last executing test programs: 24.987143455s ago: executing program 4 (id=271): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xd5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 24.964584338s ago: executing program 4 (id=273): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb6, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000340)=""/87, 0x57}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 24.904350403s ago: executing program 4 (id=276): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000980)='./file1\x00', 0x80809e, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b7, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706", 0x200) sendfile(r0, r1, 0x0, 0xe066) 24.802655363s ago: executing program 4 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2b93089, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x297881, 0x0) 24.747928058s ago: executing program 4 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 24.550847647s ago: executing program 4 (id=287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) dup3(r0, r2, 0x0) shutdown(r0, 0x0) 24.550742107s ago: executing program 32 (id=287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) dup3(r0, r2, 0x0) shutdown(r0, 0x0) 14.542953092s ago: executing program 0 (id=598): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 14.501820286s ago: executing program 0 (id=601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "ffffffffffff81fd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000380)="636599fcf6ae48f711e879fc3b963a639f9e0d5a9335f8b3bd945fa3ec0ed100b20ed75ae4f4bf6202ff94219a6d83b89d820b425b7f4fa805974684d581b6b5e054b2eb1dc29f926e8f500dfc7710e0636df31adbf834b3609987f52ffec093cc3f7ae74d30e8ccee57d875907d2ad6e2a712cbf008b699b90ea279e700b89a545ca1ac2d8ae60f67333810a2f4", 0x8e}, {&(0x7f0000000540)="95fc810d255c9fc2d93d60bfaa457218bacff66e1f38f2a07b52e1befc0270d53038f3b4051c35ca941183922d3721b5711f453127ce9b2e78384135c15b675dee93054eacaeac0fa86515bb43f66efd69126dba75b1b8b824871f3936f938de932a6e75714898eecbdf0863f6bc9dc9075f0916789498a23dfb9768131f588713dc6f1855bc51af54ebb1150ef491aa5eee8ce56a5ff2c9a45b674ca4c8d323a5533b920197367bf87b6e7c2e411003d4f947626a806277f935ff062c37fb59fc49ea2bdb7d9b226cdf4dd955c37d0b77", 0xd1}, {&(0x7f0000000640)="62c64383f517ef16e473a457ba22b646647c278a60acfa8286ff69f88148ec9a1826d91afe13a361169f9778f0e34443a10c4a4e0cc787aa261ca16cc6545e830cba7d3a305df5fd42b587cd980977fb0665bcc8213108c213afee8d97d0ca6144552a3241a4f1e6002052fdada5d2a5cbaec4cb2d38cb0e743b43b48dd760f3a684243c8cd33cf86256c25f061fac26c8172ba0b9dd227495d8a565697a39d5a8aa593be220cde9c98b5737ea6f44e6f74f2601be6d093d52a8841312302852880b2815cb4212b6", 0xc8}], 0x4) 13.671353906s ago: executing program 2 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x6, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x140, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 13.629045599s ago: executing program 0 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x43403d05, 0x0) 13.611428841s ago: executing program 0 (id=627): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x7, 0x1010f3) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 13.592592033s ago: executing program 2 (id=628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 13.494793142s ago: executing program 2 (id=644): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r0, 0x0, 0x0) 13.464541315s ago: executing program 2 (id=635): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000003c0)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noblock_validity}, {@debug}, {@nombcache}, {@bh}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 13.453964336s ago: executing program 0 (id=636): syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) 13.096094101s ago: executing program 0 (id=641): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 13.09592158s ago: executing program 2 (id=642): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x40}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x6, 0x2}, {0x0, 0x8, 0x1}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='\x00']}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x6c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.09582228s ago: executing program 33 (id=641): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 12.722068546s ago: executing program 2 (id=653): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 12.702262828s ago: executing program 34 (id=653): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.671635341s ago: executing program 5 (id=904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r2, r2, 0x2f, 0x0, 0x0, @void, @value}, 0x20) 1.612705817s ago: executing program 5 (id=905): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1.565307571s ago: executing program 5 (id=907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 1.335911202s ago: executing program 3 (id=913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(r2, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.198794306s ago: executing program 6 (id=916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)=ANY=[]) 1.198654306s ago: executing program 3 (id=917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 1.182071837s ago: executing program 7 (id=926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(r2, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.173249418s ago: executing program 3 (id=927): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.136467022s ago: executing program 6 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 1.136392722s ago: executing program 3 (id=919): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x10}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x40000000, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.132597692s ago: executing program 7 (id=920): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x4, @perf_bp={0x0, 0x1}, 0x1101a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000), 0x1001) 900.140734ms ago: executing program 6 (id=921): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7f7, 0x8000f68, 0x1, 0xfffffffffffffffe, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x9}, 0x18) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 855.394299ms ago: executing program 7 (id=922): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 704.321433ms ago: executing program 5 (id=923): creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0xa4) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 700.119704ms ago: executing program 7 (id=925): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff041, 0x0) 603.770733ms ago: executing program 6 (id=928): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 603.156133ms ago: executing program 7 (id=938): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r1}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0) 566.612396ms ago: executing program 7 (id=930): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) 536.130019ms ago: executing program 5 (id=932): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x81, 0x23a, &(0x7f0000000680)="$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") chmod(&(0x7f0000000180)='./file0\x00', 0x23f) sync() pidfd_send_signal(r1, 0x2, 0x0, 0x0) 510.029792ms ago: executing program 6 (id=933): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120400000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000200000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 433.549219ms ago: executing program 1 (id=934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3, 0x0, 0x2, 0x2}}, 0x20) 312.6701ms ago: executing program 6 (id=935): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 312.529671ms ago: executing program 1 (id=936): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x6, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 294.458482ms ago: executing program 1 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x55) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) 285.029073ms ago: executing program 3 (id=939): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7f7, 0x8000f68, 0x1, 0xfffffffffffffffe, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x9}, 0x18) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 261.395025ms ago: executing program 1 (id=940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 240.580447ms ago: executing program 1 (id=941): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r1}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) pwrite64(r0, &(0x7f0000000080)='3', 0x1, 0x0) 6.05032ms ago: executing program 3 (id=942): creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0xa4) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 5.88025ms ago: executing program 5 (id=943): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x7, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8085}, 0x0) 0s ago: executing program 1 (id=952): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x81, 0x23a, &(0x7f0000000680)="$eJzs3TFoM2UcBvDnLsmn/QzyqYsgqCAiWih1E1zqJBSkFBFBhYqIi9IKtcWtdXJx0Fmlk0sRNztLl+KiCE5VO9RF0OJgcdAhklxrK41om5iT734/OHKXvO/7f4+7502WIwEa60aSuSStJNNJOkmK8w3ur7YbJ4dbU3tLSa/39M/FoF11XDntd1uSzSSPJdkti7zaTtZ3nj/8df/Jh95Z6zz40c5zUxM9yRNHhwdPHX+48Pan84+uf/n1jwtF5tL9y3mNXzHkvXaR3PlfFPufKNp1z4B/Y/HNT77p5/6uJA8M8t9Jmerivbt6bbeTRz74u77v/fTVPZOcKzB+vV6n/x242QMap0zSTVHOJKn2y3JmpvoN/23revnayuob06+srC2/XPdKBYxLN73ibP8s/z+0qvwDN69ucvDM4vZ3/f3jVt2zASapn//pFzcejvxD48g/NJf8Q3PJPzSX/ENzyT80l/xDc8k/NJf8Q3PJPzTX+fwDAM3Su6XuJ5CButS9/gAAAAAAAAAAAAAAAAAAABdtTe0tnW6X7HrrVWt+/n5y9ESS9rD6rcH/EZ8Of/2Xot/sT0XVbSQv3DfiACP6uOanr2//fqzDXbtshy/uHWv9S9tYTjbfSjLbbl+8/4qT++/q7viHzzsvjVhgRI8/W2/937frrT+/n3zWX39mh60/Ze4evA5ff7r96zdi/dd/G3EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJuaPAAAA///dXGuS") chmod(&(0x7f0000000180)='./file0\x00', 0x23f) sync() pidfd_send_signal(r1, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): 04 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.922129][ T29] audit: type=1400 audit(1730756184.048:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.095771][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.101917][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.210706][ T29] audit: type=1400 audit(1730756184.358:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.235781][ T29] audit: type=1400 audit(1730756184.358:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.249491][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.256419][ T29] audit: type=1400 audit(1730756184.358:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.285416][ T29] audit: type=1400 audit(1730756184.358:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.306054][ T29] audit: type=1400 audit(1730756184.368:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.330943][ T29] audit: type=1400 audit(1730756184.368:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.338802][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.355023][ T29] audit: type=1400 audit(1730756184.418:91): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.447369][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.484308][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 28.513711][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.533884][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.540989][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.548409][ T3314] bridge_slave_0: entered allmulticast mode [ 28.554873][ T3314] bridge_slave_0: entered promiscuous mode [ 28.564354][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.571545][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.578860][ T3314] bridge_slave_1: entered allmulticast mode [ 28.585278][ T3314] bridge_slave_1: entered promiscuous mode [ 28.635389][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.646589][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.686202][ T3314] team0: Port device team_slave_0 added [ 28.701902][ T3314] team0: Port device team_slave_1 added [ 28.707749][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 28.737719][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.744798][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.752110][ T3324] bridge_slave_0: entered allmulticast mode [ 28.758615][ T3324] bridge_slave_0: entered promiscuous mode [ 28.783799][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.791022][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.798300][ T3324] bridge_slave_1: entered allmulticast mode [ 28.804587][ T3324] bridge_slave_1: entered promiscuous mode [ 28.810869][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.818067][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.825232][ T3317] bridge_slave_0: entered allmulticast mode [ 28.831595][ T3317] bridge_slave_0: entered promiscuous mode [ 28.842307][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.849375][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.875322][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.892785][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.900201][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.907453][ T3317] bridge_slave_1: entered allmulticast mode [ 28.913826][ T3317] bridge_slave_1: entered promiscuous mode [ 28.927237][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.934254][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.960275][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.983695][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.998522][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.009455][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.029253][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.038418][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.045574][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.052766][ T3320] bridge_slave_0: entered allmulticast mode [ 29.059902][ T3320] bridge_slave_0: entered promiscuous mode [ 29.067027][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.092498][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.099635][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.106758][ T3320] bridge_slave_1: entered allmulticast mode [ 29.113044][ T3320] bridge_slave_1: entered promiscuous mode [ 29.140300][ T3324] team0: Port device team_slave_0 added [ 29.152752][ T3314] hsr_slave_0: entered promiscuous mode [ 29.159037][ T3314] hsr_slave_1: entered promiscuous mode [ 29.166097][ T3317] team0: Port device team_slave_0 added [ 29.177693][ T3324] team0: Port device team_slave_1 added [ 29.184710][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.201467][ T3317] team0: Port device team_slave_1 added [ 29.219819][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.246372][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.253314][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.279430][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.297202][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.304158][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.330196][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.343666][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.350716][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.376709][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.397337][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.404374][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.430334][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.448575][ T3320] team0: Port device team_slave_0 added [ 29.478500][ T3320] team0: Port device team_slave_1 added [ 29.484314][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.491678][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.499020][ T3315] bridge_slave_0: entered allmulticast mode [ 29.505505][ T3315] bridge_slave_0: entered promiscuous mode [ 29.512190][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.519281][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.526507][ T3315] bridge_slave_1: entered allmulticast mode [ 29.532904][ T3315] bridge_slave_1: entered promiscuous mode [ 29.579995][ T3317] hsr_slave_0: entered promiscuous mode [ 29.586230][ T3317] hsr_slave_1: entered promiscuous mode [ 29.592144][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.599794][ T3317] Cannot create hsr debugfs directory [ 29.610593][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.617664][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.643941][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.655080][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.662016][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.688049][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.699944][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.718509][ T3324] hsr_slave_0: entered promiscuous mode [ 29.724623][ T3324] hsr_slave_1: entered promiscuous mode [ 29.730805][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.738426][ T3324] Cannot create hsr debugfs directory [ 29.747391][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.789368][ T3315] team0: Port device team_slave_0 added [ 29.809819][ T3320] hsr_slave_0: entered promiscuous mode [ 29.816916][ T3320] hsr_slave_1: entered promiscuous mode [ 29.823212][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.831525][ T3320] Cannot create hsr debugfs directory [ 29.837687][ T3315] team0: Port device team_slave_1 added [ 29.869688][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.876698][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.902697][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.928264][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.935265][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.961631][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.984202][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.012876][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.022035][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.048747][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.066508][ T3315] hsr_slave_0: entered promiscuous mode [ 30.072629][ T3315] hsr_slave_1: entered promiscuous mode [ 30.078793][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.086454][ T3315] Cannot create hsr debugfs directory [ 30.148787][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.164192][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.187024][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.197209][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.230505][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.245754][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.261776][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.271598][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.294671][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.301909][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.317173][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.342610][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.350119][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.364226][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.375712][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.382886][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.390822][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.409900][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.417180][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.426127][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.442684][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.451470][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.472148][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.482600][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.508447][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.542377][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.566469][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.573658][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.586898][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.607805][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.614876][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.628362][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.643756][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.661332][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.680174][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.695375][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.707752][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.715081][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.725297][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.732475][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.750939][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.758128][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.787493][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.794771][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.805899][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.824579][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.838793][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.846099][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.879656][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.900959][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.908049][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.921691][ T3314] veth0_vlan: entered promiscuous mode [ 30.951482][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.962057][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.992249][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.010236][ T3314] veth1_vlan: entered promiscuous mode [ 31.039679][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.062240][ T3314] veth0_macvtap: entered promiscuous mode [ 31.078751][ T3314] veth1_macvtap: entered promiscuous mode [ 31.091646][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.104113][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.116737][ T3324] veth0_vlan: entered promiscuous mode [ 31.124709][ T3324] veth1_vlan: entered promiscuous mode [ 31.137255][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.163067][ T3324] veth0_macvtap: entered promiscuous mode [ 31.183429][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.192285][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.201121][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.209955][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.221254][ T3324] veth1_macvtap: entered promiscuous mode [ 31.254761][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.265294][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.278239][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.301218][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.311840][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.325208][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.339161][ T3324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.347941][ T3324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.356760][ T3324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.365865][ T3324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.387524][ T3320] veth0_vlan: entered promiscuous mode [ 31.393886][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.406296][ T3317] veth0_vlan: entered promiscuous mode [ 31.433427][ T3320] veth1_vlan: entered promiscuous mode [ 31.474198][ T3315] veth0_vlan: entered promiscuous mode [ 31.480602][ T3457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'. [ 31.497362][ T3457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'. [ 31.506525][ T3457] Zero length message leads to an empty skb [ 31.521917][ T3320] veth0_macvtap: entered promiscuous mode [ 31.530526][ T3317] veth1_vlan: entered promiscuous mode [ 31.556934][ T3315] veth1_vlan: entered promiscuous mode [ 31.572212][ T3320] veth1_macvtap: entered promiscuous mode [ 31.594262][ T3460] loop3: detected capacity change from 0 to 8192 [ 31.599386][ T3317] veth0_macvtap: entered promiscuous mode [ 31.608156][ T3317] veth1_macvtap: entered promiscuous mode [ 31.618480][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.629016][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.638923][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.649462][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.660166][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.668923][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.679462][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.689342][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.699803][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.710415][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.731355][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.740370][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.749372][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.758118][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.779677][ T3315] veth0_macvtap: entered promiscuous mode [ 31.799673][ T3315] veth1_macvtap: entered promiscuous mode [ 31.828907][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.839508][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.849449][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.859929][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.869783][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.880248][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.892109][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 31.892203][ T29] audit: type=1400 audit(1730756189.038:152): avc: denied { create } for pid=3470 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.893389][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.905840][ T29] audit: type=1400 audit(1730756189.048:153): avc: denied { setopt } for pid=3470 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.920264][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.954521][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.964606][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.975133][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.985015][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.995529][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.997870][ T29] audit: type=1400 audit(1730756189.138:154): avc: denied { ioctl } for pid=3471 comm="syz.0.12" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.007204][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.049514][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.060223][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.063911][ T29] audit: type=1400 audit(1730756189.188:155): avc: denied { open } for pid=3475 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.070078][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.089024][ T29] audit: type=1400 audit(1730756189.188:156): avc: denied { kernel } for pid=3475 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.099628][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.099644][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.139429][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.149254][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.159767][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.171093][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.178411][ T29] audit: type=1400 audit(1730756189.318:157): avc: denied { create } for pid=3478 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 32.198101][ T29] audit: type=1400 audit(1730756189.318:158): avc: denied { write } for pid=3478 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 32.227681][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.236766][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.245631][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.254332][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.287582][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.298291][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.308179][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.318845][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.328692][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.339141][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.349022][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.359449][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.377453][ T29] audit: type=1400 audit(1730756189.528:159): avc: denied { create } for pid=3489 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.380017][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.402077][ T29] audit: type=1400 audit(1730756189.528:160): avc: denied { setopt } for pid=3489 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.436344][ T29] audit: type=1400 audit(1730756189.588:161): avc: denied { bind } for pid=3489 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.458510][ T3488] bond1: entered promiscuous mode [ 32.463570][ T3488] bond1: entered allmulticast mode [ 32.469710][ T3488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.482629][ T3488] bond1 (unregistering): Released all slaves [ 32.507643][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.516527][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.525400][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.534190][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.769479][ T3519] rdma_op ffff888115804180 conn xmit_rdma 0000000000000000 [ 32.811090][ T3521] syz.0.29[3521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.811218][ T3521] syz.0.29[3521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.855407][ T3521] syz.0.29[3521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.916010][ T3530] syz.1.32[3530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.932668][ T3530] syz.1.32[3530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.963344][ T3530] syz.1.32[3530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.009791][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 33.053781][ T3536] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 33.062751][ T3536] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 33.145716][ T3546] IPv6: Can't replace route, no match found [ 33.169315][ T3548] loop1: detected capacity change from 0 to 512 [ 33.191293][ T3548] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.38: bg 0: block 35: padding at end of block bitmap is not set [ 33.210978][ T3548] EXT4-fs (loop1): Remounting filesystem read-only [ 33.217918][ T3548] EXT4-fs (loop1): 1 truncate cleaned up [ 33.224091][ T3548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.236869][ T3548] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 33.245832][ T3548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.338205][ T3565] loop6: detected capacity change from 0 to 7 [ 33.344488][ T3565] Buffer I/O error on dev loop6, logical block 0, async page read [ 33.358391][ T3565] Buffer I/O error on dev loop6, logical block 0, async page read [ 33.366324][ T3565] loop6: unable to read partition table [ 33.373114][ T3565] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 33.373114][ T3565] ) failed (rc=-5) [ 33.586858][ T3589] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.650165][ T3593] loop4: detected capacity change from 0 to 2048 [ 33.687082][ T3593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.741537][ T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.756914][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.769301][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.769301][ T11] [ 33.779096][ T11] EXT4-fs (loop4): Total free blocks count 0 [ 33.785183][ T11] EXT4-fs (loop4): Free/Dirty block details [ 33.791104][ T11] EXT4-fs (loop4): free_blocks=2415919104 [ 33.796913][ T11] EXT4-fs (loop4): dirty_blocks=16 [ 33.802043][ T11] EXT4-fs (loop4): Block reservation details [ 33.808153][ T11] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 33.830394][ T3619] loop0: detected capacity change from 0 to 2048 [ 33.837145][ T3619] EXT4-fs: Ignoring removed orlov option [ 33.837331][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.889135][ T3619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.099008][ T3646] Illegal XDP return value 4013091182 on prog (id 62) dev N/A, expect packet loss! [ 34.134363][ T3649] batadv_slave_1: entered promiscuous mode [ 34.152332][ T3647] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.168857][ T3647] EXT4-fs (loop0): Remounting filesystem read-only [ 34.175630][ T3648] batadv_slave_1: left promiscuous mode [ 34.229524][ T3657] netlink: 132 bytes leftover after parsing attributes in process `syz.4.85'. [ 34.240674][ T3647] syz.0.70 (3647) used greatest stack depth: 10256 bytes left [ 34.250546][ T3657] netlink: 'syz.4.85': attribute type 10 has an invalid length. [ 34.270377][ T3657] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 34.325824][ T3659] syz.4.87[3659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.325903][ T3659] syz.4.87[3659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.352351][ T3659] syz.4.87[3659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.355837][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.587739][ T3687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.99'. [ 34.596762][ T3687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.99'. [ 34.605874][ T3687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.99'. [ 34.637875][ T3691] usb usb1: usbfs: process 3691 (syz.2.101) did not claim interface 0 before use [ 34.640499][ T3693] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.669980][ T3687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.99'. [ 34.678879][ T3687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.99'. [ 34.688159][ T3687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.99'. [ 34.712853][ T3700] syz.2.103[3700] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.752011][ T3706] netlink: 'syz.2.107': attribute type 7 has an invalid length. [ 34.779845][ T3708] syz.0.108 uses obsolete (PF_INET,SOCK_PACKET) [ 34.870683][ T3719] loop2: detected capacity change from 0 to 1024 [ 34.878864][ T3719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.908646][ T3719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.913299][ T3721] hsr0: entered promiscuous mode [ 34.922674][ T3721] hsr0: entered allmulticast mode [ 34.927822][ T3721] hsr_slave_0: entered allmulticast mode [ 34.933713][ T3721] hsr_slave_1: entered allmulticast mode [ 34.943620][ T3719] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003] [ 34.953590][ T3719] System zones: 0-1, 3-36 [ 34.960715][ T3719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.027437][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.141586][ T3736] loop1: detected capacity change from 0 to 8192 [ 35.152813][ T3745] loop0: detected capacity change from 0 to 512 [ 35.160760][ T3745] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.178757][ T3745] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.125: corrupted in-inode xattr: invalid ea_ino [ 35.205865][ T3745] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.125: couldn't read orphan inode 15 (err -117) [ 35.258930][ T3750] loop1: detected capacity change from 0 to 2048 [ 35.284620][ T3745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.333310][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.347141][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.376112][ T3750] EXT4-fs (loop1): shut down requested (0) [ 35.411341][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.430709][ T3755] ebtables: ebtables: counters copy to user failed while replacing table [ 35.771429][ T3794] unsupported nlmsg_type 40 [ 35.831166][ T3804] loop1: detected capacity change from 0 to 1024 [ 35.838309][ T3804] EXT4-fs: Ignoring removed orlov option [ 35.844106][ T3804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.854055][ T3806] IPv6: Can't replace route, no match found [ 35.883911][ T3804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.943974][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.965990][ T3822] loop4: detected capacity change from 0 to 764 [ 36.003959][ T3824] loop1: detected capacity change from 0 to 164 [ 36.022790][ T3824] ISOFS: unable to read i-node block [ 36.074657][ T3832] loop2: detected capacity change from 0 to 512 [ 36.095263][ T3832] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.117106][ T3832] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.125911][ T3832] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.159571][ T3832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.175964][ T3832] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.163: corrupted inode contents [ 36.189706][ T3832] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.163: mark_inode_dirty error [ 36.201458][ T3832] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.163: corrupted inode contents [ 36.207419][ T3845] loop0: detected capacity change from 0 to 512 [ 36.247331][ T3845] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.168: corrupted in-inode xattr: invalid ea_ino [ 36.267200][ T3845] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.168: couldn't read orphan inode 15 (err -117) [ 36.279709][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.290973][ T3845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.349182][ T3852] bridge0: port 3(vlan2) entered blocking state [ 36.355559][ T3852] bridge0: port 3(vlan2) entered disabled state [ 36.362136][ T3852] vlan2: entered allmulticast mode [ 36.375935][ T3852] vlan2: left allmulticast mode [ 36.378848][ T3854] loop4: detected capacity change from 0 to 2048 [ 36.431574][ T3854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.433070][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.459304][ T3854] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.172: bg 0: block 234: padding at end of block bitmap is not set [ 36.474455][ T3854] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 36.486853][ T3854] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.486853][ T3854] [ 36.491657][ T3866] ip6tnl1: entered promiscuous mode [ 36.519238][ T3854] syz.4.172 (3854) used greatest stack depth: 9936 bytes left [ 36.554134][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.635672][ T3878] syz.1.183 (3878) used greatest stack depth: 9912 bytes left [ 36.715682][ T3895] bridge0: port 3(hsr_slave_1) entered blocking state [ 36.722834][ T3895] bridge0: port 3(hsr_slave_1) entered disabled state [ 36.724989][ T3896] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 36.741840][ T3896] SELinux: failed to load policy [ 36.784665][ T3902] loop1: detected capacity change from 0 to 2048 [ 36.807597][ T3902] EXT4-fs: Ignoring removed orlov option [ 36.826292][ T3902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.959528][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 36.959547][ T29] audit: type=1400 audit(1730756194.108:426): avc: denied { create } for pid=3919 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 36.990306][ T29] audit: type=1400 audit(1730756194.138:427): avc: denied { connect } for pid=3919 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.010325][ T29] audit: type=1400 audit(1730756194.138:428): avc: denied { write } for pid=3919 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.070828][ T3922] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.087757][ T3922] EXT4-fs (loop1): Remounting filesystem read-only [ 37.106764][ T3928] __nla_validate_parse: 7 callbacks suppressed [ 37.106778][ T3928] netlink: 100 bytes leftover after parsing attributes in process `syz.0.202'. [ 37.181087][ T29] audit: type=1326 audit(1730756194.328:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff126be719 code=0x7ffc0000 [ 37.257457][ T29] audit: type=1326 audit(1730756194.358:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7eff126be719 code=0x7ffc0000 [ 37.280799][ T29] audit: type=1400 audit(1730756194.358:431): avc: denied { unmount } for pid=3931 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.300507][ T29] audit: type=1326 audit(1730756194.358:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.0.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff126be719 code=0x7ffc0000 [ 37.322033][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.336905][ T3938] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 37.344407][ T3938] vhci_hcd: invalid port number 10 [ 37.349819][ T3938] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 37.359364][ T3939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.207'. [ 37.530215][ T3961] bridge0: port 3(vlan2) entered blocking state [ 37.536643][ T3961] bridge0: port 3(vlan2) entered disabled state [ 37.557953][ T3961] vlan2: entered allmulticast mode [ 37.563575][ T3963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.218'. [ 37.573662][ T3961] vlan2: left allmulticast mode [ 37.609611][ T29] audit: type=1326 audit(1730756194.758:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4eace719 code=0x7ffc0000 [ 37.653730][ T29] audit: type=1326 audit(1730756194.788:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3968 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4eace719 code=0x7ffc0000 [ 37.677176][ T29] audit: type=1400 audit(1730756194.788:435): avc: denied { ioctl } for pid=3972 comm="syz.2.223" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 37.735859][ T3977] process 'syz.4.225' launched './file0' with NULL argv: empty string added [ 37.784579][ T3985] loop3: detected capacity change from 0 to 256 [ 37.801235][ T3987] sd 0:0:1:0: device reset [ 37.826777][ T3985] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.850840][ T3985] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.931283][ T3996] ebtables: ebtables: counters copy to user failed while replacing table [ 38.379062][ T4024] loop1: detected capacity change from 0 to 1024 [ 38.428137][ T4024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.575824][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.731509][ T3989] syz.4.231 (3989) used greatest stack depth: 9800 bytes left [ 38.762508][ T4036] loop1: detected capacity change from 0 to 2048 [ 38.792652][ T4036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.870265][ T4036] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.248: bg 0: block 274: padding at end of block bitmap is not set [ 38.877639][ T4048] loop0: detected capacity change from 0 to 1024 [ 38.893476][ T4048] EXT4-fs: Ignoring removed orlov option [ 38.899296][ T4048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.907434][ T4036] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 38.920122][ T4036] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.920122][ T4036] [ 38.943071][ T4048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.966802][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.985937][ T4036] syz.1.248 (4036) used greatest stack depth: 9272 bytes left [ 39.016854][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.062793][ T4064] loop1: detected capacity change from 0 to 512 [ 39.072974][ T4064] EXT4-fs: Ignoring removed i_version option [ 39.093000][ T4064] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.095856][ T4067] loop0: detected capacity change from 0 to 128 [ 39.101145][ T4064] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.259: corrupted in-inode xattr: invalid ea_ino [ 39.119823][ T4064] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.259: couldn't read orphan inode 15 (err -117) [ 39.122599][ T4067] EXT4-fs: Ignoring removed i_version option [ 39.140059][ T4064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.159036][ T4067] EXT4-fs: Ignoring removed orlov option [ 39.186387][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.195556][ T4067] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.211993][ T4067] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.252446][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 39.269003][ T4071] loop4: detected capacity change from 0 to 512 [ 39.277921][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.289017][ T4071] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 39.300203][ T4071] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.307204][ T3324] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.308435][ T4071] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.262: Failed to acquire dquot type 1 [ 39.328450][ T4071] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.262: bg 0: block 40: padding at end of block bitmap is not set [ 39.343452][ T4071] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 39.352492][ T4071] EXT4-fs (loop4): 1 truncate cleaned up [ 39.358872][ T4071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.387368][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.396179][ T4080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 39.620700][ T4104] loop4: detected capacity change from 0 to 256 [ 39.724248][ T4108] ======================================================= [ 39.724248][ T4108] WARNING: The mand mount option has been deprecated and [ 39.724248][ T4108] and is ignored by this kernel. Remove the mand [ 39.724248][ T4108] option from the mount to silence this warning. [ 39.724248][ T4108] ======================================================= [ 39.794635][ T4111] loop3: detected capacity change from 0 to 512 [ 39.818718][ T4111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.832473][ T4111] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.858135][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.931489][ T3480] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.979245][ T3480] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.004847][ T4139] serio: Serial port ptm0 [ 40.049220][ T3480] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.118512][ T3480] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.131797][ T4151] hub 6-0:1.0: USB hub found [ 40.144197][ T4151] hub 6-0:1.0: 8 ports detected [ 40.161539][ T4157] loop1: detected capacity change from 0 to 512 [ 40.198389][ T4157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.230203][ T4157] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.245761][ T3480] bridge_slave_1: left allmulticast mode [ 40.251448][ T3480] bridge_slave_1: left promiscuous mode [ 40.257162][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.263882][ T4157] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 40.281935][ T3480] bridge_slave_0: left allmulticast mode [ 40.287705][ T3480] bridge_slave_0: left promiscuous mode [ 40.293437][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.300991][ T4157] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 40.324054][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 40.336868][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.336868][ T50] [ 40.346547][ T50] EXT4-fs (loop1): Total free blocks count 0 [ 40.352618][ T50] EXT4-fs (loop1): Free/Dirty block details [ 40.358740][ T50] EXT4-fs (loop1): free_blocks=65280 [ 40.364173][ T50] EXT4-fs (loop1): dirty_blocks=1 [ 40.369326][ T50] EXT4-fs (loop1): Block reservation details [ 40.375344][ T50] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 40.447872][ T3480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.458884][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.469795][ T3480] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 40.480230][ T3480] bond0 (unregistering): Released all slaves [ 40.492847][ T4167] batadv0: entered promiscuous mode [ 40.499047][ T4167] batadv_slave_0: entered promiscuous mode [ 40.505020][ T4167] batadv_slave_0: left promiscuous mode [ 40.510647][ T4167] batadv0: left promiscuous mode [ 40.522727][ T4140] chnl_net:caif_netlink_parms(): no params data found [ 40.549219][ T3480] hsr_slave_0: left promiscuous mode [ 40.555255][ T3480] hsr_slave_1: left promiscuous mode [ 40.560982][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.568435][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.576112][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.583547][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.593539][ T3480] veth1_macvtap: left promiscuous mode [ 40.599474][ T3480] veth0_macvtap: left promiscuous mode [ 40.605088][ T3480] veth1_vlan: left promiscuous mode [ 40.610346][ T3480] veth0_vlan: left promiscuous mode [ 40.699788][ T3480] team0 (unregistering): Port device team_slave_1 removed [ 40.710204][ T3480] team0 (unregistering): Port device team_slave_0 removed [ 40.799306][ T4196] lo speed is unknown, defaulting to 1000 [ 40.802478][ T4140] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.812328][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.821720][ T4140] bridge_slave_0: entered allmulticast mode [ 40.828594][ T4140] bridge_slave_0: entered promiscuous mode [ 40.836942][ T4196] lo speed is unknown, defaulting to 1000 [ 40.837271][ T4140] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.850109][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.860192][ T4140] bridge_slave_1: entered allmulticast mode [ 40.867713][ T4140] bridge_slave_1: entered promiscuous mode [ 40.880605][ T4196] lo speed is unknown, defaulting to 1000 [ 40.886825][ T4196] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.895398][ T4196] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 40.908977][ T4140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.924587][ T4196] lo speed is unknown, defaulting to 1000 [ 40.929155][ T4140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.939605][ T4196] lo speed is unknown, defaulting to 1000 [ 40.956905][ T4140] team0: Port device team_slave_0 added [ 40.972286][ T4196] lo speed is unknown, defaulting to 1000 [ 40.981192][ T4140] team0: Port device team_slave_1 added [ 40.987907][ T4196] lo speed is unknown, defaulting to 1000 [ 40.998118][ T4196] lo speed is unknown, defaulting to 1000 [ 41.006196][ T4140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.013229][ T4140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.039219][ T4140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.050617][ T4140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.057726][ T4140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.083780][ T4140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.120259][ T4213] bpf_get_probe_write_proto: 8 callbacks suppressed [ 41.120277][ T4213] syz.2.313[4213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.137185][ T4140] hsr_slave_0: entered promiscuous mode [ 41.154681][ T4213] syz.2.313[4213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.156105][ T4213] syz.2.313[4213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.169307][ T4140] hsr_slave_1: entered promiscuous mode [ 41.186756][ T4140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.194334][ T4140] Cannot create hsr debugfs directory [ 41.217046][ T4221] loop3: detected capacity change from 0 to 512 [ 41.243813][ T4221] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.257106][ T4221] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.298536][ T4221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 41.306811][ T4221] System zones: 1-12 [ 41.314082][ T4221] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.328822][ T4221] EXT4-fs (loop3): 1 truncate cleaned up [ 41.347673][ T4221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.459491][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.490613][ T4140] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.505772][ T4140] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.517083][ T4140] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.545242][ T4140] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.561973][ T4140] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.569091][ T4140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.576479][ T4140] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.583644][ T4140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.614219][ T4140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.626931][ T4140] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.682900][ T4140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.693329][ T4140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.807528][ T4140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.036808][ T4140] veth0_vlan: entered promiscuous mode [ 42.049091][ T4140] veth1_vlan: entered promiscuous mode [ 42.090444][ T4140] veth0_macvtap: entered promiscuous mode [ 42.106181][ T4140] veth1_macvtap: entered promiscuous mode [ 42.128501][ T4140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.139167][ T4140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.149192][ T4140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.159636][ T4140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.169521][ T4140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.180113][ T4140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.190040][ T4140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.200816][ T4140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.213113][ T4140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.221548][ T4140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.232189][ T4140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.242093][ T4140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.252625][ T4140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.262579][ T4140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.273241][ T4140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.283487][ T4140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.293943][ T4140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.304668][ T4140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.323227][ T4140] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.332088][ T4140] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.341389][ T4140] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.350320][ T4140] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.376272][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 42.376290][ T29] audit: type=1400 audit(1730756199.518:657): avc: denied { mounton } for pid=4140 comm="syz-executor" path="/root/syzkaller.AZQEvK/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 42.406840][ T29] audit: type=1400 audit(1730756199.518:658): avc: denied { mount } for pid=4140 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.429087][ T29] audit: type=1400 audit(1730756199.518:659): avc: denied { mount } for pid=4140 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 42.451597][ T29] audit: type=1400 audit(1730756199.518:660): avc: denied { mounton } for pid=4140 comm="syz-executor" path="/root/syzkaller.AZQEvK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 42.478350][ T29] audit: type=1400 audit(1730756199.528:661): avc: denied { mounton } for pid=4140 comm="syz-executor" path="/root/syzkaller.AZQEvK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 42.507762][ T29] audit: type=1400 audit(1730756199.598:662): avc: denied { mounton } for pid=4140 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 42.548162][ T29] audit: type=1400 audit(1730756199.698:663): avc: denied { read } for pid=4314 comm="syz.1.314" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.619079][ T29] audit: type=1400 audit(1730756199.728:664): avc: denied { open } for pid=4314 comm="syz.1.314" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.643917][ T29] audit: type=1400 audit(1730756199.728:665): avc: denied { ioctl } for pid=4314 comm="syz.1.314" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.701723][ T29] audit: type=1400 audit(1730756199.838:666): avc: denied { create } for pid=4327 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.715439][ T4317] bridge0: port 3(vlan2) entered blocking state [ 42.727959][ T4317] bridge0: port 3(vlan2) entered disabled state [ 42.776574][ T4317] vlan2: entered allmulticast mode [ 42.781839][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 42.800510][ T4317] vlan2: left allmulticast mode [ 42.883808][ T4346] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.924441][ T4363] netlink: 'syz.2.329': attribute type 2 has an invalid length. [ 43.140952][ T4400] loop0: detected capacity change from 0 to 128 [ 43.255823][ T4415] netlink: 'syz.5.347': attribute type 4 has an invalid length. [ 43.446793][ T4431] syzkaller0: entered allmulticast mode [ 43.474350][ T4433] loop2: detected capacity change from 0 to 2048 [ 43.495658][ T4430] syzkaller0: left allmulticast mode [ 43.544475][ T4440] ALSA: seq fatal error: cannot create timer (-22) [ 43.607563][ T4447] netlink: 'syz.0.370': attribute type 4 has an invalid length. [ 43.638462][ T4447] netlink: 'syz.0.370': attribute type 4 has an invalid length. [ 43.692923][ T4454] loop0: detected capacity change from 0 to 128 [ 43.719183][ T4454] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.784202][ T4464] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 43.792037][ T4464] netlink: 'syz.1.366': attribute type 4 has an invalid length. [ 43.799886][ T4464] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.366'. [ 43.815957][ T4454] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.828624][ T4454] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.895065][ T3324] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.907519][ T4476] geneve0: entered allmulticast mode [ 44.036395][ T4486] netlink: 'syz.0.377': attribute type 21 has an invalid length. [ 44.044309][ T4486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.377'. [ 44.169220][ T4496] serio: Serial port ptm0 [ 44.236608][ T4508] sctp: [Deprecated]: syz.5.385 (pid 4508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 44.236608][ T4508] Use struct sctp_sack_info instead [ 44.297228][ T4506] program syz.3.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.341169][ T4520] mmap: syz.3.392 (4520) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.402013][ T4528] loop3: detected capacity change from 0 to 256 [ 44.431784][ T4528] FAT-fs (loop3): bogus number of FAT sectors [ 44.438513][ T4528] FAT-fs (loop3): Can't find a valid FAT filesystem [ 44.544130][ T4543] loop3: detected capacity change from 0 to 512 [ 44.551476][ T4543] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.579888][ T4543] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.402: iget: bad i_size value: -6917529027641081756 [ 44.596939][ T4543] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.402: couldn't read orphan inode 17 (err -117) [ 44.610040][ T4543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.660475][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.977296][ C1] hrtimer: interrupt took 51494 ns [ 45.166072][ T4598] netlink: 332 bytes leftover after parsing attributes in process `syz.3.426'. [ 45.230156][ T4607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.429'. [ 45.259379][ T4610] loop0: detected capacity change from 0 to 128 [ 45.284054][ T4610] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.305799][ T4610] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.341797][ T4610] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.427: No space for directory leaf checksum. Please run e2fsck -D. [ 45.341911][ T4610] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.427: checksumming directory block 0 [ 45.349564][ T4621] netlink: 72 bytes leftover after parsing attributes in process `syz.2.435'. [ 45.514552][ T3324] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.560010][ T4642] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 45.586045][ T4641] IPVS: stopping master sync thread 4642 ... [ 45.633010][ T4650] netlink: 140 bytes leftover after parsing attributes in process `syz.1.447'. [ 45.660172][ T4652] loop2: detected capacity change from 0 to 512 [ 45.674465][ T4652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.692455][ T4654] loop5: detected capacity change from 0 to 2048 [ 45.717207][ T4654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.729374][ T4652] EXT4-fs (loop2): 1 truncate cleaned up [ 45.738054][ T4652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.779052][ T4652] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.448: inode #1073372648: comm syz.2.448: iget: illegal inode # [ 45.801138][ T4652] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.448: error while reading EA inode 1073372648 err=-117 [ 45.815364][ T4652] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.448: corrupted xattr block 33: invalid header [ 45.830894][ T4652] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 45.839399][ T4666] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 45.853651][ T4140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.878032][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.964910][ T3392] IPVS: starting estimator thread 0... [ 45.968531][ T4676] tipc: Started in network mode [ 45.975458][ T4676] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 45.994690][ T4676] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 46.003215][ T4676] tipc: Enabled bearer , priority 10 [ 46.075980][ T4681] IPVS: using max 2304 ests per chain, 115200 per kthread [ 46.235986][ T4707] tmpfs: Bad value for 'mpol' [ 46.304773][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 46.576596][ T4759] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 46.805858][ T4781] Cannot find add_set index 0 as target [ 46.814666][ T4779] loop3: detected capacity change from 0 to 512 [ 46.836454][ T4779] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm +}[@: corrupted in-inode xattr: invalid ea_ino [ 46.855080][ T4779] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm +}[@: couldn't read orphan inode 15 (err -117) [ 46.880307][ T4779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.897726][ T4793] program syz.5.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.907913][ T4793] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 46.937562][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.940713][ T4797] loop5: detected capacity change from 0 to 128 [ 47.034397][ T4808] batadv0: entered promiscuous mode [ 47.041438][ T4808] batadv_slave_0: entered promiscuous mode [ 47.047584][ T4808] batadv_slave_0: left promiscuous mode [ 47.059400][ T4808] batadv0: left promiscuous mode [ 47.081159][ T4812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.098794][ T4812] loop2: detected capacity change from 0 to 512 [ 47.110683][ T4812] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 47.125014][ T2980] tipc: Node number set to 1 [ 47.160246][ T4812] EXT4-fs (loop2): failed to open journal device unknown-block(1,255) -6 [ 47.393691][ T4837] syz.5.532[4837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.393785][ T4837] syz.5.532[4837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.411259][ T4837] syz.5.532[4837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.459449][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 47.459468][ T29] audit: type=1400 audit(1730756204.608:932): avc: denied { create } for pid=4842 comm="syz.5.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.519349][ T29] audit: type=1400 audit(1730756204.668:933): avc: denied { setopt } for pid=4842 comm="syz.5.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.521003][ T3017] udevd[3017]: worker [4324] terminated by signal 33 (Unknown signal 33) [ 47.548072][ T3017] udevd[3017]: worker [4324] failed while handling '/devices/virtual/block/loop3' [ 47.572876][ T29] audit: type=1400 audit(1730756204.718:934): avc: denied { read } for pid=4846 comm="syz.5.537" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 47.597244][ T29] audit: type=1400 audit(1730756204.718:935): avc: denied { open } for pid=4846 comm="syz.5.537" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 47.625763][ T29] audit: type=1400 audit(1730756204.718:936): avc: denied { ioctl } for pid=4846 comm="syz.5.537" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 47.671795][ T29] audit: type=1400 audit(1730756204.808:937): avc: denied { watch watch_reads } for pid=4850 comm="syz.0.539" path="/107" dev="tmpfs" ino=563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.694860][ T29] audit: type=1400 audit(1730756204.808:938): avc: denied { bind } for pid=4848 comm="syz.5.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.714446][ T29] audit: type=1400 audit(1730756204.808:939): avc: denied { listen } for pid=4848 comm="syz.5.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.733908][ T29] audit: type=1400 audit(1730756204.808:940): avc: denied { write } for pid=4848 comm="syz.5.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.753163][ T29] audit: type=1400 audit(1730756204.808:941): avc: denied { accept } for pid=4848 comm="syz.5.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.778881][ T4856] loop0: detected capacity change from 0 to 1024 [ 47.810614][ T4862] loop3: detected capacity change from 0 to 512 [ 47.819643][ T4856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.824215][ T4860] loop5: detected capacity change from 0 to 1024 [ 47.851581][ T4862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.867208][ T4862] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.903049][ T4860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.932432][ T4860] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.944485][ T4862] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.544: corrupted inode contents [ 47.958807][ T4862] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #19: comm syz.3.544: mark_inode_dirty error [ 47.970490][ T4862] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.544: corrupted inode contents [ 47.982837][ T4862] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.544: mark_inode_dirty error [ 47.996429][ T4862] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.544: mark inode dirty (error -117) [ 48.009780][ T4862] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 48.023813][ T4856] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 48.060690][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.074889][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.081301][ T4140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.187212][ T4888] loop5: detected capacity change from 0 to 512 [ 48.196654][ T4888] EXT4-fs: Ignoring removed oldalloc option [ 48.203323][ T4888] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 48.217312][ T4888] EXT4-fs (loop5): 1 truncate cleaned up [ 48.223991][ T4888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.236954][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 48.278761][ T4894] loop2: detected capacity change from 0 to 2048 [ 48.296742][ T4140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.307049][ T4894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.333828][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.352138][ T4898] loop5: detected capacity change from 0 to 4096 [ 48.368294][ T4898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.501701][ T4140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.565263][ T4911] SELinux: policydb version 0 does not match my version range 15-33 [ 48.573494][ T4911] SELinux: failed to load policy [ 48.750221][ T4926] loop2: detected capacity change from 0 to 1024 [ 48.766908][ T4926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.787872][ T4926] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.2.567: corrupted in-inode xattr: bad magic number in in-inode xattr [ 48.815317][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.931740][ T4941] capability: warning: `syz.5.570' uses deprecated v2 capabilities in a way that may be insecure [ 48.932918][ T4939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.005594][ T4939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.037754][ T4947] loop0: detected capacity change from 0 to 128 [ 49.092335][ T4939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.152864][ T4939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.194982][ T4939] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.206448][ T4939] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.221705][ T4939] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.234599][ T4939] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.272893][ T4961] loop5: detected capacity change from 0 to 128 [ 49.306114][ T4961] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.318672][ T4961] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.491327][ T4140] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.579718][ T4987] loop2: detected capacity change from 0 to 512 [ 49.594294][ T4987] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.602928][ T4987] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.618850][ T4990] loop5: detected capacity change from 0 to 512 [ 49.629942][ T4987] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.589: corrupted in-inode xattr: e_value out of bounds [ 49.645764][ T4987] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.589: couldn't read orphan inode 15 (err -117) [ 49.659159][ T4987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.678296][ T4990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.704074][ T4990] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.793352][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.807650][ T4140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.917597][ T5002] loop5: detected capacity change from 0 to 2048 [ 49.945291][ T5002] loop5: p1 < > p2 p3 < p5 > p4 [ 49.945307][ T5002] loop5: partition table partially beyond EOD, truncated [ 49.945421][ T5002] loop5: p1 start 4278190080 is beyond EOD, truncated [ 49.945442][ T5002] loop5: p2 start 16908800 is beyond EOD, truncated [ 49.945866][ T5002] loop5: p4 start 11326 is beyond EOD, truncated [ 49.945891][ T5002] loop5: p5 start 16908800 is beyond EOD, truncated [ 49.959428][ T3017] loop5: p1 < > p2 p3 < p5 > p4 [ 49.959438][ T3017] loop5: partition table partially beyond EOD, truncated [ 49.959539][ T3017] loop5: p1 start 4278190080 is beyond EOD, truncated [ 49.959555][ T3017] loop5: p2 start 16908800 is beyond EOD, truncated [ 49.959932][ T3017] loop5: p4 start 11326 is beyond EOD, truncated [ 49.959952][ T3017] loop5: p5 start 16908800 is beyond EOD, truncated [ 49.984747][ T5010] syz.2.599[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.985104][ T5010] syz.2.599[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.985281][ T5010] syz.2.599[5010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.012544][ T4881] udevd[4881]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 50.202245][ T5024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=5024 comm=syz.5.605 [ 50.202426][ T5020] IPv6: Can't replace route, no match found [ 50.306829][ T5031] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 50.306924][ T5031] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 50.306958][ T5031] vhci_hcd vhci_hcd.0: Device attached [ 50.549029][ T5047] loop5: detected capacity change from 0 to 128 [ 50.576354][ T3398] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 50.597088][ T5049] loop2: detected capacity change from 0 to 1024 [ 50.604023][ T5049] EXT4-fs: Ignoring removed oldalloc option [ 50.609347][ T5049] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 50.652921][ T5055] syz.5.615[5055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.652985][ T5055] syz.5.615[5055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.653146][ T5055] syz.5.615[5055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.665958][ T5049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.760373][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.902120][ T5076] af_packet: packet_mmap: vma is busy: 1 [ 50.916533][ T5080] loop0: detected capacity change from 0 to 128 [ 50.943992][ T5083] loop3: detected capacity change from 0 to 2048 [ 50.951606][ T5080] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.972836][ T5083] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.984543][ T5080] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.023860][ T5083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.068559][ T5098] loop2: detected capacity change from 0 to 512 [ 51.086734][ T5032] vhci_hcd: connection reset by peer [ 51.092760][ T5098] EXT4-fs: Ignoring removed bh option [ 51.099993][ T378] vhci_hcd: stop threads [ 51.104302][ T378] vhci_hcd: release socket [ 51.108768][ T378] vhci_hcd: disconnect device [ 51.125307][ T5098] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.149837][ T5098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c019, mo2=0002] [ 51.158660][ T5098] EXT4-fs (loop2): 1 truncate cleaned up [ 51.217459][ T5098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.253218][ T5107] lo speed is unknown, defaulting to 1000 [ 51.293205][ T5083] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.629: bg 0: block 234: padding at end of block bitmap is not set [ 51.307879][ T5098] loop2: detected capacity change from 512 to 64 [ 51.319135][ T5083] EXT4-fs (loop3): Remounting filesystem read-only [ 51.330860][ T5108] syz.2.635: attempt to access beyond end of device [ 51.330860][ T5108] loop2: rw=3, sector=76, nr_sectors = 4 limit=64 [ 51.347863][ T5108] syz.2.635: attempt to access beyond end of device [ 51.347863][ T5108] loop2: rw=2051, sector=80, nr_sectors = 432 limit=64 [ 51.362425][ T5092] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.374640][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.390002][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.417090][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.432925][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.449417][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.468885][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.502402][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.513550][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.518303][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.538907][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.553141][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 51.631822][ T5125] loop3: detected capacity change from 0 to 256 [ 51.644638][ T3480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.666335][ T5125] FAT-fs (loop3): Directory bread(block 64) failed [ 51.678722][ T5125] FAT-fs (loop3): Directory bread(block 65) failed [ 51.688989][ T5125] FAT-fs (loop3): Directory bread(block 66) failed [ 51.697000][ T5125] FAT-fs (loop3): Directory bread(block 67) failed [ 51.705642][ T5112] lo speed is unknown, defaulting to 1000 [ 51.718138][ T5125] FAT-fs (loop3): Directory bread(block 68) failed [ 51.728983][ T5132] futex_wake_op: syz.1.650 tries to shift op by 144; fix this program [ 51.738765][ T3480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.746767][ T5125] FAT-fs (loop3): Directory bread(block 69) failed [ 51.760588][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.793704][ T5125] FAT-fs (loop3): Directory bread(block 70) failed [ 51.803167][ T3480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.812281][ T5125] FAT-fs (loop3): Directory bread(block 71) failed [ 51.825873][ T5125] FAT-fs (loop3): Directory bread(block 72) failed [ 51.837868][ T5125] FAT-fs (loop3): Directory bread(block 73) failed [ 51.876489][ T5144] loop1: detected capacity change from 0 to 512 [ 51.884061][ T3480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.905079][ T5125] netlink: 76 bytes leftover after parsing attributes in process `syz.3.647'. [ 51.928879][ T5144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.943687][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 51.954988][ T5144] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.114148][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.121331][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.153335][ T5112] bridge_slave_0: entered allmulticast mode [ 52.173941][ T5112] bridge_slave_0: entered promiscuous mode [ 52.186637][ T3480] bridge_slave_1: left allmulticast mode [ 52.192425][ T3480] bridge_slave_1: left promiscuous mode [ 52.198576][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.209568][ T5144] Cannot find set identified by id 0 to match [ 52.228699][ T3480] bridge_slave_0: left allmulticast mode [ 52.234474][ T3480] bridge_slave_0: left promiscuous mode [ 52.240228][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.296703][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.396993][ T3480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.407393][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.417725][ T3480] bond0 (unregistering): Released all slaves [ 52.427868][ T5146] lo speed is unknown, defaulting to 1000 [ 52.435792][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.442985][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.450301][ T5112] bridge_slave_1: entered allmulticast mode [ 52.457512][ T5112] bridge_slave_1: entered promiscuous mode [ 52.471274][ T5186] netlink: 11 bytes leftover after parsing attributes in process `syz.5.662'. [ 52.475196][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 52.475211][ T29] audit: type=1326 audit(1730756209.628:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5189 comm="syz.1.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3bb5efe719 code=0x7ffc0000 [ 52.557093][ T5202] loop5: detected capacity change from 0 to 256 [ 52.578046][ T3480] hsr_slave_0: left promiscuous mode [ 52.587945][ T3480] hsr_slave_1: left promiscuous mode [ 52.594299][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.601770][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.613244][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.620910][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.655386][ T3480] veth1_macvtap: left promiscuous mode [ 52.660974][ T3480] veth0_macvtap: left promiscuous mode [ 52.666615][ T3480] veth1_vlan: left promiscuous mode [ 52.671957][ T3480] veth0_vlan: left promiscuous mode [ 52.689293][ T5214] loop5: detected capacity change from 0 to 1024 [ 52.707657][ T5214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.722608][ T5214] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 52.737787][ T5214] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 52.750249][ T5214] EXT4-fs (loop5): This should not happen!! Data will be lost [ 52.750249][ T5214] [ 52.760030][ T5214] EXT4-fs (loop5): Total free blocks count 0 [ 52.766294][ T5214] EXT4-fs (loop5): Free/Dirty block details [ 52.772248][ T5214] EXT4-fs (loop5): free_blocks=68451041280 [ 52.778193][ T5214] EXT4-fs (loop5): dirty_blocks=32 [ 52.783314][ T5214] EXT4-fs (loop5): Block reservation details [ 52.789431][ T5214] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 52.797467][ T5219] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 52.847048][ T3480] team0 (unregistering): Port device team_slave_1 removed [ 52.857785][ T3480] team0 (unregistering): Port device team_slave_0 removed [ 52.933457][ T29] audit: type=1400 audit(1730756210.078:1073): avc: denied { connect } for pid=5228 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.953589][ T29] audit: type=1400 audit(1730756210.078:1074): avc: denied { read } for pid=5228 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.963649][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.997044][ T5215] netlink: 356 bytes leftover after parsing attributes in process `syz.1.669'. [ 53.016256][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.051439][ T5112] team0: Port device team_slave_0 added [ 53.058235][ T5112] team0: Port device team_slave_1 added [ 53.078139][ T29] audit: type=1400 audit(1730756210.228:1075): avc: denied { mounton } for pid=5236 comm="syz.1.678" path="/proc/239/task" dev="proc" ino=10254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 53.129198][ T29] audit: type=1400 audit(1730756210.278:1076): avc: denied { create } for pid=5244 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.150227][ T29] audit: type=1400 audit(1730756210.298:1077): avc: denied { cpu } for pid=5242 comm="syz.5.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 53.171197][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.178404][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.204425][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.215942][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.222929][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.248934][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.271957][ T29] audit: type=1400 audit(1730756210.368:1078): avc: denied { getopt } for pid=5246 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.314264][ T5112] hsr_slave_0: entered promiscuous mode [ 53.330274][ T5112] hsr_slave_1: entered promiscuous mode [ 53.336314][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.340305][ T5255] syz.5.684[5255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.343871][ T5112] Cannot create hsr debugfs directory [ 53.343940][ T5255] syz.5.684[5255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.363018][ T5146] chnl_net:caif_netlink_parms(): no params data found [ 53.374668][ T5255] syz.5.684[5255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.427302][ T29] audit: type=1400 audit(1730756210.568:1079): avc: denied { write } for pid=5256 comm="syz.3.685" path="socket:[10220]" dev="sockfs" ino=10220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.592975][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.600155][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.607497][ T5146] bridge_slave_0: entered allmulticast mode [ 53.614349][ T5146] bridge_slave_0: entered promiscuous mode [ 53.639870][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.646998][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.654211][ T5146] bridge_slave_1: entered allmulticast mode [ 53.660652][ T5284] netlink: 52 bytes leftover after parsing attributes in process `syz.3.691'. [ 53.666375][ T5146] bridge_slave_1: entered promiscuous mode [ 53.676651][ T29] audit: type=1400 audit(1730756210.828:1080): avc: denied { setopt } for pid=5286 comm="syz.5.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.696298][ T5284] netlink: 52 bytes leftover after parsing attributes in process `syz.3.691'. [ 53.717688][ T11] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.729392][ T5284] netlink: 52 bytes leftover after parsing attributes in process `syz.3.691'. [ 53.746753][ T5146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.758905][ T5112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 53.778162][ T11] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.794453][ T5112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 53.807762][ T5146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.817468][ T5112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 53.827281][ T5112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 53.857555][ T11] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.884570][ T5309] loop5: detected capacity change from 0 to 128 [ 53.891430][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 53.932099][ T11] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.954389][ T5309] syz.5.696: attempt to access beyond end of device [ 53.954389][ T5309] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 53.967868][ T5309] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 53.976631][ T29] audit: type=1326 audit(1730756211.118:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5317 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb032e719 code=0x7ffc0000 [ 54.002347][ T5146] team0: Port device team_slave_0 added [ 54.009923][ T5146] team0: Port device team_slave_1 added [ 54.019910][ T5320] ebtables: ebtables: counters copy to user failed while replacing table [ 54.076527][ T5146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.083543][ T5146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.109638][ T5146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.121323][ T5146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.128345][ T5146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.154414][ T5146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.224404][ T5334] loop5: detected capacity change from 0 to 1024 [ 54.238521][ T5328] bond1: entered promiscuous mode [ 54.243717][ T5328] bond1: entered allmulticast mode [ 54.250138][ T5328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.257406][ T5334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.322484][ T5146] hsr_slave_0: entered promiscuous mode [ 54.329173][ T5343] Falling back ldisc for ttyS3. [ 54.340762][ T5146] hsr_slave_1: entered promiscuous mode [ 54.357971][ T5146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.369771][ T5146] Cannot create hsr debugfs directory [ 54.390470][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.398006][ T11] bridge_slave_1: left allmulticast mode [ 54.403697][ T11] bridge_slave_1: left promiscuous mode [ 54.409363][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.422340][ T11] bridge_slave_0: left allmulticast mode [ 54.428199][ T11] bridge_slave_0: left promiscuous mode [ 54.433896][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.466111][ T5355] syz.5.714[5355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.466267][ T5355] syz.5.714[5355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.479417][ T5355] syz.5.714[5355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.607603][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.631144][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.642935][ T11] bond0 (unregistering): Released all slaves [ 54.658164][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.668837][ T5362] vlan2: entered allmulticast mode [ 54.687508][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.694661][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.728705][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.735947][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.765111][ T11] hsr_slave_0: left promiscuous mode [ 54.772652][ T11] hsr_slave_1: left promiscuous mode [ 54.781815][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.789329][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.805203][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.812831][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.857385][ T11] veth1_macvtap: left promiscuous mode [ 54.862934][ T11] veth0_macvtap: left promiscuous mode [ 54.868573][ T11] veth1_vlan: left promiscuous mode [ 54.873917][ T11] veth0_vlan: left promiscuous mode [ 54.992186][ T11] team0 (unregistering): Port device team_slave_1 removed [ 55.003066][ T11] team0 (unregistering): Port device team_slave_0 removed [ 55.063857][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 55.214313][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.253979][ T5146] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 55.263630][ T5146] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 55.280054][ T5146] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 55.298120][ T11] IPVS: stop unused estimator thread 0... [ 55.304258][ T5146] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 55.381119][ T5146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.394102][ T5146] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.405101][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.412443][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.436955][ T5146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.447367][ T5146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.460540][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.467633][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.524504][ T5112] veth0_vlan: entered promiscuous mode [ 55.535974][ T5112] veth1_vlan: entered promiscuous mode [ 55.556510][ T5112] veth0_macvtap: entered promiscuous mode [ 55.569288][ T5112] veth1_macvtap: entered promiscuous mode [ 55.581913][ T5146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.596905][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.607685][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.617920][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.628474][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.638584][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.649534][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.672600][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.686766][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.697460][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.707405][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.714892][ T3398] vhci_hcd: vhci_device speed not set [ 55.717930][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.733357][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.744145][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.756908][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.768504][ T5112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.777445][ T5112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.786324][ T5112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.795172][ T5112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.914446][ T5493] loop3: detected capacity change from 0 to 1024 [ 55.944130][ T5493] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.957498][ T5493] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.985539][ T5493] JBD2: no valid journal superblock found [ 55.991321][ T5493] EXT4-fs (loop3): Could not load journal inode [ 56.012250][ T5146] veth0_vlan: entered promiscuous mode [ 56.042524][ T5146] veth1_vlan: entered promiscuous mode [ 56.061295][ T5146] veth0_macvtap: entered promiscuous mode [ 56.108823][ T5146] veth1_macvtap: entered promiscuous mode [ 56.127367][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.138001][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.147985][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.158507][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.168431][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.179183][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.189152][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.199648][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.211450][ T5146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.223385][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.234034][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.245057][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.255613][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.265478][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.275928][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.285810][ T5146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.296301][ T5146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.308214][ T5146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.324596][ T5146] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.333543][ T5146] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.342261][ T5146] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.351080][ T5146] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.369280][ T5531] pim6reg1: entered promiscuous mode [ 56.374624][ T5531] pim6reg1: entered allmulticast mode [ 56.535239][ T5548] loop7: detected capacity change from 0 to 512 [ 56.552851][ T5548] EXT4-fs error (device loop7): ext4_orphan_get:1388: inode #17: comm syz.7.739: iget: bogus i_mode (0) [ 56.577041][ T5548] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.739: couldn't read orphan inode 17 (err -117) [ 56.606611][ T5548] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.739: bg 0: block 7: invalid block bitmap [ 56.879172][ T5584] loop6: detected capacity change from 0 to 1024 [ 56.908109][ T5584] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 56.973304][ T5584] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 56.998281][ T5584] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=804ec119, mo2=0002] [ 57.043773][ T5600] syz.5.750[5600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.043888][ T5600] syz.5.750[5600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.055785][ T5600] syz.5.750[5600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.069957][ T5584] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 57.590779][ T5664] loop6: detected capacity change from 0 to 8192 [ 57.611303][ T5664] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.623806][ T5664] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 57.631805][ T5664] FAT-fs (loop6): Filesystem has been set read-only [ 57.712299][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.776'. [ 58.106457][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 58.106474][ T29] audit: type=1400 audit(1730756215.258:1178): avc: denied { write } for pid=5731 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.153243][ T29] audit: type=1400 audit(1730756215.298:1179): avc: denied { connect } for pid=5731 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.223847][ T5741] netlink: zone id is out of range [ 58.249871][ T5741] netlink: zone id is out of range [ 58.254225][ T5743] lo speed is unknown, defaulting to 1000 [ 58.266456][ T5741] netlink: del zone limit has 4 unknown bytes [ 58.441553][ T5761] loop1: detected capacity change from 0 to 512 [ 58.476468][ T5761] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 58.553694][ T5761] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 58.583759][ T5761] EXT4-fs (loop1): 1 truncate cleaned up [ 58.592643][ T5772] syz.6.794[5772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.592839][ T5772] syz.6.794[5772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.607888][ T5772] syz.6.794[5772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.627205][ T29] audit: type=1400 audit(1730756215.768:1180): avc: denied { mount } for pid=5771 comm="syz.6.794" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.754353][ T29] audit: type=1400 audit(1730756215.898:1181): avc: denied { mount } for pid=5794 comm="syz.3.803" name="/" dev="hugetlbfs" ino=12193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 58.808823][ T29] audit: type=1326 audit(1730756215.938:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb032e719 code=0x7ffc0000 [ 58.832416][ T29] audit: type=1326 audit(1730756215.938:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb032e719 code=0x7ffc0000 [ 58.852363][ T5789] loop6: detected capacity change from 0 to 4096 [ 58.855765][ T29] audit: type=1326 audit(1730756215.938:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fdbb032e719 code=0x7ffc0000 [ 58.885529][ T29] audit: type=1326 audit(1730756215.938:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb032e719 code=0x7ffc0000 [ 58.909702][ T29] audit: type=1326 audit(1730756215.938:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fdbb032e719 code=0x7ffc0000 [ 58.933144][ T29] audit: type=1326 audit(1730756215.938:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb032e719 code=0x7ffc0000 [ 58.941704][ T5803] loop3: detected capacity change from 0 to 1024 [ 58.968642][ T5803] EXT4-fs: Ignoring removed orlov option [ 58.974445][ T5803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.996733][ T5472] IPVS: starting estimator thread 0... [ 59.062298][ T5813] loop7: detected capacity change from 0 to 2048 [ 59.064109][ T5806] infiniband syz1: set active [ 59.073511][ T5806] infiniband syz1: added bond0 [ 59.085288][ T5808] IPVS: using max 2304 ests per chain, 115200 per kthread [ 59.094769][ T5806] RDS/IB: syz1: added [ 59.098836][ T5806] smc: adding ib device syz1 with port count 1 [ 59.105267][ T5806] smc: ib device syz1 port 1 has pnetid [ 59.140118][ T5823] loop3: detected capacity change from 0 to 256 [ 59.187201][ T5832] netlink: 'syz.6.812': attribute type 10 has an invalid length. [ 59.199474][ T5832] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 59.212681][ T5828] gretap0: entered promiscuous mode [ 59.214761][ T5830] loop7: detected capacity change from 0 to 512 [ 59.224587][ T5830] EXT4-fs: Ignoring removed nobh option [ 59.230296][ T5830] EXT4-fs: Ignoring removed nobh option [ 59.236631][ T5828] macsec1: entered promiscuous mode [ 59.241903][ T5828] macsec1: entered allmulticast mode [ 59.247336][ T5828] gretap0: entered allmulticast mode [ 59.255110][ T5828] gretap0: left allmulticast mode [ 59.260281][ T5828] gretap0: left promiscuous mode [ 59.285678][ T5830] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 59.330621][ T5830] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.811: invalid indirect mapped block 2683928664 (level 1) [ 59.366278][ T5830] EXT4-fs (loop7): 1 truncate cleaned up [ 59.382926][ T5844] netlink: 44 bytes leftover after parsing attributes in process `syz.6.814'. [ 59.444973][ T5852] loop1: detected capacity change from 0 to 512 [ 59.468349][ T5854] netlink: 3 bytes leftover after parsing attributes in process `syz.6.819'. [ 59.477925][ T5854] 0ªX¹¦À: renamed from caif0 [ 59.488286][ T5852] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.510977][ T5854] 0ªX¹¦À: entered allmulticast mode [ 59.516308][ T5854] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 59.536449][ T5852] EXT4-fs (loop1): 1 truncate cleaned up [ 59.754238][ T5886] loop3: detected capacity change from 0 to 512 [ 59.796897][ T5886] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.809497][ T5894] loop5: detected capacity change from 0 to 256 [ 59.863250][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.830'. [ 59.872235][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.830'. [ 59.881190][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.830'. [ 59.893197][ T5894] FAT-fs (loop5): Directory bread(block 64) failed [ 59.901314][ T5894] FAT-fs (loop5): Directory bread(block 65) failed [ 59.911065][ T5894] FAT-fs (loop5): Directory bread(block 66) failed [ 59.917957][ T5894] FAT-fs (loop5): Directory bread(block 67) failed [ 59.933706][ T5894] FAT-fs (loop5): Directory bread(block 68) failed [ 59.937404][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.830'. [ 59.941532][ T5894] FAT-fs (loop5): Directory bread(block 69) failed [ 59.949210][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.830'. [ 59.956839][ T5894] FAT-fs (loop5): Directory bread(block 70) failed [ 59.964560][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.830'. [ 59.971169][ T5894] FAT-fs (loop5): Directory bread(block 71) failed [ 59.987021][ T5894] FAT-fs (loop5): Directory bread(block 72) failed [ 59.993879][ T5894] FAT-fs (loop5): Directory bread(block 73) failed [ 60.063857][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.830'. [ 60.072843][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.830'. [ 60.174626][ T28] kworker/u8:1: attempt to access beyond end of device [ 60.174626][ T28] loop5: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 60.193004][ T5926] loop6: detected capacity change from 0 to 512 [ 60.208244][ T28] kworker/u8:1: attempt to access beyond end of device [ 60.208244][ T28] loop5: rw=1, sector=1288, nr_sectors = 96 limit=256 [ 60.252097][ T5926] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 60.315735][ T5926] EXT4-fs (loop6): 1 truncate cleaned up [ 60.371635][ T3392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.440292][ T5966] syz.5.843[5966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.440472][ T5966] syz.5.843[5966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.464919][ T5966] syz.5.843[5966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.525469][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.556188][ T5978] loop6: detected capacity change from 0 to 164 [ 60.763400][ T6010] vlan2: entered allmulticast mode [ 61.123353][ T6052] syzkaller0: entered promiscuous mode [ 61.128968][ T6052] syzkaller0: entered allmulticast mode [ 61.152209][ T6058] bridge0: port 3(vlan2) entered blocking state [ 61.158630][ T6058] bridge0: port 3(vlan2) entered disabled state [ 61.167940][ T6058] vlan2: entered allmulticast mode [ 61.173736][ T6058] vlan2: left allmulticast mode [ 61.190483][ T6064] loop1: detected capacity change from 0 to 512 [ 61.198682][ T6064] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.220663][ T6064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 61.250368][ T6064] System zones: 1-12 [ 61.264456][ T6064] EXT4-fs (loop1): 1 truncate cleaned up [ 62.066279][ T6111] loop7: detected capacity change from 0 to 512 [ 62.073869][ T6112] bridge0: port 3(vlan2) entered blocking state [ 62.080337][ T6112] bridge0: port 3(vlan2) entered disabled state [ 62.088170][ T6114] loop1: detected capacity change from 0 to 128 [ 62.096756][ T6112] vlan2: entered allmulticast mode [ 62.097207][ T6111] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 62.112220][ T6112] vlan2: left allmulticast mode [ 62.154434][ T6111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 62.163501][ T6111] System zones: 1-12 [ 62.172724][ T6111] EXT4-fs (loop7): 1 truncate cleaned up [ 62.358803][ T6147] loop1: detected capacity change from 0 to 128 [ 62.373847][ T6147] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.402667][ T6147] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.487509][ T6157] loop5: detected capacity change from 0 to 128 [ 62.922741][ T6185] netlink: 'syz.5.905': attribute type 1 has an invalid length. [ 62.930473][ T6185] netlink: 'syz.5.905': attribute type 4 has an invalid length. [ 63.018903][ T6190] netlink: 'syz.3.908': attribute type 4 has an invalid length. [ 63.034876][ T2980] lo speed is unknown, defaulting to 1000 [ 63.041718][ T6190] netlink: 'syz.3.908': attribute type 4 has an invalid length. [ 63.058708][ T3392] lo speed is unknown, defaulting to 1000 [ 63.087990][ T6194] serio: Serial port ptm0 [ 63.206452][ T6203] loop3: detected capacity change from 0 to 128 [ 63.332133][ T6209] program syz.6.916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.356846][ T6213] loop7: detected capacity change from 0 to 128 [ 63.390533][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 63.390553][ T29] audit: type=1326 audit(1730756220.538:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a097e719 code=0x7ffc0000 [ 63.420771][ T29] audit: type=1326 audit(1730756220.538:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a097e719 code=0x7ffc0000 [ 63.444402][ T29] audit: type=1326 audit(1730756220.548:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb3a097e719 code=0x7ffc0000 [ 63.469577][ T29] audit: type=1326 audit(1730756220.618:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a097e719 code=0x7ffc0000 [ 63.494571][ T29] audit: type=1326 audit(1730756220.618:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a097e719 code=0x7ffc0000 [ 63.518669][ T29] audit: type=1326 audit(1730756220.618:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb3a097e719 code=0x7ffc0000 [ 63.544938][ T29] audit: type=1326 audit(1730756220.618:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a097e719 code=0x7ffc0000 [ 63.568398][ T29] audit: type=1326 audit(1730756220.618:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a097e719 code=0x7ffc0000 [ 63.591749][ T29] audit: type=1326 audit(1730756220.618:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3a097e719 code=0x7ffc0000 [ 63.615428][ T29] audit: type=1326 audit(1730756220.618:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6215 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a097e719 code=0x7ffc0000 [ 63.664269][ T6224] netlink: 'syz.7.922': attribute type 4 has an invalid length. [ 63.678482][ T6224] netlink: 'syz.7.922': attribute type 4 has an invalid length. [ 63.849083][ T6228] serio: Serial port ptm0 [ 64.070665][ T6250] loop5: detected capacity change from 0 to 128 [ 64.108418][ T6250] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.124520][ T6250] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.932: No space for directory leaf checksum. Please run e2fsck -D. [ 64.143335][ T6250] EXT4-fs error (device loop5): __ext4_find_entry:1652: inode #2: comm syz.5.932: checksumming directory block 0 [ 64.538265][ T3017] ================================================================== [ 64.546388][ T3017] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 64.553744][ T3017] [ 64.556067][ T3017] write to 0xffff88810054a0f0 of 8 bytes by task 4881 on cpu 1: [ 64.563739][ T3017] dentry_unlink_inode+0x65/0x260 [ 64.568865][ T3017] d_delete+0x7d/0x100 [ 64.572953][ T3017] d_delete_notify+0x34/0x100 [ 64.577674][ T3017] vfs_unlink+0x320/0x430 [ 64.582056][ T3017] do_unlinkat+0x236/0x4c0 [ 64.586313][ T6274] loop1: detected capacity change from 0 to 128 [ 64.586480][ T3017] __x64_sys_unlink+0x2e/0x40 [ 64.597419][ T3017] x64_sys_call+0x280f/0x2d60 [ 64.602127][ T3017] do_syscall_64+0xc9/0x1c0 [ 64.606640][ T3017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.610531][ T6274] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.612535][ T3017] [ 64.612544][ T3017] read to 0xffff88810054a0f0 of 8 bytes by task 3017 on cpu 0: [ 64.627255][ T6274] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.952: No space for directory leaf checksum. Please run e2fsck -D. [ 64.632620][ T3017] step_into+0x123/0x810 [ 64.632651][ T3017] walk_component+0x169/0x230 [ 64.647856][ T6274] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.952: checksumming directory block 0 [ 64.652563][ T3017] path_lookupat+0x10a/0x2b0 [ 64.674198][ T3017] filename_lookup+0x127/0x300 [ 64.678998][ T3017] do_readlinkat+0x89/0x210 [ 64.683542][ T3017] __x64_sys_readlink+0x47/0x60 [ 64.688426][ T3017] x64_sys_call+0x13c3/0x2d60 [ 64.693152][ T3017] do_syscall_64+0xc9/0x1c0 [ 64.697677][ T3017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.703592][ T3017] [ 64.705924][ T3017] value changed: 0xffff8881030fd7c0 -> 0x0000000000000000 [ 64.713051][ T3017] [ 64.715372][ T3017] Reported by Kernel Concurrency Sanitizer on: [ 64.721540][ T3017] CPU: 0 UID: 0 PID: 3017 Comm: udevd Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 64.731808][ T3017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.742060][ T3017] ================================================================== [ 68.125300][ T2980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 69.406510][ T2980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 69.538802][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 69.538822][ T29] audit: type=1400 audit(1730756226.688:1378): avc: denied { search } for pid=6291 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.567675][ T29] audit: type=1400 audit(1730756226.688:1379): avc: denied { read } for pid=6292 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.592075][ T29] audit: type=1400 audit(1730756226.688:1380): avc: denied { open } for pid=6292 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.620236][ T29] audit: type=1400 audit(1730756226.688:1381): avc: denied { getattr } for pid=6292 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.645676][ T29] audit: type=1400 audit(1730756226.688:1382): avc: denied { getattr } for pid=6292 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=442 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.671889][ T29] audit: type=1400 audit(1730756226.708:1383): avc: denied { read } for pid=6294 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=442 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.694096][ T29] audit: type=1400 audit(1730756226.708:1384): avc: denied { open } for pid=6294 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=442 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.720344][ T29] audit: type=1400 audit(1730756226.758:1385): avc: denied { write } for pid=6291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.743680][ T29] audit: type=1400 audit(1730756226.758:1386): avc: denied { add_name } for pid=6291 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.766416][ T29] audit: type=1400 audit(1730756226.758:1387): avc: denied { create } for pid=6291 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.965621][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration