last executing test programs: 942.146656ms ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) perf_event_open(&(0x7f0000001600)={0x8, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff0af}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 842.261157ms ago: executing program 1 (id=2): openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) capset(&(0x7f0000000300)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000340)={0x0, 0x0, 0xfffffffc, 0xfffffffa, 0xf, 0xffffffff}) listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x80000, 0xffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000003180), 0x0, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setown(r0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003380)={0x18, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='tlb_flush\x00', r3}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000003040)=ANY=[@ANYRES32, @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095", @ANYRES8=r1, @ANYRES32=r3], 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 777.614348ms ago: executing program 2 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 716.747509ms ago: executing program 0 (id=1): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bind$bt_hci(r0, &(0x7f0000000080)={0x27, 0x2, 0x1}, 0x6) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xffe2, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x30) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r7, 0x0, 0x0, 0x140, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x14, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r11 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") r12 = dup3(r9, r11, 0x0) sendmsg$rds(r12, &(0x7f0000000880)={&(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/58, 0x3a}, {&(0x7f0000005b40)=""/4096, 0x1000}, {&(0x7f0000000700)=""/155, 0x9b}], 0x7, &(0x7f0000000540)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xfffffff9}], 0x18}, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r13}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 674.8945ms ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xee, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x800, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x1, 0x0, 0x5, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x3, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x10, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000200), &(0x7f0000000300), 0x2, 0x3) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4002, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@delalloc}, {@errors_remount}]}, 0x1, 0x7a2, &(0x7f0000000f80)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7abff, 0x0, 0x3) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 668.07848ms ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) close_range(r1, 0xffffffffffffffff, 0x0) 554.674152ms ago: executing program 4 (id=7): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@remote, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x5a}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) 448.274963ms ago: executing program 2 (id=8): mkdir(0x0, 0x0) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0xc04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x20002004}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0xdc, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffffd}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000085}, 0x20000015) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x901, &(0x7f0000000500)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@nobarrier}, {@jqfmt_vfsv1}, {@nojournal_checksum}]}, 0x2, 0x470, &(0x7f0000001f00)="$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") 0s ago: executing program 0 (id=9): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) syz_io_uring_setup(0x5369, &(0x7f0000000240)={0x0, 0xd736, 0x0, 0x3, 0xbd7fffff}, &(0x7f0000000440)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff08, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES32=0x0], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000680)=0x2) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x94802, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x7, 0x4, 0x8, 0x1, 0x10000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0xfffffffffffffd40, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000600000a0002000200000004400400924d22237646c217bbff7f639bb5787dd0d413be921b89254083d59bce70f0e1280961db6afa5bdb7247f1456a31c49505645ff1fbc73f289e158449c1db9e09078cf869d3c5db"], 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000040000800010001000000"], 0x20}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000020a00000100000009500007b00000000850000001300000095"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x92, &(0x7f0000000240)=""/146}, 0x94) r11 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r11, 0xa, 0x13) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 24.023572][ T29] audit: type=1400 audit(1751921578.478:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.024440][ T3295] cgroup: Unknown subsys name 'net' [ 24.046301][ T29] audit: type=1400 audit(1751921578.478:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.073642][ T29] audit: type=1400 audit(1751921578.508:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.230658][ T3295] cgroup: Unknown subsys name 'cpuset' [ 24.236763][ T3295] cgroup: Unknown subsys name 'rlimit' [ 24.386318][ T29] audit: type=1400 audit(1751921578.838:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.411584][ T29] audit: type=1400 audit(1751921578.838:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.432104][ T29] audit: type=1400 audit(1751921578.838:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.438113][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.452525][ T29] audit: type=1400 audit(1751921578.838:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.481538][ T29] audit: type=1400 audit(1751921578.838:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.506313][ T29] audit: type=1400 audit(1751921578.838:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.529613][ T29] audit: type=1400 audit(1751921578.918:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.557035][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.809016][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 25.817567][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 25.851258][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 25.875107][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.945749][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 25.960783][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.967855][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.975043][ T3306] bridge_slave_0: entered allmulticast mode [ 25.981262][ T3306] bridge_slave_0: entered promiscuous mode [ 25.987701][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.994865][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.002015][ T3314] bridge_slave_0: entered allmulticast mode [ 26.008242][ T3314] bridge_slave_0: entered promiscuous mode [ 26.014715][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.021802][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.029037][ T3314] bridge_slave_1: entered allmulticast mode [ 26.035425][ T3314] bridge_slave_1: entered promiscuous mode [ 26.053963][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.061051][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.068341][ T3310] bridge_slave_0: entered allmulticast mode [ 26.074805][ T3310] bridge_slave_0: entered promiscuous mode [ 26.081285][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.088397][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.095640][ T3306] bridge_slave_1: entered allmulticast mode [ 26.102000][ T3306] bridge_slave_1: entered promiscuous mode [ 26.118488][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.125654][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.132984][ T3310] bridge_slave_1: entered allmulticast mode [ 26.139428][ T3310] bridge_slave_1: entered promiscuous mode [ 26.162983][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.170064][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.177283][ T3312] bridge_slave_0: entered allmulticast mode [ 26.183578][ T3312] bridge_slave_0: entered promiscuous mode [ 26.195468][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.205578][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.217486][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.228066][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.237225][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.244296][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.251548][ T3312] bridge_slave_1: entered allmulticast mode [ 26.257770][ T3312] bridge_slave_1: entered promiscuous mode [ 26.292992][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.303244][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.319392][ T3314] team0: Port device team_slave_0 added [ 26.326197][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.335871][ T3314] team0: Port device team_slave_1 added [ 26.346346][ T3306] team0: Port device team_slave_0 added [ 26.361971][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.376485][ T3306] team0: Port device team_slave_1 added [ 26.399586][ T3310] team0: Port device team_slave_0 added [ 26.408671][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.415798][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.423079][ T3305] bridge_slave_0: entered allmulticast mode [ 26.429289][ T3305] bridge_slave_0: entered promiscuous mode [ 26.435887][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.442909][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.468885][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.484102][ T3310] team0: Port device team_slave_1 added [ 26.490288][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.497220][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.523136][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.533893][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.540959][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.548148][ T3305] bridge_slave_1: entered allmulticast mode [ 26.554439][ T3305] bridge_slave_1: entered promiscuous mode [ 26.560829][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.567795][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.593792][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.607430][ T3312] team0: Port device team_slave_0 added [ 26.617693][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.624764][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.650750][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.671524][ T3312] team0: Port device team_slave_1 added [ 26.678380][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.694731][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.701712][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.727694][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.739082][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.746045][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.771988][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.792146][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.812602][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.819548][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.845532][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.874442][ T3314] hsr_slave_0: entered promiscuous mode [ 26.881422][ T3314] hsr_slave_1: entered promiscuous mode [ 26.888353][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.895338][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.921308][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.936841][ T3305] team0: Port device team_slave_0 added [ 26.958457][ T3305] team0: Port device team_slave_1 added [ 26.981066][ T3310] hsr_slave_0: entered promiscuous mode [ 26.986874][ T3310] hsr_slave_1: entered promiscuous mode [ 26.992770][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.000446][ T3310] Cannot create hsr debugfs directory [ 27.007949][ T3306] hsr_slave_0: entered promiscuous mode [ 27.013893][ T3306] hsr_slave_1: entered promiscuous mode [ 27.019543][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.027163][ T3306] Cannot create hsr debugfs directory [ 27.043674][ T3312] hsr_slave_0: entered promiscuous mode [ 27.049680][ T3312] hsr_slave_1: entered promiscuous mode [ 27.055685][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.063342][ T3312] Cannot create hsr debugfs directory [ 27.074112][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.081179][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.107245][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.141643][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.148609][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.174605][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.274812][ T3305] hsr_slave_0: entered promiscuous mode [ 27.280920][ T3305] hsr_slave_1: entered promiscuous mode [ 27.286743][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.294330][ T3305] Cannot create hsr debugfs directory [ 27.376437][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.388727][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.397449][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.407963][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.426704][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.435365][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.443853][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.453385][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.483588][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.498034][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.506468][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.515603][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.548533][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.557507][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.566795][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.575340][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.609104][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.617692][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.626623][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.636810][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.647515][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.666184][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.682476][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.689547][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.700361][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.707407][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.718957][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.755491][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.774566][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.781733][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.791246][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.798330][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.817568][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.845870][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.856876][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.878086][ T2689] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.885190][ T2689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.894103][ T2689] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.901266][ T2689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.916201][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.928430][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.941862][ T2689] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.948893][ T2689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.964206][ T2689] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.971317][ T2689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.985246][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.007310][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.015614][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.040854][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.053662][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.060742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.087884][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.108706][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.115784][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.161569][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.171970][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.189515][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.212240][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.256192][ T3310] veth0_vlan: entered promiscuous mode [ 28.264121][ T3314] veth0_vlan: entered promiscuous mode [ 28.273005][ T3314] veth1_vlan: entered promiscuous mode [ 28.287275][ T3310] veth1_vlan: entered promiscuous mode [ 28.304607][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.328939][ T3314] veth0_macvtap: entered promiscuous mode [ 28.351382][ T3314] veth1_macvtap: entered promiscuous mode [ 28.385714][ T3305] veth0_vlan: entered promiscuous mode [ 28.393203][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.411294][ T3305] veth1_vlan: entered promiscuous mode [ 28.419041][ T3310] veth0_macvtap: entered promiscuous mode [ 28.427172][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.447090][ T3310] veth1_macvtap: entered promiscuous mode [ 28.462281][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.471295][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.480067][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.488764][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.501666][ T3306] veth0_vlan: entered promiscuous mode [ 28.511341][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.523426][ T3312] veth0_vlan: entered promiscuous mode [ 28.529244][ T3305] veth0_macvtap: entered promiscuous mode [ 28.536584][ T3305] veth1_macvtap: entered promiscuous mode [ 28.545515][ T3306] veth1_vlan: entered promiscuous mode [ 28.554753][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.564564][ T3312] veth1_vlan: entered promiscuous mode [ 28.576104][ T3310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.584903][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.593647][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.602351][ T3310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.624419][ T3312] veth0_macvtap: entered promiscuous mode [ 28.637190][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.657368][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.671170][ T3312] veth1_macvtap: entered promiscuous mode [ 28.681158][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.690519][ T3306] veth0_macvtap: entered promiscuous mode [ 28.698168][ T3306] veth1_macvtap: entered promiscuous mode [ 28.705947][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.714692][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.723552][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.732341][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.745482][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.757812][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.773290][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.790861][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.806569][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.815394][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.816448][ T3478] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 28.824110][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.824141][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.854393][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.863146][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.871919][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.880696][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.970147][ T3486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.990784][ T3490] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 29.014150][ T3486] loop0: detected capacity change from 0 to 1024 [ 29.018402][ T3490] loop3: detected capacity change from 0 to 2048 [ 29.022399][ T3486] ======================================================= [ 29.022399][ T3486] WARNING: The mand mount option has been deprecated and [ 29.022399][ T3486] and is ignored by this kernel. Remove the mand [ 29.022399][ T3486] option from the mount to silence this warning. [ 29.022399][ T3486] ======================================================= [ 29.061938][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 29.061952][ T29] audit: type=1400 audit(1751921583.478:106): avc: denied { mounton } for pid=3483 comm="syz.0.1" path="/0/file1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.106241][ T3486] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 29.123127][ T3486] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1: Invalid block bitmap block 0 in block_group 0 [ 29.145317][ T3486] Quota error (device loop0): write_blk: dquota write failed [ 29.152840][ T3486] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 29.163960][ T3490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.177772][ T29] audit: type=1400 audit(1751921583.638:107): avc: denied { write } for pid=3492 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.197669][ T29] audit: type=1400 audit(1751921583.638:108): avc: denied { nlmsg_write } for pid=3492 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.219114][ T29] audit: type=1400 audit(1751921583.658:109): avc: denied { mount } for pid=3487 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.239818][ T3486] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1: Failed to acquire dquot type 0 [ 29.240568][ T29] audit: type=1400 audit(1751921583.658:110): avc: denied { add_name } for pid=3487 comm="syz.3.4" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.273496][ T29] audit: type=1400 audit(1751921583.658:111): avc: denied { create } for pid=3487 comm="syz.3.4" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.283106][ T3486] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 29.295056][ T29] audit: type=1400 audit(1751921583.658:112): avc: denied { read append open } for pid=3487 comm="syz.3.4" path="/0/file1/blkio.bfq.avg_queue_size" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.351682][ C1] hrtimer: interrupt took 40221 ns [ 29.353593][ T3486] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1: Invalid inode bitmap blk 0 in block_group 0 [ 29.371807][ T12] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 29.380861][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 29.410328][ T3486] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 29.419131][ T3486] EXT4-fs (loop0): 1 orphan inode deleted [ 29.429517][ T3486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.469542][ T3486] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.494889][ T3490] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.547982][ T3490] EXT4-fs (loop3): Remounting filesystem read-only [ 29.576844][ T3486] syz.0.1 (3486) used greatest stack depth: 9608 bytes left [ 29.605690][ T3490] syz.3.4 (3490) used greatest stack depth: 9592 bytes left [ 29.611026][ T3502] loop2: detected capacity change from 0 to 512 [ 29.657918][ T3299] ================================================================== [ 29.666100][ T3299] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 29.674493][ T3299] [ 29.676792][ T3299] write to 0xffffea000467a4d8 of 8 bytes by task 3502 on cpu 1: [ 29.684406][ T3299] delete_from_page_cache_batch+0x2f6/0x6f0 [ 29.690276][ T3299] truncate_inode_pages_range+0x1b8/0x690 [ 29.695971][ T3299] truncate_inode_pages+0x24/0x30 [ 29.700970][ T3299] set_blocksize+0x259/0x310 [ 29.705533][ T3299] sb_min_blocksize+0xb8/0x140 [ 29.710270][ T3299] ext4_fill_super+0x390/0x34e0 [ 29.715095][ T3299] get_tree_bdev_flags+0x28e/0x300 [ 29.720187][ T3299] get_tree_bdev+0x1f/0x30 [ 29.724583][ T3299] ext4_get_tree+0x1c/0x30 [ 29.728984][ T3299] vfs_get_tree+0x57/0x1d0 [ 29.733463][ T3299] do_new_mount+0x207/0x680 [ 29.737954][ T3299] path_mount+0x4a4/0xb20 [ 29.742268][ T3299] __se_sys_mount+0x28f/0x2e0 [ 29.746929][ T3299] __x64_sys_mount+0x67/0x80 [ 29.751530][ T3299] x64_sys_call+0xd36/0x2fb0 [ 29.756101][ T3299] do_syscall_64+0xd2/0x200 [ 29.760586][ T3299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.766453][ T3299] [ 29.768754][ T3299] read to 0xffffea000467a4d8 of 8 bytes by task 3299 on cpu 0: [ 29.776268][ T3299] folio_mapping+0xa1/0x120 [ 29.780747][ T3299] lru_add+0x80/0x430 [ 29.784711][ T3299] folio_batch_move_lru+0x174/0x230 [ 29.789914][ T3299] lru_add_drain_cpu+0x77/0x250 [ 29.794743][ T3299] __folio_batch_release+0x44/0xb0 [ 29.799834][ T3299] shmem_undo_range+0x344/0xa80 [ 29.804666][ T3299] shmem_evict_inode+0x134/0x520 [ 29.809582][ T3299] evict+0x2e0/0x550 [ 29.813453][ T3299] iput+0x447/0x5b0 [ 29.817238][ T3299] dentry_unlink_inode+0x24f/0x260 [ 29.822327][ T3299] __dentry_kill+0x18d/0x4b0 [ 29.826895][ T3299] dput+0x5e/0xd0 [ 29.830502][ T3299] do_renameat2+0x479/0xab0 [ 29.834984][ T3299] __x64_sys_rename+0x58/0x70 [ 29.839636][ T3299] x64_sys_call+0x2aee/0x2fb0 [ 29.844301][ T3299] do_syscall_64+0xd2/0x200 [ 29.848800][ T3299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.854696][ T3299] [ 29.857009][ T3299] value changed: 0xffff8881004817d8 -> 0x0000000000000000 [ 29.864098][ T3299] [ 29.866417][ T3299] Reported by Kernel Concurrency Sanitizer on: [ 29.872560][ T3299] CPU: 0 UID: 0 PID: 3299 Comm: udevd Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 29.882785][ T3299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.892821][ T3299] ================================================================== [ 29.965002][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.014357][ T3502] EXT4-fs (loop2): orphan cleanup on readonly fs [ 30.029801][ T3502] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.8: error while reading EA inode 32 err=-116 [ 30.030580][ T3502] EXT4-fs (loop2): Remounting filesystem read-only [ 30.030798][ T3502] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.030833][ T3502] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 30.031116][ T3502] EXT4-fs (loop2): 1 orphan inode deleted [ 30.038085][ T3502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 30.056840][ T3526] loop3: detected capacity change from 0 to 128 [ 30.057486][ T3526] FAT-fs (loop3): bogus logical sector size 0 [ 30.057505][ T3526] FAT-fs (loop3): Can't find a valid FAT filesystem [ 30.069141][ T3526] Invalid ELF header magic: != ELF [ 30.077299][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.113300][ T3526] sd 0:0:1:0: device reset [ 30.151970][ T3522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'.