last executing test programs: 4.092505408s ago: executing program 0 (id=760): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) 3.514542504s ago: executing program 0 (id=771): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001580)='kmem_cache_free\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 3.404583015s ago: executing program 0 (id=774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.773450975s ago: executing program 0 (id=775): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) 1.562146656s ago: executing program 1 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.549861247s ago: executing program 2 (id=787): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.486577473s ago: executing program 4 (id=788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 1.480193104s ago: executing program 3 (id=789): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r4, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffe36, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r4, @ANYBLOB="14000500fe8091"], 0x3c}}, 0x0) 1.184893514s ago: executing program 4 (id=790): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 1.164550195s ago: executing program 3 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2, 0x0, 0x8000000000000}, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) 1.124424309s ago: executing program 3 (id=792): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendfile(r2, r2, 0x0, 0x1000000201005) 1.089825723s ago: executing program 1 (id=793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) close(r1) 1.046130867s ago: executing program 1 (id=794): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x8, 0x2, 'client0\x00', 0x7, "a72e4d63bc515a59", "7f42e1e396067740e0182ac6b9dcfe2f1897f395d794ee4ceb8d7d066a182639", 0x427, 0x80}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000004c0)={0x2, 0x5, 0x1, 'queue1\x00', 0x1}) tkill(r0, 0x7) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c91c, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@noinit_itable}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4e2, &(0x7f0000001a40)="$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") 881.554083ms ago: executing program 4 (id=795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 838.019547ms ago: executing program 4 (id=796): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2, 0x30, r0}, 0x10) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000480)=""/141, 0x8d}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/168, 0xa8}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/182, 0xb6}], 0x7) 791.916642ms ago: executing program 0 (id=797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) 740.043317ms ago: executing program 0 (id=798): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 739.749197ms ago: executing program 4 (id=799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3a31c2, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 651.871336ms ago: executing program 2 (id=800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008db0600b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) 621.736288ms ago: executing program 4 (id=801): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f00000002c0)=0x0, &(0x7f0000000580)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 558.323815ms ago: executing program 2 (id=802): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 466.799174ms ago: executing program 2 (id=803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2, 0x0, 0x8000000000000}, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) 466.557504ms ago: executing program 3 (id=804): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 382.571202ms ago: executing program 1 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad6, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 263.129274ms ago: executing program 2 (id=806): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x80}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 260.948664ms ago: executing program 3 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 100.33225ms ago: executing program 3 (id=808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) 61.931754ms ago: executing program 1 (id=809): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_lru_insertion\x00', r1, 0x0, 0xa3b}, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 26.495987ms ago: executing program 1 (id=810): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 2 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e98caa52dd9239af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "6035ae734de721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x38}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 33.343132][ T29] audit: type=1400 audit(1761158307.176:62): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.366183][ T29] audit: type=1400 audit(1761158307.196:63): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.367191][ T3306] cgroup: Unknown subsys name 'net' [ 33.393977][ T29] audit: type=1400 audit(1761158307.226:64): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.548263][ T3306] cgroup: Unknown subsys name 'cpuset' [ 33.554598][ T3306] cgroup: Unknown subsys name 'rlimit' [ 33.646634][ T29] audit: type=1400 audit(1761158307.476:65): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.669930][ T29] audit: type=1400 audit(1761158307.486:66): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.690389][ T29] audit: type=1400 audit(1761158307.486:67): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.710856][ T29] audit: type=1400 audit(1761158307.486:68): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.712981][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.731331][ T29] audit: type=1400 audit(1761158307.486:69): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.764714][ T29] audit: type=1400 audit(1761158307.486:70): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.787981][ T29] audit: type=1400 audit(1761158307.576:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.798999][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.002353][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.085593][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.133693][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.140950][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.148167][ T3317] bridge_slave_0: entered allmulticast mode [ 35.154482][ T3317] bridge_slave_0: entered promiscuous mode [ 35.163465][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 35.183586][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.190764][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.198053][ T3317] bridge_slave_1: entered allmulticast mode [ 35.204532][ T3317] bridge_slave_1: entered promiscuous mode [ 35.218639][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.269630][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.292252][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.299680][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.306842][ T3315] bridge_slave_0: entered allmulticast mode [ 35.313271][ T3315] bridge_slave_0: entered promiscuous mode [ 35.325232][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.344001][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.352721][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.359811][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.366926][ T3315] bridge_slave_1: entered allmulticast mode [ 35.373382][ T3315] bridge_slave_1: entered promiscuous mode [ 35.407182][ T3317] team0: Port device team_slave_0 added [ 35.433437][ T3317] team0: Port device team_slave_1 added [ 35.447506][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.456701][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.463878][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.471149][ T3324] bridge_slave_0: entered allmulticast mode [ 35.477748][ T3324] bridge_slave_0: entered promiscuous mode [ 35.489407][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.496514][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.503734][ T3321] bridge_slave_0: entered allmulticast mode [ 35.510164][ T3321] bridge_slave_0: entered promiscuous mode [ 35.519945][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.531406][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.538547][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.545945][ T3324] bridge_slave_1: entered allmulticast mode [ 35.552479][ T3324] bridge_slave_1: entered promiscuous mode [ 35.563845][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.571033][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.578222][ T3321] bridge_slave_1: entered allmulticast mode [ 35.584727][ T3321] bridge_slave_1: entered promiscuous mode [ 35.610961][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.618059][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.644003][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.666086][ T3315] team0: Port device team_slave_0 added [ 35.671957][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.679111][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.686389][ T3322] bridge_slave_0: entered allmulticast mode [ 35.692864][ T3322] bridge_slave_0: entered promiscuous mode [ 35.704178][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.711173][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.737203][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.753542][ T3315] team0: Port device team_slave_1 added [ 35.764586][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.771710][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.778924][ T3322] bridge_slave_1: entered allmulticast mode [ 35.785567][ T3322] bridge_slave_1: entered promiscuous mode [ 35.792898][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.810662][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.829974][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.836935][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.862968][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.874751][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.890632][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.900919][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.910363][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.917439][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.943426][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.972799][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.997171][ T3324] team0: Port device team_slave_0 added [ 36.019336][ T3317] hsr_slave_0: entered promiscuous mode [ 36.025468][ T3317] hsr_slave_1: entered promiscuous mode [ 36.032280][ T3324] team0: Port device team_slave_1 added [ 36.038598][ T3321] team0: Port device team_slave_0 added [ 36.051125][ T3315] hsr_slave_0: entered promiscuous mode [ 36.057146][ T3315] hsr_slave_1: entered promiscuous mode [ 36.063169][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 36.068979][ T3315] Cannot create hsr debugfs directory [ 36.091432][ T3321] team0: Port device team_slave_1 added [ 36.097936][ T3322] team0: Port device team_slave_0 added [ 36.118294][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.125283][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.151381][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.162890][ T3322] team0: Port device team_slave_1 added [ 36.181794][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.188815][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.214767][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.230904][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.237904][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.263944][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.277567][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.284529][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.310456][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.335730][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.342831][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.368749][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.382128][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.389188][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.415101][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.480981][ T3321] hsr_slave_0: entered promiscuous mode [ 36.487100][ T3321] hsr_slave_1: entered promiscuous mode [ 36.493115][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.498904][ T3321] Cannot create hsr debugfs directory [ 36.516922][ T3324] hsr_slave_0: entered promiscuous mode [ 36.523057][ T3324] hsr_slave_1: entered promiscuous mode [ 36.528950][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 36.534670][ T3324] Cannot create hsr debugfs directory [ 36.569833][ T3322] hsr_slave_0: entered promiscuous mode [ 36.576159][ T3322] hsr_slave_1: entered promiscuous mode [ 36.582071][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 36.587836][ T3322] Cannot create hsr debugfs directory [ 36.688730][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.707514][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.728292][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.741816][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.763513][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.774076][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.789876][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.807660][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.834766][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.844014][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.856428][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.865354][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.884147][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.911180][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.923376][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.935300][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.943766][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.952714][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.974372][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.981520][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.000205][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.007313][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.030551][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.041117][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.051058][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.063882][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.107530][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.145629][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.157281][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.168592][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.185191][ T1854] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.192454][ T1854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.201324][ T1854] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.208405][ T1854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.225375][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.239761][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.246831][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.263130][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.272991][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.282185][ T1854] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.289261][ T1854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.309079][ T1854] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.316167][ T1854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.334910][ T1854] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.342025][ T1854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.357290][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.367826][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.384160][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.429740][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.458536][ T1721] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.465660][ T1721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.482881][ T1721] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.489996][ T1721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.532142][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.541769][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.573102][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.599074][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.620399][ T3315] veth0_vlan: entered promiscuous mode [ 37.632830][ T3315] veth1_vlan: entered promiscuous mode [ 37.663942][ T3315] veth0_macvtap: entered promiscuous mode [ 37.679028][ T3315] veth1_macvtap: entered promiscuous mode [ 37.705963][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.722964][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.749851][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.769509][ T1907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.802597][ T3317] veth0_vlan: entered promiscuous mode [ 37.810643][ T3317] veth1_vlan: entered promiscuous mode [ 37.825204][ T1907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.845673][ T3322] veth0_vlan: entered promiscuous mode [ 37.852021][ T1907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.862150][ T3321] veth0_vlan: entered promiscuous mode [ 37.877950][ T1907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.891367][ T3321] veth1_vlan: entered promiscuous mode [ 37.901884][ T3317] veth0_macvtap: entered promiscuous mode [ 37.917313][ T3321] veth0_macvtap: entered promiscuous mode [ 37.931830][ T3322] veth1_vlan: entered promiscuous mode [ 37.948057][ T3317] veth1_macvtap: entered promiscuous mode [ 37.958711][ T3321] veth1_macvtap: entered promiscuous mode [ 37.959270][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.968266][ T3324] veth0_vlan: entered promiscuous mode [ 37.988536][ T3324] veth1_vlan: entered promiscuous mode [ 38.012650][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.031012][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.039617][ T3322] veth0_macvtap: entered promiscuous mode [ 38.049989][ T3322] veth1_macvtap: entered promiscuous mode [ 38.061572][ T3324] veth0_macvtap: entered promiscuous mode [ 38.080169][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.090386][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.099714][ T3324] veth1_macvtap: entered promiscuous mode [ 38.112856][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.127862][ T386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.146002][ T386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.155971][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.164668][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.180753][ T386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.196773][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.204860][ T1626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.228024][ T1626] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.245043][ T1626] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.254107][ T1626] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.270615][ T1626] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.307719][ T1626] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.328521][ T1626] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.362187][ T1626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.392116][ T1626] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.415956][ T1626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.429503][ T1626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.442106][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 38.442123][ T29] audit: type=1400 audit(1761158312.276:99): avc: denied { create } for pid=3504 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.444292][ T1626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.478563][ T3502] sd 0:0:1:0: device reset [ 38.485709][ T29] audit: type=1400 audit(1761158312.276:100): avc: denied { setopt } for pid=3504 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.505146][ T29] audit: type=1400 audit(1761158312.276:101): avc: denied { ioctl } for pid=3504 comm="syz.2.8" path="socket:[3835]" dev="sockfs" ino=3835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.508918][ T1626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.529588][ T29] audit: type=1400 audit(1761158312.276:102): avc: denied { write } for pid=3504 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.557566][ T29] audit: type=1400 audit(1761158312.316:103): avc: denied { read } for pid=3500 comm="syz.0.1" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.580734][ T29] audit: type=1400 audit(1761158312.316:104): avc: denied { open } for pid=3500 comm="syz.0.1" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.604443][ T29] audit: type=1400 audit(1761158312.316:105): avc: denied { ioctl } for pid=3500 comm="syz.0.1" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.682562][ T29] audit: type=1326 audit(1761158312.516:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3514 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cfeaefc9 code=0x7ffc0000 [ 38.706034][ T29] audit: type=1326 audit(1761158312.516:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3514 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cfeaefc9 code=0x7ffc0000 [ 38.753948][ T29] audit: type=1326 audit(1761158312.536:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3514 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3cfeaefc9 code=0x7ffc0000 [ 38.831193][ T3524] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13'. [ 38.840153][ T3524] 0X: renamed from caif0 [ 38.848532][ T3524] 0X: entered allmulticast mode [ 38.853800][ T3524] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 38.887346][ T3523] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 38.980068][ T3528] Zero length message leads to an empty skb [ 39.276210][ T3541] pim6reg1: entered promiscuous mode [ 39.281606][ T3541] pim6reg1: entered allmulticast mode [ 39.328739][ T3549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.417098][ T3555] netlink: 'syz.1.28': attribute type 1 has an invalid length. [ 39.439534][ T3555] team_slave_0: entered promiscuous mode [ 39.445296][ T3555] team_slave_1: entered promiscuous mode [ 39.451620][ T3555] macvtap1: entered promiscuous mode [ 39.456943][ T3555] team0: entered promiscuous mode [ 39.462233][ T3555] macvtap1: entered allmulticast mode [ 39.467643][ T3555] team0: entered allmulticast mode [ 39.472852][ T3555] team_slave_0: entered allmulticast mode [ 39.478608][ T3555] team_slave_1: entered allmulticast mode [ 39.485903][ T3555] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 39.537302][ T3557] : renamed from lo (while UP) [ 39.611655][ T3564] tmpfs: Bad value for 'mpol' [ 39.687058][ T3567] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 39.776459][ T3573] loop1: detected capacity change from 0 to 512 [ 39.794856][ T3573] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.869325][ T3573] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 39.918584][ T3573] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.928981][ T3573] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.35: corrupted inode contents [ 39.957485][ T3573] EXT4-fs (loop1): Remounting filesystem read-only [ 39.964299][ T3573] EXT4-fs (loop1): 1 truncate cleaned up [ 39.970889][ T58] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.981519][ T58] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.011001][ T58] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.025618][ T3573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.170714][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.520215][ T3606] loop3: detected capacity change from 0 to 128 [ 40.595326][ T3607] syz.3.43: attempt to access beyond end of device [ 40.595326][ T3607] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 40.619022][ T3607] syz.3.43: attempt to access beyond end of device [ 40.619022][ T3607] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 40.638245][ T3607] syz.3.43: attempt to access beyond end of device [ 40.638245][ T3607] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 40.654869][ T3549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.667475][ T3607] syz.3.43: attempt to access beyond end of device [ 40.667475][ T3607] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 40.687605][ T3607] syz.3.43: attempt to access beyond end of device [ 40.687605][ T3607] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 40.738209][ T3607] syz.3.43: attempt to access beyond end of device [ 40.738209][ T3607] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 40.752487][ T3607] syz.3.43: attempt to access beyond end of device [ 40.752487][ T3607] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 40.766656][ T3607] syz.3.43: attempt to access beyond end of device [ 40.766656][ T3607] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 40.781041][ T3607] syz.3.43: attempt to access beyond end of device [ 40.781041][ T3607] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 40.794874][ T3607] syz.3.43: attempt to access beyond end of device [ 40.794874][ T3607] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 40.910197][ T3611] pimreg: entered allmulticast mode [ 40.917271][ T3611] pimreg: left allmulticast mode [ 41.085663][ T3617] bond1: invalid ARP target 0.0.0.0 specified for addition [ 41.093038][ T3617] bond1: option arp_ip_target: invalid value (0) [ 41.105884][ T3617] bond1 (unregistering): Released all slaves [ 41.143581][ T3622] loop2: detected capacity change from 0 to 512 [ 41.153145][ T3622] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 41.169745][ T3622] EXT4-fs (loop2): invalid journal inode [ 41.175540][ T3622] EXT4-fs (loop2): can't get journal size [ 41.184020][ T3622] EXT4-fs (loop2): 1 truncate cleaned up [ 41.198750][ T3622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.231661][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.368465][ T3634] netlink: 'syz.1.52': attribute type 12 has an invalid length. [ 41.710785][ T3639] loop3: detected capacity change from 0 to 512 [ 41.729175][ T3639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.742343][ T3639] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.791211][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.819581][ T3643] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.886439][ T3643] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.931425][ T3643] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.991489][ T3643] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.056681][ T1907] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.073475][ T1626] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.109181][ T1626] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.128863][ T1626] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.144811][ T3549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.255261][ T3549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.329993][ T1907] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.340352][ T3670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3670 comm=syz.3.66 [ 42.354215][ T1907] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.373180][ T1907] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.391381][ T1907] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.487587][ T3689] wireguard0: entered promiscuous mode [ 42.493230][ T3689] wireguard0: entered allmulticast mode [ 42.710127][ T3712] netlink: '+}[@': attribute type 30 has an invalid length. [ 42.817094][ T3718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.86'. [ 42.859049][ T3722] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.878194][ T3712] +}[@ (3712) used greatest stack depth: 10304 bytes left [ 42.952560][ T3731] bridge0: port 3(batadv1) entered blocking state [ 42.959222][ T3731] bridge0: port 3(batadv1) entered disabled state [ 42.965857][ T3731] batadv1: entered allmulticast mode [ 43.015777][ T3731] batadv1: entered promiscuous mode [ 43.038582][ T3739] syz.1.91 uses obsolete (PF_INET,SOCK_PACKET) [ 43.178603][ T3756] loop1: detected capacity change from 0 to 512 [ 43.219885][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.242770][ T3756] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.334260][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.447464][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 43.456808][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 43.474013][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 43.474031][ T29] audit: type=1326 audit(1761158317.296:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3703 comm="syz.2.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93bd62efc9 code=0x7fc00000 [ 43.535901][ T29] audit: type=1400 audit(1761158317.366:334): avc: denied { tracepoint } for pid=3793 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.686987][ T29] audit: type=1400 audit(1761158317.516:335): avc: denied { connect } for pid=3795 comm="syz.1.101" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.412119][ C0] hrtimer: interrupt took 28065 ns [ 44.571177][ T29] audit: type=1400 audit(1761158318.386:336): avc: denied { getopt } for pid=3850 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.292042][ T29] audit: type=1400 audit(1761158319.126:337): avc: denied { execute } for pid=3913 comm="syz.2.109" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 45.639829][ T3925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.799199][ T29] audit: type=1326 audit(1761158319.636:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cfeaefc9 code=0x7ffc0000 [ 45.822591][ T29] audit: type=1326 audit(1761158319.636:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cfeaefc9 code=0x7ffc0000 [ 45.871536][ T29] audit: type=1326 audit(1761158319.636:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3cfeaefc9 code=0x7ffc0000 [ 45.894935][ T29] audit: type=1326 audit(1761158319.636:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cfeaefc9 code=0x7ffc0000 [ 45.918233][ T29] audit: type=1326 audit(1761158319.636:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa3cfeaefc9 code=0x7ffc0000 [ 45.996244][ T3925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.129863][ T3925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.201174][ T3925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.267125][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.291062][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.318250][ T58] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.335738][ T58] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.414697][ T3934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'. [ 46.517053][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 46.746374][ T3943] cgroup: fork rejected by pids controller in /syz3 [ 46.806180][ T4009] loop2: detected capacity change from 0 to 7 [ 46.824309][ T3302] loop2: [ 46.834306][ T4009] loop2: [ 48.049844][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 48.233233][ T5210] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 48.370027][ T5217] SELinux: ebitmap: truncated map [ 48.379126][ T5217] SELinux: failed to load policy [ 48.475944][ T5223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5223 comm=syz.4.144 [ 48.513222][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 48.579253][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 48.579271][ T29] audit: type=1400 audit(1761158322.416:539): avc: denied { write } for pid=5229 comm="syz.4.147" path="socket:[8706]" dev="sockfs" ino=8706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.619986][ T5232] syz.1.148 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.650951][ T29] audit: type=1400 audit(1761158322.446:540): avc: denied { read } for pid=5229 comm="syz.4.147" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.714076][ T29] audit: type=1326 audit(1761158322.536:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 48.738112][ T29] audit: type=1326 audit(1761158322.536:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 48.741417][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 48.761462][ T29] audit: type=1326 audit(1761158322.536:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 48.793554][ T29] audit: type=1326 audit(1761158322.536:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 48.816896][ T29] audit: type=1326 audit(1761158322.536:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 48.840152][ T29] audit: type=1326 audit(1761158322.546:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 48.863448][ T29] audit: type=1326 audit(1761158322.546:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 48.886747][ T29] audit: type=1326 audit(1761158322.546:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 49.104108][ T5259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 49.177357][ T5264] veth0_to_team: entered promiscuous mode [ 49.238491][ T5272] loop3: detected capacity change from 0 to 1024 [ 49.247783][ T5272] EXT4-fs: Ignoring removed orlov option [ 49.261540][ T5272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.318584][ T5278] pimreg: entered allmulticast mode [ 49.325961][ T5278] pimreg: left allmulticast mode [ 49.449443][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.526906][ T5293] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.668289][ T5305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 49.677641][ T5305] IPVS: Error connecting to the multicast addr [ 49.720020][ T5311] IPv6: Can't replace route, no match found [ 49.869295][ T5323] tipc: Started in network mode [ 49.874296][ T5323] tipc: Node identity 1e82e1b7f8a7, cluster identity 4711 [ 49.881563][ T5323] tipc: Enabled bearer , priority 0 [ 49.892046][ T5326] loop3: detected capacity change from 0 to 2048 [ 49.921319][ T5329] syzkaller0: MTU too low for tipc bearer [ 49.927172][ T5329] tipc: Disabling bearer [ 49.928465][ T5326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.945259][ T5326] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.020963][ T5335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.192'. [ 50.040627][ T3405] IPVS: starting estimator thread 0... [ 50.058164][ T5338] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.189: bg 0: block 345: padding at end of block bitmap is not set [ 50.075776][ T5338] EXT4-fs (loop3): Remounting filesystem read-only [ 50.083366][ T1854] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 50.127737][ T5339] IPVS: using max 2400 ests per chain, 120000 per kthread [ 50.264453][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.379954][ T5359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'. [ 50.389369][ T5359] IPVS: Error connecting to the multicast addr [ 50.708809][ T5346] Set syz1 is full, maxelem 65536 reached [ 51.500782][ T5471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.226'. [ 51.562276][ T5483] loop0: detected capacity change from 0 to 1024 [ 51.572913][ T5483] EXT4-fs: Ignoring removed orlov option [ 51.586248][ T3006] udevd[3006]: worker [3302] terminated by signal 33 (Unknown signal 33) [ 51.589611][ T5483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.612225][ T3006] udevd[3006]: worker [3302] failed while handling '/devices/virtual/block/loop0' [ 51.701813][ T5502] netlink: 64 bytes leftover after parsing attributes in process `syz.2.220'. [ 51.788232][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.185734][ T5553] loop1: detected capacity change from 0 to 128 [ 52.208259][ T5553] ======================================================= [ 52.208259][ T5553] WARNING: The mand mount option has been deprecated and [ 52.208259][ T5553] and is ignored by this kernel. Remove the mand [ 52.208259][ T5553] option from the mount to silence this warning. [ 52.208259][ T5553] ======================================================= [ 52.252542][ T5553] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.269650][ T5553] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.326074][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.448017][ T5570] process 'syz.1.237' launched '/dev/fd/3' with NULL argv: empty string added [ 52.587229][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.241'. [ 52.644318][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 52.728948][ T5588] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 52.758318][ T5588] team0: Port device dummy0 added [ 52.784367][ T5597] veth0: entered promiscuous mode [ 52.784666][ T5599] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 52.804108][ T5597] veth0: left promiscuous mode [ 52.857938][ T5599] team0: Port device dummy0 removed [ 52.866516][ T5599] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 53.064981][ T5609] bridge0: entered promiscuous mode [ 53.077804][ T5609] macsec1: entered promiscuous mode [ 53.084191][ T5609] bridge0: port 4(macsec1) entered blocking state [ 53.090708][ T5609] bridge0: port 4(macsec1) entered disabled state [ 53.110875][ T5609] macsec1: entered allmulticast mode [ 53.116262][ T5609] bridge0: entered allmulticast mode [ 53.225469][ T5609] macsec1: left allmulticast mode [ 53.230930][ T5609] bridge0: left allmulticast mode [ 53.247157][ T5609] bridge0: left promiscuous mode [ 53.472576][ T5633] loop4: detected capacity change from 0 to 1024 [ 53.606055][ T5595] Set syz1 is full, maxelem 65536 reached [ 53.612764][ T5633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.658767][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 53.658784][ T29] audit: type=1400 audit(1761158327.496:1153): avc: denied { mounton } for pid=5632 comm="syz.4.256" path="/60/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.708233][ T5633] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.256: Allocating blocks 385-513 which overlap fs metadata [ 53.737422][ T29] audit: type=1400 audit(1761158327.526:1154): avc: denied { append } for pid=5632 comm="syz.4.256" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.761168][ T29] audit: type=1326 audit(1761158327.536:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 53.784523][ T29] audit: type=1326 audit(1761158327.536:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 53.807923][ T29] audit: type=1326 audit(1761158327.536:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 53.831374][ T29] audit: type=1326 audit(1761158327.536:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 53.831648][ T5647] EXT4-fs (loop4): pa ffff8881072870e0: logic 16, phys. 129, len 24 [ 53.854735][ T29] audit: type=1326 audit(1761158327.536:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 53.854771][ T29] audit: type=1326 audit(1761158327.536:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 53.862776][ T5647] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 53.882454][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 53.886008][ T29] audit: type=1326 audit(1761158327.536:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 53.937526][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 53.951404][ T29] audit: type=1326 audit(1761158327.536:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5643 comm="syz.3.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 54.008003][ T5613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'. [ 54.032050][ T3321] Trying to write to read-only block-device loop4 [ 54.045063][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.131633][ T5657] netlink: 'syz.1.260': attribute type 12 has an invalid length. [ 54.260713][ T5678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 54.316340][ T5683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.267'. [ 54.325484][ T5683] netlink: 108 bytes leftover after parsing attributes in process `syz.4.267'. [ 54.489362][ T5709] ALSA: seq fatal error: cannot create timer (-16) [ 54.545885][ T5716] netlink: '+}[@': attribute type 10 has an invalid length. [ 54.602130][ T5716] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.780460][ T5749] loop0: detected capacity change from 0 to 512 [ 54.788587][ T5749] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.809250][ T5749] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.845822][ T5749] EXT4-fs (loop0): 1 truncate cleaned up [ 54.866939][ T5749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.935506][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.780860][ T5848] loop4: detected capacity change from 0 to 512 [ 56.332845][ T5877] veth0: entered promiscuous mode [ 56.499856][ T5890] tipc: Enabling of bearer rejected, failed to enable media [ 56.615337][ T5904] team0: Port device vlan2 added [ 56.654913][ T5909] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 56.751643][ T5916] syzkaller0: entered allmulticast mode [ 56.765804][ T5920] __nla_validate_parse: 4 callbacks suppressed [ 56.765820][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 57.236248][ T5969] loop3: detected capacity change from 0 to 512 [ 57.270280][ T5969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.543454][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.778724][ T5964] netlink: 64 bytes leftover after parsing attributes in process `syz.2.323'. [ 57.960615][ T6014] sch_fq: defrate 4294967295 ignored. [ 59.076713][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 59.076729][ T29] audit: type=1400 audit(1761158332.906:1281): avc: denied { read } for pid=6132 comm="syz.1.356" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.106952][ T29] audit: type=1400 audit(1761158332.906:1282): avc: denied { open } for pid=6132 comm="syz.1.356" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.130864][ T29] audit: type=1400 audit(1761158332.906:1283): avc: denied { ioctl } for pid=6132 comm="syz.1.356" path="/dev/usbmon2" dev="devtmpfs" ino=148 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.240570][ T29] audit: type=1326 audit(1761158333.056:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 59.264058][ T29] audit: type=1326 audit(1761158333.056:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 59.287444][ T29] audit: type=1326 audit(1761158333.066:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 59.311167][ T29] audit: type=1326 audit(1761158333.066:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 59.335625][ T29] audit: type=1326 audit(1761158333.066:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 59.359319][ T29] audit: type=1326 audit(1761158333.066:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 59.382665][ T29] audit: type=1326 audit(1761158333.066:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 60.495692][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 60.590693][ T6253] loop0: detected capacity change from 0 to 1024 [ 60.609024][ T6253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.709543][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.758478][ T6281] syz.0.387: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 60.773081][ T6281] CPU: 1 UID: 0 PID: 6281 Comm: syz.0.387 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.773224][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.773290][ T6281] Call Trace: [ 60.773297][ T6281] [ 60.773305][ T6281] __dump_stack+0x1d/0x30 [ 60.773336][ T6281] dump_stack_lvl+0xe8/0x140 [ 60.773360][ T6281] dump_stack+0x15/0x1b [ 60.773429][ T6281] warn_alloc+0x12b/0x1a0 [ 60.773472][ T6281] ? __rcu_read_unlock+0x4f/0x70 [ 60.773502][ T6281] __vmalloc_node_range_noprof+0x9d/0xed0 [ 60.773620][ T6281] ? __futex_wait+0x1fa/0x260 [ 60.773648][ T6281] ? __pfx_futex_wake_mark+0x10/0x10 [ 60.773688][ T6281] ? __rcu_read_unlock+0x4f/0x70 [ 60.773815][ T6281] ? avc_has_perm_noaudit+0x1b1/0x200 [ 60.773853][ T6281] ? should_fail_ex+0x30/0x280 [ 60.773941][ T6281] ? xskq_create+0x36/0xe0 [ 60.773976][ T6281] vmalloc_user_noprof+0x7d/0xb0 [ 60.774011][ T6281] ? xskq_create+0x80/0xe0 [ 60.774073][ T6281] xskq_create+0x80/0xe0 [ 60.774097][ T6281] xsk_init_queue+0x95/0xf0 [ 60.774191][ T6281] xsk_setsockopt+0x477/0x640 [ 60.774210][ T6281] ? __pfx_xsk_setsockopt+0x10/0x10 [ 60.774245][ T6281] __sys_setsockopt+0x184/0x200 [ 60.774283][ T6281] __x64_sys_setsockopt+0x64/0x80 [ 60.774363][ T6281] x64_sys_call+0x20ec/0x3000 [ 60.774430][ T6281] do_syscall_64+0xd2/0x200 [ 60.774447][ T6281] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.774507][ T6281] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.774542][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.774625][ T6281] RIP: 0033:0x7fa3cfeaefc9 [ 60.774643][ T6281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.774661][ T6281] RSP: 002b:00007fa3ce90f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.774685][ T6281] RAX: ffffffffffffffda RBX: 00007fa3d0105fa0 RCX: 00007fa3cfeaefc9 [ 60.774700][ T6281] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 60.774714][ T6281] RBP: 00007fa3cff31f91 R08: 0000000000000004 R09: 0000000000000000 [ 60.774730][ T6281] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 60.774745][ T6281] R13: 00007fa3d0106038 R14: 00007fa3d0105fa0 R15: 00007ffef383db88 [ 60.774769][ T6281] [ 60.774794][ T6281] Mem-Info: [ 61.003370][ T6281] active_anon:4146 inactive_anon:1 isolated_anon:0 [ 61.003370][ T6281] active_file:12326 inactive_file:13006 isolated_file:0 [ 61.003370][ T6281] unevictable:16902 dirty:373 writeback:0 [ 61.003370][ T6281] slab_reclaimable:3229 slab_unreclaimable:16109 [ 61.003370][ T6281] mapped:28871 shmem:187 pagetables:1379 [ 61.003370][ T6281] sec_pagetables:0 bounce:0 [ 61.003370][ T6281] kernel_misc_reclaimable:0 [ 61.003370][ T6281] free:1852975 free_pcp:17256 free_cma:0 [ 61.048998][ T6281] Node 0 active_anon:16584kB inactive_anon:4kB active_file:49304kB inactive_file:52024kB unevictable:67608kB isolated(anon):0kB isolated(file):0kB mapped:115484kB dirty:1492kB writeback:0kB shmem:748kB kernel_stack:3392kB pagetables:5748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 61.076704][ T6281] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.106347][ T6281] lowmem_reserve[]: 0 2881 7859 7859 [ 61.111776][ T6281] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 61.143114][ T6281] lowmem_reserve[]: 0 0 4978 4978 [ 61.148287][ T6281] Node 0 Normal free:4449680kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16700kB inactive_anon:4kB active_file:49304kB inactive_file:52024kB unevictable:67608kB writepending:1492kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:64220kB local_pcp:18804kB free_cma:0kB [ 61.181796][ T6281] lowmem_reserve[]: 0 0 0 0 [ 61.186414][ T6281] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 61.199183][ T6281] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 61.215356][ T6281] Node 0 Normal: 888*4kB (UM) 274*8kB (UME) 142*16kB (UME) 144*32kB (UME) 82*64kB (UME) 49*128kB (UME) 10*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 4*2048kB (ME) 1076*4096kB (M) = 4449360kB [ 61.234021][ T6281] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 61.243507][ T6281] 42416 total pagecache pages [ 61.248251][ T6281] 1 pages in swap cache [ 61.252425][ T6281] Free swap = 124992kB [ 61.256590][ T6281] Total swap = 124996kB [ 61.260814][ T6281] 2097051 pages RAM [ 61.264707][ T6281] 0 pages HighMem/MovableOnly [ 61.269460][ T6281] 81083 pages reserved [ 61.292119][ T6343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.388'. [ 61.559462][ T6365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.689788][ T6365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.759172][ T6365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.829653][ T6365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.939058][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.961228][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.079005][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.087302][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.665019][ T6417] mmap: syz.4.420 (6417) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.872231][ T6428] netlink: 96 bytes leftover after parsing attributes in process `syz.2.425'. [ 63.270000][ T6436] tipc: Started in network mode [ 63.274923][ T6436] tipc: Node identity ac14140f, cluster identity 4711 [ 63.281923][ T6436] tipc: New replicast peer: 255.255.255.255 [ 63.288068][ T6436] tipc: Enabled bearer , priority 10 [ 63.349150][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.402573][ T6450] loop1: detected capacity change from 0 to 1024 [ 63.411124][ T6450] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.422327][ T6450] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.435018][ T6450] JBD2: no valid journal superblock found [ 63.440866][ T6450] EXT4-fs (loop1): Could not load journal inode [ 64.079921][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 64.079939][ T29] audit: type=1326 audit(1761158337.916:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e37885e67 code=0x7ffc0000 [ 64.111018][ T29] audit: type=1326 audit(1761158337.946:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e3782b099 code=0x7ffc0000 [ 64.134451][ T29] audit: type=1326 audit(1761158337.946:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e37885e67 code=0x7ffc0000 [ 64.157865][ T29] audit: type=1326 audit(1761158337.946:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e3782b099 code=0x7ffc0000 [ 64.181394][ T29] audit: type=1326 audit(1761158337.946:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e37885e67 code=0x7ffc0000 [ 64.204927][ T29] audit: type=1326 audit(1761158337.946:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e3782b099 code=0x7ffc0000 [ 64.228225][ T29] audit: type=1326 audit(1761158337.946:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 64.252541][ T29] audit: type=1326 audit(1761158338.016:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e37885e67 code=0x7ffc0000 [ 64.275848][ T29] audit: type=1326 audit(1761158338.016:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e3782b099 code=0x7ffc0000 [ 64.299173][ T29] audit: type=1326 audit(1761158338.016:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6445 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 64.408608][ T1036] tipc: Node number set to 2886997007 [ 64.523717][ T6485] vlan2: entered allmulticast mode [ 64.537215][ T6485] dummy0: entered allmulticast mode [ 64.581740][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 65.435550][ T3578] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.580210][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 65.594625][ T6526] team1: entered promiscuous mode [ 65.599713][ T6526] team1: entered allmulticast mode [ 65.605029][ T6526] 8021q: adding VLAN 0 to HW filter on device team1 [ 66.017556][ T6508] syz.2.460 (6508) used greatest stack depth: 7496 bytes left [ 67.000918][ T6605] netlink: 'syz.0.496': attribute type 4 has an invalid length. [ 67.049063][ T6605] netlink: 'syz.0.496': attribute type 4 has an invalid length. [ 67.331753][ T6633] usb usb1: usbfs: process 6633 (syz.3.508) did not claim interface 0 before use [ 67.366758][ T6635] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 67.381519][ T6635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.406473][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 67.419959][ T6635] bond1 (unregistering): Released all slaves [ 67.583746][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 67.593044][ T6655] bridge_slave_1: left allmulticast mode [ 67.598824][ T6655] bridge_slave_1: left promiscuous mode [ 67.604609][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.615539][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 67.627315][ T6655] bridge_slave_0: left allmulticast mode [ 67.633190][ T6655] bridge_slave_0: left promiscuous mode [ 67.639036][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.920724][ T6687] pimreg: entered allmulticast mode [ 67.942331][ T6687] pimreg: left allmulticast mode [ 67.973490][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 68.253999][ T6711] tipc: Enabling of bearer rejected, failed to enable media [ 68.829195][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 68.865828][ T6740] team2: entered promiscuous mode [ 68.871156][ T6740] team2: entered allmulticast mode [ 68.877491][ T6740] 8021q: adding VLAN 0 to HW filter on device team2 [ 69.000093][ T6757] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.109211][ T6757] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.165183][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 69.165197][ T29] audit: type=1326 audit(1761158342.996:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 69.194848][ T29] audit: type=1326 audit(1761158342.996:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 69.219315][ T29] audit: type=1326 audit(1761158343.006:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 69.220377][ T6757] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.244841][ T29] audit: type=1326 audit(1761158343.006:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 69.244900][ T29] audit: type=1326 audit(1761158343.006:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 69.244930][ T29] audit: type=1326 audit(1761158343.006:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 69.244961][ T29] audit: type=1326 audit(1761158343.006:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 69.348618][ T29] audit: type=1326 audit(1761158343.006:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 69.372147][ T29] audit: type=1326 audit(1761158343.006:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 69.395477][ T29] audit: type=1326 audit(1761158343.056:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6764 comm="syz.3.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 69.479267][ T6757] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.500072][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 69.565857][ T386] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.581205][ T386] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.595351][ T386] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.608833][ T386] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.760885][ T6801] netlink: 'syz.0.574': attribute type 7 has an invalid length. [ 69.768651][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 70.318200][ T6848] loop3: detected capacity change from 0 to 512 [ 70.341545][ T6848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.354764][ T6848] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.368179][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.598'. [ 70.388717][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.408145][ T6860] pimreg: entered allmulticast mode [ 70.415091][ T6860] pimreg: left allmulticast mode [ 70.853992][ T3482] IPVS: starting estimator thread 0... [ 70.856259][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 70.879812][ T6867] loop4: detected capacity change from 0 to 512 [ 70.886418][ T6867] EXT4-fs: Ignoring removed i_version option [ 70.892498][ T6867] EXT4-fs: Ignoring removed bh option [ 70.947537][ T6864] IPVS: using max 1968 ests per chain, 98400 per kthread [ 70.980133][ T6869] program syz.1.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.012564][ T6871] loop4: detected capacity change from 0 to 1024 [ 71.041614][ T6876] vlan2: entered allmulticast mode [ 71.146813][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.154066][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.161647][ T6880] bridge0: entered allmulticast mode [ 71.176971][ T6880] batadv1: left allmulticast mode [ 71.182262][ T6880] batadv1: left promiscuous mode [ 71.187408][ T6880] bridge0: port 3(batadv1) entered disabled state [ 71.194921][ T6880] bridge_slave_1: left allmulticast mode [ 71.200647][ T6880] bridge_slave_1: left promiscuous mode [ 71.206310][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.214298][ T6880] bridge_slave_0: left promiscuous mode [ 71.220129][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.366518][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 71.376921][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 71.385772][ T6888] netem: unknown loss type 0 [ 71.390417][ T6888] netem: change failed [ 71.464433][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 71.950604][ T6918] loop1: detected capacity change from 0 to 512 [ 72.056281][ T6920] bond0: (slave dummy0): Releasing backup interface [ 72.142608][ T6920] bridge_slave_0: left allmulticast mode [ 72.148876][ T6920] bridge_slave_0: left promiscuous mode [ 72.156615][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.183642][ T6920] bridge_slave_1: left allmulticast mode [ 72.190481][ T6920] bridge_slave_1: left promiscuous mode [ 72.199222][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.226946][ T6920] bond0: (slave bond_slave_0): Releasing backup interface [ 72.311618][ T6920] bond0: (slave bond_slave_1): Releasing backup interface [ 72.352671][ T6920] team_slave_0: left allmulticast mode [ 72.397838][ T6920] team_slave_0: left promiscuous mode [ 72.428356][ T6920] team0: Port device team_slave_0 removed [ 72.451554][ T6920] team_slave_1: left allmulticast mode [ 72.462835][ T6920] team_slave_1: left promiscuous mode [ 72.504194][ T6920] team0: Port device team_slave_1 removed [ 72.611703][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.623460][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.967466][ T3482] IPVS: starting estimator thread 0... [ 73.023877][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.037802][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.050280][ T6920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.067523][ T6944] IPVS: using max 2064 ests per chain, 103200 per kthread [ 73.146386][ T6956] netlink: 96 bytes leftover after parsing attributes in process `syz.3.635'. [ 73.249065][ T6966] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 73.263958][ T6967] tipc: Started in network mode [ 73.268985][ T6967] tipc: Node identity e6bf9d87a136, cluster identity 4711 [ 73.276357][ T6967] tipc: Enabled bearer , priority 0 [ 73.287367][ T6966] team0: Port device dummy0 added [ 73.296664][ T6966] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 73.305772][ T6967] tipc: Disabling bearer [ 73.320551][ T6966] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 73.345161][ T6966] team0: Failed to send options change via netlink (err -105) [ 73.363348][ T6966] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 73.397263][ T6966] team0: Port device dummy0 removed [ 73.409954][ T6966] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 73.925895][ T7003] tipc: Enabled bearer , priority 0 [ 73.953003][ T7003] tipc: Disabling bearer [ 74.211573][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 74.620844][ T7016] netlink: 96 bytes leftover after parsing attributes in process `syz.3.657'. [ 74.753201][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 74.753217][ T29] audit: type=1326 audit(1761158348.586:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 74.796809][ T29] audit: type=1326 audit(1761158348.626:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 74.820402][ T29] audit: type=1326 audit(1761158348.626:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 74.843868][ T29] audit: type=1326 audit(1761158348.626:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7020 comm="syz.3.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 74.897440][ T29] audit: type=1400 audit(1761158348.726:2456): avc: denied { execute } for pid=7021 comm="syz.1.660" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 74.948623][ T7027] loop0: detected capacity change from 0 to 512 [ 75.055982][ T7045] loop0: detected capacity change from 0 to 164 [ 75.066443][ T7047] tipc: Enabling of bearer rejected, failed to enable media [ 75.088761][ T29] audit: type=1400 audit(1761158348.926:2457): avc: denied { mount } for pid=7044 comm="syz.0.670" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 75.122085][ T7053] netlink: 96 bytes leftover after parsing attributes in process `syz.1.672'. [ 75.169462][ T29] audit: type=1400 audit(1761158349.006:2458): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 75.214903][ T7061] loop1: detected capacity change from 0 to 512 [ 75.231849][ T29] audit: type=1326 audit(1761158349.066:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 75.261419][ T29] audit: type=1326 audit(1761158349.066:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 75.284877][ T29] audit: type=1326 audit(1761158349.096:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e3788efc9 code=0x7ffc0000 [ 75.333779][ T7070] capability: warning: `syz.0.679' uses deprecated v2 capabilities in a way that may be insecure [ 75.345830][ T7061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.439235][ T7061] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.525611][ T7082] loop0: detected capacity change from 0 to 128 [ 75.605498][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 75.614974][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.646812][ T7098] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.687'. [ 75.655978][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.687'. [ 75.672884][ T7102] loop4: detected capacity change from 0 to 512 [ 75.903778][ T7125] loop1: detected capacity change from 0 to 164 [ 76.328433][ T7151] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.389872][ T7151] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.456992][ T7157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.479831][ T7151] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.559053][ T7151] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.646843][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.678589][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.687029][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.708911][ T1907] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.717611][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.468225][ T7189] erspan1: entered allmulticast mode [ 77.573670][ T7195] loop3: detected capacity change from 0 to 512 [ 77.604340][ T7195] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.606505][ T7201] loop0: detected capacity change from 0 to 512 [ 77.621309][ T7201] ext4: Unknown parameter 'obj_user' [ 77.649662][ T7195] EXT4-fs (loop3): 1 truncate cleaned up [ 77.667859][ T7195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.695020][ T7205] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.755219][ T7205] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.768035][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.831968][ T7205] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.845601][ T7219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.739'. [ 77.869939][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'. [ 77.885802][ T7205] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.975562][ T58] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.997492][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.007546][ T58] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029258][ T58] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.158817][ T7230] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 78.196407][ T7230] bond0: (slave dummy0): Releasing backup interface [ 78.208906][ T7230] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 78.217808][ T7230] team0: Failed to send options change via netlink (err -105) [ 78.225300][ T7230] team0: Port device dummy0 added [ 78.231744][ T7235] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 78.241131][ T7235] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 78.270276][ T7235] team0: Failed to send options change via netlink (err -105) [ 78.301943][ T7235] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 78.318930][ T7235] team0: Port device dummy0 removed [ 78.385564][ T7235] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.552115][ T7239] geneve2: entered promiscuous mode [ 78.557462][ T7239] geneve2: entered allmulticast mode [ 78.755902][ T7250] bond0: (slave dummy0): Releasing backup interface [ 78.778400][ T6442] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.780675][ T3578] Bluetooth: hci0: command 0x1003 tx timeout [ 78.840953][ T7257] loop4: detected capacity change from 0 to 512 [ 78.850967][ T7250] bridge_slave_0: left allmulticast mode [ 78.857826][ T7250] bridge_slave_0: left promiscuous mode [ 78.865007][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.905601][ T7250] bridge_slave_1: left allmulticast mode [ 78.912592][ T7250] bridge_slave_1: left promiscuous mode [ 78.920629][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.989577][ T7250] bond0: (slave bond_slave_0): Releasing backup interface [ 79.068042][ T7250] bond0: (slave bond_slave_1): Releasing backup interface [ 79.170412][ T7282] loop1: detected capacity change from 0 to 4096 [ 79.183811][ T7282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.199386][ T7250] team0: Port device team_slave_0 removed [ 79.221256][ T7282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.251392][ T7250] team0: Port device team_slave_1 removed [ 79.263829][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.268348][ T7282] SELinux: Context @|0AWiSѱ4$ EtڍygBEEA2zLp{c|^;tݾHRן臟g is not valid (left unmapped). [ 79.273498][ T7250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.309920][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.318269][ T7250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.344767][ T7250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.409836][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 79.595276][ T7301] netlink: 'syz.0.771': attribute type 7 has an invalid length. [ 79.603241][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 79.611252][ T7303] netlink: 'syz.4.772': attribute type 10 has an invalid length. [ 79.631291][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 79.651274][ T7303] team0: Port device dummy0 added [ 79.668882][ T7303] netlink: 'syz.4.772': attribute type 10 has an invalid length. [ 79.688259][ T7303] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 79.698144][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.711298][ T7303] team0: Failed to send options change via netlink (err -105) [ 79.725699][ T7303] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 79.735367][ T7303] team0: Port device dummy0 removed [ 79.743627][ T7303] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.754037][ T7307] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.809631][ T7307] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.859655][ T7307] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.919450][ T7307] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.243423][ T58] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.254130][ T58] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.265493][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.276667][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.534393][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 81.534407][ T29] audit: type=1326 audit(1761158355.366:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 81.604128][ T29] audit: type=1326 audit(1761158355.406:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 81.627543][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'. [ 81.627555][ T29] audit: type=1326 audit(1761158355.406:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 81.659959][ T29] audit: type=1326 audit(1761158355.406:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 81.683436][ T29] audit: type=1326 audit(1761158355.406:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 81.683887][ T7342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.706794][ T29] audit: type=1326 audit(1761158355.426:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 81.714011][ T7342] IPv6: NLM_F_CREATE should be set when creating new route [ 81.744603][ T29] audit: type=1326 audit(1761158355.426:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 81.768101][ T29] audit: type=1326 audit(1761158355.426:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 81.791355][ T29] audit: type=1326 audit(1761158355.426:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 81.814766][ T29] audit: type=1326 audit(1761158355.426:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7334 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fb7ab31efc9 code=0x7ffc0000 [ 81.864446][ T7342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.871840][ T7342] IPv6: NLM_F_CREATE should be set when creating new route [ 81.890584][ T7347] netlink: 'syz.4.790': attribute type 10 has an invalid length. [ 81.914136][ T7349] netlink: 'syz.3.791': attribute type 7 has an invalid length. [ 81.934287][ T7347] bond0: (slave dummy0): Releasing backup interface [ 81.956925][ T7347] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 81.981052][ T7357] netlink: 'syz.4.790': attribute type 10 has an invalid length. [ 82.001383][ T7347] team0: Failed to send options change via netlink (err -105) [ 82.009027][ T7347] team0: Port device dummy0 added [ 82.047991][ T7357] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.070826][ T7357] team0: Failed to send options change via netlink (err -105) [ 82.087133][ T7357] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 82.106350][ T7357] team0: Port device dummy0 removed [ 82.121814][ T7357] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.264210][ T7371] loop1: detected capacity change from 0 to 512 [ 82.278304][ T7371] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.284820][ T7371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.334239][ T7371] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.343087][ T7371] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.383393][ T7371] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.794: Allocating blocks 41-42 which overlap fs metadata [ 82.401171][ T7371] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.794: Allocating blocks 41-42 which overlap fs metadata [ 82.415426][ T7371] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.794: Failed to acquire dquot type 1 [ 82.427782][ T7371] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 82.451963][ T7371] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.794: corrupted inode contents [ 82.464534][ T7371] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #12: comm syz.1.794: mark_inode_dirty error [ 82.487753][ T7371] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.794: corrupted inode contents [ 82.517243][ T7371] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.794: mark_inode_dirty error [ 82.528905][ T7371] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.794: corrupted inode contents [ 82.541226][ T7371] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 82.550473][ T7371] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #12: comm syz.1.794: corrupted inode contents [ 82.562701][ T7371] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.794: mark_inode_dirty error [ 82.574374][ T7371] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 82.583875][ T7371] EXT4-fs (loop1): 1 truncate cleaned up [ 82.590213][ T7371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.615577][ T7406] batman_adv: batadv0: Adding interface: dummy0 [ 82.622011][ T7406] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.648011][ T7406] batman_adv: batadv0: Interface activated: dummy0 [ 82.658777][ T7406] batadv0: mtu less than device minimum [ 82.664966][ T7406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.665577][ T7408] netlink: 'syz.2.803': attribute type 7 has an invalid length. [ 82.675961][ T7406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.693873][ T7406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.704591][ T7406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.715432][ T7406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.726172][ T7406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.736916][ T7406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.747668][ T7406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.764803][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.832571][ T7415] hsr0: entered promiscuous mode [ 82.837823][ T7413] syzkaller0: entered allmulticast mode [ 82.838172][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 82.843948][ T7413] syzkaller0: entered promiscuous mode [ 82.858617][ T7415] hsr_slave_0: left promiscuous mode [ 82.864464][ T7415] hsr_slave_1: left promiscuous mode [ 82.899692][ T7415] hsr0 (unregistering): left promiscuous mode [ 82.911561][ T7413] syzkaller0 (unregistering): left allmulticast mode [ 82.918390][ T7413] syzkaller0 (unregistering): left promiscuous mode [ 82.984145][ T7417] loop3: detected capacity change from 0 to 1024 [ 82.991067][ T7417] EXT4-fs: Ignoring removed orlov option [ 83.007752][ T7417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.085522][ T7425] ================================================================== [ 83.093700][ T7425] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 83.101981][ T7425] [ 83.104327][ T7425] write to 0xffff8881073d8ea8 of 4 bytes by task 7417 on cpu 0: [ 83.111974][ T7425] writeback_single_inode+0x150/0x3f0 [ 83.117371][ T7425] sync_inode_metadata+0x5b/0x90 [ 83.122333][ T7425] generic_buffers_fsync_noflush+0xd9/0x120 [ 83.128247][ T7425] ext4_sync_file+0x1ab/0x690 [ 83.133192][ T7425] vfs_fsync_range+0x10d/0x130 [ 83.137968][ T7425] ext4_buffered_write_iter+0x34f/0x3c0 [ 83.143524][ T7425] ext4_file_write_iter+0x387/0xf60 [ 83.148733][ T7425] iter_file_splice_write+0x666/0xa60 [ 83.154114][ T7425] direct_splice_actor+0x156/0x2a0 [ 83.159239][ T7425] splice_direct_to_actor+0x312/0x680 [ 83.164653][ T7425] do_splice_direct+0xda/0x150 [ 83.169432][ T7425] do_sendfile+0x380/0x650 [ 83.173869][ T7425] __x64_sys_sendfile64+0x105/0x150 [ 83.179090][ T7425] x64_sys_call+0x2bb4/0x3000 [ 83.183784][ T7425] do_syscall_64+0xd2/0x200 [ 83.188292][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.194199][ T7425] [ 83.196530][ T7425] read to 0xffff8881073d8ea8 of 4 bytes by task 7425 on cpu 1: [ 83.204076][ T7425] __mark_inode_dirty+0x191/0x750 [ 83.209141][ T7425] ext4_write_inline_data_end+0x3e5/0x5f0 [ 83.214878][ T7425] ext4_write_end+0x3d7/0x730 [ 83.219568][ T7425] generic_perform_write+0x312/0x490 [ 83.224859][ T7425] ext4_buffered_write_iter+0x1ee/0x3c0 [ 83.230414][ T7425] ext4_file_write_iter+0x387/0xf60 [ 83.235616][ T7425] iter_file_splice_write+0x666/0xa60 [ 83.240995][ T7425] direct_splice_actor+0x156/0x2a0 [ 83.246115][ T7425] splice_direct_to_actor+0x312/0x680 [ 83.251496][ T7425] do_splice_direct+0xda/0x150 [ 83.256269][ T7425] do_sendfile+0x380/0x650 [ 83.260705][ T7425] __x64_sys_sendfile64+0x105/0x150 [ 83.265920][ T7425] x64_sys_call+0x2bb4/0x3000 [ 83.270604][ T7425] do_syscall_64+0xd2/0x200 [ 83.275112][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.281014][ T7425] [ 83.283335][ T7425] value changed: 0x00000070 -> 0x00000002 [ 83.289047][ T7425] [ 83.291365][ T7425] Reported by Kernel Concurrency Sanitizer on: [ 83.297518][ T7425] CPU: 1 UID: 0 PID: 7425 Comm: syz.3.808 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.307169][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.317228][ T7425] ================================================================== [ 83.542825][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.