ 32.216141][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.232705][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.241564][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.250389][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.259142][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.272285][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.281180][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.289981][ T3300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.298733][ T3300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.327410][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.337962][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.347844][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.358350][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.368190][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.378734][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.388587][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.399068][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.410838][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.429387][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.440013][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.450007][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.460540][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.470471][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.480950][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.490850][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.501332][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.512784][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.536254][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.545150][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.553923][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.562653][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.807754][ T3470] loop3: detected capacity change from 0 to 512 [ 32.828352][ T3474] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.863353][ T3470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.892168][ T3470] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.976031][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.992603][ T3484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18'. [ 33.030162][ T3486] syz.0.17 (3486) used greatest stack depth: 10008 bytes left [ 33.078752][ T3499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23'. [ 33.097827][ T3001] udevd[3001]: worker [3292] terminated by signal 33 (Unknown signal 33) [ 33.153091][ T3504] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 33.167246][ T3504] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 33.186668][ T3508] loop1: detected capacity change from 0 to 512 [ 33.193268][ T3508] ======================================================= [ 33.193268][ T3508] WARNING: The mand mount option has been deprecated and [ 33.193268][ T3508] and is ignored by this kernel. Remove the mand [ 33.193268][ T3508] option from the mount to silence this warning. [ 33.193268][ T3508] ======================================================= [ 33.218817][ T3511] syz.4.27[3511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.250703][ T3511] syz.4.27[3511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.264535][ T3511] syz.4.27[3511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.269389][ T3513] loop0: detected capacity change from 0 to 512 [ 33.295720][ T3508] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c01c, mo2=0002] [ 33.312561][ T3508] System zones: 0-2, 18-18, 34-34 [ 33.342924][ T3508] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.28: bg 0: block 248: padding at end of block bitmap is not set [ 33.361090][ T3513] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 33.362372][ T3508] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.28: Failed to acquire dquot type 1 [ 33.370114][ T3513] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.30: invalid indirect mapped block 2683928664 (level 1) [ 33.404565][ T3508] EXT4-fs (loop1): 1 truncate cleaned up [ 33.405543][ T3513] EXT4-fs (loop0): 1 truncate cleaned up [ 33.411014][ T3508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.418368][ T3513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.428817][ T3508] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.474547][ T3508] syz.1.28 (3508) used greatest stack depth: 9304 bytes left [ 33.501733][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.514400][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.541997][ T3540] loop0: detected capacity change from 0 to 256 [ 33.555879][ T3540] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 33.564200][ T3540] FAT-fs (loop0): Filesystem has been set read-only [ 33.595137][ T3545] Zero length message leads to an empty skb [ 33.679632][ T3557] loop4: detected capacity change from 0 to 512 [ 33.694514][ T3560] mmap: syz.0.47 (3560) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.707899][ T3563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.718776][ T3557] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.48: corrupted in-inode xattr: invalid ea_ino [ 33.733851][ T3563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.759898][ T3557] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.48: couldn't read orphan inode 15 (err -117) [ 33.773683][ T3557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.815129][ T3557] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 33.904565][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.966094][ T3578] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.993447][ T3578] bridge0: entered promiscuous mode [ 34.000061][ T3583] netlink: 76 bytes leftover after parsing attributes in process `syz.2.59'. [ 34.026046][ T3577] bridge0: left promiscuous mode [ 34.176385][ T3610] tmpfs: Unknown parameter 'ÿ' [ 34.229525][ T3618] process 'syz.2.75' launched '/dev/fd/6' with NULL argv: empty string added [ 34.311446][ T3628] capability: warning: `syz.4.80' uses deprecated v2 capabilities in a way that may be insecure [ 34.328615][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 34.346087][ T3635] vxcan1: entered promiscuous mode [ 34.351254][ T3635] vxcan1: entered allmulticast mode [ 34.366891][ C0] hrtimer: interrupt took 26069 ns [ 34.382877][ T3639] tipc: Enabling of bearer rejected, failed to enable media [ 34.451408][ T3652] netlink: 133492 bytes leftover after parsing attributes in process `syz.0.90'. [ 34.483157][ T3656] syzkaller0: entered allmulticast mode [ 34.504168][ T3658] netlink: 56 bytes leftover after parsing attributes in process `syz.0.94'. [ 34.558239][ T3663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'. [ 34.569299][ T3663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'. [ 34.578915][ T3663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'. [ 34.641553][ T3675] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.650439][ T3675] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.659185][ T3675] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.668014][ T3675] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.678524][ T3675] vxlan0: entered promiscuous mode [ 34.683783][ T3675] vxlan0: entered allmulticast mode [ 34.691064][ T3675] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.700113][ T3675] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.709105][ T3675] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.718167][ T3675] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.808030][ T3687] serio: Serial port ptm0 [ 34.860377][ T3697] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 34.871264][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 34.880145][ T3697] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 34.936842][ T3691] loop2: detected capacity change from 0 to 8192 [ 35.096261][ T3729] 0ªX¹¦À: renamed from caif0 [ 35.108377][ T3729] 0ªX¹¦À: entered allmulticast mode [ 35.113742][ T3729] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 35.134450][ T3733] SELinux: Context system_u:object_r:su_exec_t:s0 is not valid (left unmapped). [ 35.158023][ T3735] loop4: detected capacity change from 0 to 128 [ 35.219183][ T3744] loop1: detected capacity change from 0 to 512 [ 35.227748][ T3744] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.241008][ T3744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.269182][ T3744] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 35.282352][ T3744] EXT4-fs (loop1): 1 truncate cleaned up [ 35.288391][ T3744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.324623][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.377753][ T3759] 0ªX¹¦À: renamed from caif0 [ 35.384427][ T3759] 0ªX¹¦À: entered allmulticast mode [ 35.389695][ T3759] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 35.423018][ T3761] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 35.446843][ T3765] 0ªX¹¦À: renamed from caif0 [ 35.458629][ T3765] 0ªX¹¦À: entered allmulticast mode [ 35.463977][ T3765] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 35.476309][ T3767] loop3: detected capacity change from 0 to 128 [ 35.520256][ T3769] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 35.529197][ T3772] netlink: 'syz.2.144': attribute type 10 has an invalid length. [ 35.539834][ T3772] geneve1: entered promiscuous mode [ 35.551600][ T3772] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 35.617459][ T3783] loop2: detected capacity change from 0 to 512 [ 35.627694][ T3783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.649943][ T3783] EXT4-fs (loop2): 1 truncate cleaned up [ 35.658764][ T3783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.675554][ T3789] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1109 [ 35.727787][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.811037][ T3802] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 35.815176][ T3804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 35.828602][ T3802] geneve1: entered promiscuous mode [ 35.838602][ T3802] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 35.944612][ T3822] loop3: detected capacity change from 0 to 512 [ 35.957756][ T3822] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.000986][ T3828] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 36.015034][ T3822] EXT4-fs (loop3): 1 truncate cleaned up [ 36.022240][ T3822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.069407][ T3833] netlink: 'syz.4.175': attribute type 10 has an invalid length. [ 36.176152][ T3837] sd 0:0:1:0: device reset [ 36.184033][ T3839] loop2: detected capacity change from 0 to 164 [ 36.190485][ T3833] geneve1: entered promiscuous mode [ 36.197878][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.203309][ T3833] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 36.255028][ T3841] loop0: detected capacity change from 0 to 8192 [ 36.264267][ T3846] bridge0: entered promiscuous mode [ 36.271600][ T3845] bridge0: left promiscuous mode [ 36.480623][ T3841] ================================================================== [ 36.488784][ T3841] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 36.496045][ T3841] [ 36.498386][ T3841] write to 0xffff888106a28214 of 4 bytes by task 3857 on cpu 1: [ 36.506038][ T3841] __xa_set_mark+0x182/0x1b0 [ 36.510658][ T3841] __folio_mark_dirty+0x3b5/0x4e0 [ 36.515723][ T3841] mark_buffer_dirty+0x134/0x230 [ 36.520701][ T3841] block_write_end+0x123/0x210 [ 36.525510][ T3841] generic_write_end+0x5c/0x160 [ 36.530408][ T3841] fat_write_end+0x4e/0x160 [ 36.534945][ T3841] generic_perform_write+0x33c/0x4a0 [ 36.540279][ T3841] __generic_file_write_iter+0xa1/0x120 [ 36.545874][ T3841] generic_file_write_iter+0x77/0x1c0 [ 36.551299][ T3841] iter_file_splice_write+0x5f1/0x980 [ 36.556806][ T3841] direct_splice_actor+0x160/0x2c0 [ 36.561953][ T3841] splice_direct_to_actor+0x302/0x670 [ 36.567356][ T3841] do_splice_direct+0xd7/0x150 [ 36.572149][ T3841] do_sendfile+0x398/0x660 [ 36.576596][ T3841] __x64_sys_sendfile64+0x110/0x150 [ 36.581843][ T3841] x64_sys_call+0xfbd/0x2dc0 [ 36.586458][ T3841] do_syscall_64+0xc9/0x1c0 [ 36.590998][ T3841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.596933][ T3841] [ 36.599303][ T3841] read to 0xffff888106a28214 of 4 bytes by task 3841 on cpu 0: [ 36.606873][ T3841] xas_find_marked+0x60a/0x660 [ 36.611769][ T3841] find_get_entry+0x54/0x390 [ 36.616392][ T3841] filemap_get_folios_tag+0x9e/0x210 [ 36.621707][ T3841] file_write_and_wait_range+0x204/0x2f0 [ 36.627368][ T3841] __generic_file_fsync+0x46/0x140 [ 36.632510][ T3841] fat_file_fsync+0x46/0x100 [ 36.637149][ T3841] vfs_fsync_range+0x116/0x130 [ 36.641951][ T3841] generic_file_write_iter+0x185/0x1c0 [ 36.647438][ T3841] iter_file_splice_write+0x5f1/0x980 [ 36.652837][ T3841] direct_splice_actor+0x160/0x2c0 [ 36.657991][ T3841] splice_direct_to_actor+0x302/0x670 [ 36.663390][ T3841] do_splice_direct+0xd7/0x150 [ 36.668194][ T3841] do_sendfile+0x398/0x660 [ 36.672643][ T3841] __x64_sys_sendfile64+0x110/0x150 [ 36.677896][ T3841] x64_sys_call+0xfbd/0x2dc0 [ 36.682509][ T3841] do_syscall_64+0xc9/0x1c0 [ 36.687049][ T3841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.692994][ T3841] [ 36.695328][ T3841] value changed: 0x04000021 -> 0x0e000021 [ 36.701059][ T3841] [ 36.703393][ T3841] Reported by Kernel Concurrency Sanitizer on: [ 36.709570][ T3841] CPU: 0 UID: 0 PID: 3841 Comm: syz.0.180 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 36.719845][ T3841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.729926][ T3841] ================================================================== [ 36.866345][ T3857] ================================================================== [ 36.874474][ T3857] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 36.882432][ T3857] [ 36.884769][ T3857] write to 0xffff888106a28128 of 4 bytes by task 3841 on cpu 0: [ 36.892413][ T3857] __mark_inode_dirty+0x24e/0x7e0 [ 36.897492][ T3857] fat_update_time+0x1e8/0x200 [ 36.902280][ T3857] touch_atime+0x14f/0x350 [ 36.906813][ T3857] filemap_splice_read+0x8a5/0x910 [ 36.911962][ T3857] splice_direct_to_actor+0x269/0x670 [ 36.917370][ T3857] do_splice_direct+0xd7/0x150 [ 36.922152][ T3857] do_sendfile+0x398/0x660 [ 36.926588][ T3857] __x64_sys_sendfile64+0x110/0x150 [ 36.931835][ T3857] x64_sys_call+0xfbd/0x2dc0 [ 36.936455][ T3857] do_syscall_64+0xc9/0x1c0 [ 36.940993][ T3857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.946927][ T3857] [ 36.949269][ T3857] read to 0xffff888106a28128 of 4 bytes by task 3857 on cpu 1: [ 36.956843][ T3857] __mark_inode_dirty+0x58/0x7e0 [ 36.961824][ T3857] fat_update_time+0x1e8/0x200 [ 36.966617][ T3857] touch_atime+0x14f/0x350 [ 36.971058][ T3857] filemap_splice_read+0x8a5/0x910 [ 36.976200][ T3857] splice_direct_to_actor+0x269/0x670 [ 36.981594][ T3857] do_splice_direct+0xd7/0x150 [ 36.986388][ T3857] do_sendfile+0x398/0x660 [ 36.990827][ T3857] __x64_sys_sendfile64+0x110/0x150 [ 36.996075][ T3857] x64_sys_call+0xfbd/0x2dc0 [ 37.000695][ T3857] do_syscall_64+0xc9/0x1c0 [ 37.005233][ T3857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.011165][ T3857] [ 37.013495][ T3857] value changed: 0x00000000 -> 0x00000038 [ 37.019218][ T3857] [ 37.021572][ T3857] Reported by Kernel Concurrency Sanitizer on: [ 37.027736][ T3857] CPU: 1 UID: 0 PID: 3857 Comm: syz.0.180 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 37.037991][ T3857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.048073][ T3857] ================================================================== [ 37.123688][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 37.123701][ T29] audit: type=1400 audit(1867245687.680:787): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.733349][ T29] audit: type=1400 audit(1867245689.290:788): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.755408][ T29] audit: type=1400 audit(1867245689.290:789): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.777020][ T29] audit: type=1400 audit(1867245689.290:790): avc: denied { append } for pid=2983 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.799363][ T29] audit: type=1400 audit(1867245689.290:791): avc: denied { open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.822117][ T29] audit: type=1400 audit(1867245689.290:792): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1