last executing test programs: 1.686144615s ago: executing program 0 (id=222): r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsync(r0) 1.652885758s ago: executing program 0 (id=223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0xfefd, 0x800, 0x1fff, 0xffff, 0xc, "a8dff370f0fff7fd"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x16) 1.583083703s ago: executing program 0 (id=225): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) 1.086995873s ago: executing program 3 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 1.019143399s ago: executing program 3 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000280)=""/64}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000100)={[{@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x8}}]}, 0x1, 0x4ff, &(0x7f0000001140)="$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") 810.443766ms ago: executing program 3 (id=258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) 758.88317ms ago: executing program 2 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000200)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 678.284786ms ago: executing program 2 (id=261): setresuid(0xee00, 0xee00, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 661.835338ms ago: executing program 0 (id=262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgsnd(0x0, 0x0, 0x401, 0x0) 605.636862ms ago: executing program 3 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) 553.368166ms ago: executing program 0 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 472.565503ms ago: executing program 2 (id=268): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c00000002"], 0x0) 431.212876ms ago: executing program 4 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 383.62446ms ago: executing program 2 (id=271): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 368.663401ms ago: executing program 3 (id=272): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) 351.791182ms ago: executing program 4 (id=273): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) 307.267936ms ago: executing program 2 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 287.323678ms ago: executing program 4 (id=276): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='kfree\x00', r1, 0x0, 0x8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fscontext=']) 259.47931ms ago: executing program 1 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) 248.463281ms ago: executing program 2 (id=278): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) timerfd_create(0x0, 0x800) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 220.338633ms ago: executing program 1 (id=279): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0x8}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20004804) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a300000"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 195.569105ms ago: executing program 4 (id=280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 148.175239ms ago: executing program 0 (id=281): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 124.381531ms ago: executing program 1 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) 106.297812ms ago: executing program 4 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 104.366042ms ago: executing program 3 (id=284): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sync() 75.003715ms ago: executing program 4 (id=285): unshare(0x400) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)=0x1) 65.327856ms ago: executing program 1 (id=286): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x28) 23.568689ms ago: executing program 1 (id=287): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lstat(0x0, 0x0) 0s ago: executing program 1 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. [ 34.044763][ T29] audit: type=1400 audit(1756224868.928:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.045993][ T3292] cgroup: Unknown subsys name 'net' [ 34.069836][ T29] audit: type=1400 audit(1756224868.928:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.098797][ T29] audit: type=1400 audit(1756224868.968:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.201124][ T3292] cgroup: Unknown subsys name 'cpuset' [ 34.208252][ T3292] cgroup: Unknown subsys name 'rlimit' [ 34.308440][ T29] audit: type=1400 audit(1756224869.188:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.334697][ T29] audit: type=1400 audit(1756224869.188:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.356131][ T29] audit: type=1400 audit(1756224869.188:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.378790][ T29] audit: type=1400 audit(1756224869.188:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.388223][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.400999][ T29] audit: type=1400 audit(1756224869.188:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.436728][ T29] audit: type=1400 audit(1756224869.188:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.462673][ T29] audit: type=1400 audit(1756224869.298:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.504157][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.701794][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.773032][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.841426][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.849036][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.857298][ T3303] bridge_slave_0: entered allmulticast mode [ 35.864601][ T3303] bridge_slave_0: entered promiscuous mode [ 35.885003][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.892660][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.901434][ T3303] bridge_slave_1: entered allmulticast mode [ 35.908167][ T3303] bridge_slave_1: entered promiscuous mode [ 35.943825][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.955518][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.973224][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.985047][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.995532][ T3302] bridge_slave_0: entered allmulticast mode [ 36.002971][ T3302] bridge_slave_0: entered promiscuous mode [ 36.021333][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 36.034113][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.041398][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.048744][ T3302] bridge_slave_1: entered allmulticast mode [ 36.055696][ T3302] bridge_slave_1: entered promiscuous mode [ 36.064105][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.100948][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.122913][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.151523][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.169820][ T3303] team0: Port device team_slave_0 added [ 36.177381][ T3303] team0: Port device team_slave_1 added [ 36.223009][ T3302] team0: Port device team_slave_0 added [ 36.237922][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.245342][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.253531][ T3310] bridge_slave_0: entered allmulticast mode [ 36.260705][ T3310] bridge_slave_0: entered promiscuous mode [ 36.268113][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.275571][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.303373][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.320642][ T3302] team0: Port device team_slave_1 added [ 36.332449][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.339619][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.347038][ T3310] bridge_slave_1: entered allmulticast mode [ 36.353464][ T3310] bridge_slave_1: entered promiscuous mode [ 36.360730][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.368311][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.397396][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.408962][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.416496][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.424156][ T3305] bridge_slave_0: entered allmulticast mode [ 36.431234][ T3305] bridge_slave_0: entered promiscuous mode [ 36.461743][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.470466][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.479518][ T3305] bridge_slave_1: entered allmulticast mode [ 36.486556][ T3305] bridge_slave_1: entered promiscuous mode [ 36.501187][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.511057][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.542508][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.555919][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.565258][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.574755][ T3307] bridge_slave_0: entered allmulticast mode [ 36.582910][ T3307] bridge_slave_0: entered promiscuous mode [ 36.590568][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.597830][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.606220][ T3307] bridge_slave_1: entered allmulticast mode [ 36.613081][ T3307] bridge_slave_1: entered promiscuous mode [ 36.620911][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.645032][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.653880][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.682478][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.704408][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.727382][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.755264][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.777391][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.790441][ T3303] hsr_slave_0: entered promiscuous mode [ 36.797657][ T3303] hsr_slave_1: entered promiscuous mode [ 36.811867][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.823817][ T3310] team0: Port device team_slave_0 added [ 36.831526][ T3310] team0: Port device team_slave_1 added [ 36.881708][ T3305] team0: Port device team_slave_0 added [ 36.890848][ T3302] hsr_slave_0: entered promiscuous mode [ 36.897828][ T3302] hsr_slave_1: entered promiscuous mode [ 36.904387][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 36.910828][ T3302] Cannot create hsr debugfs directory [ 36.920695][ T3307] team0: Port device team_slave_0 added [ 36.933406][ T3305] team0: Port device team_slave_1 added [ 36.939755][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.947395][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.978241][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.994331][ T3307] team0: Port device team_slave_1 added [ 37.011437][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.018842][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.047436][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.082159][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.092023][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.131134][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.159435][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.167026][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.197663][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.213936][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.221830][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.249995][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.283127][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.291599][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.320042][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.333483][ T3310] hsr_slave_0: entered promiscuous mode [ 37.340375][ T3310] hsr_slave_1: entered promiscuous mode [ 37.346767][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 37.353104][ T3310] Cannot create hsr debugfs directory [ 37.392576][ T3307] hsr_slave_0: entered promiscuous mode [ 37.399093][ T3307] hsr_slave_1: entered promiscuous mode [ 37.405553][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 37.412213][ T3307] Cannot create hsr debugfs directory [ 37.449059][ T3305] hsr_slave_0: entered promiscuous mode [ 37.455791][ T3305] hsr_slave_1: entered promiscuous mode [ 37.462602][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 37.468809][ T3305] Cannot create hsr debugfs directory [ 37.573930][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.582973][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.594815][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.609193][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.676020][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.686481][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.700312][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.714413][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.749656][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.760312][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.772773][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.785813][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.829382][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.849356][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.861415][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.878007][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.895760][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.917993][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.941308][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.949023][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.967566][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.975335][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.984959][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.999328][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.009659][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.017174][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.028899][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.048222][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.056937][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.077664][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.085076][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.115979][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.134201][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.142102][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.161253][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.168437][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.177681][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.185568][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.207388][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.218843][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.290821][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.328037][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.338239][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.354928][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.379358][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.395102][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.431137][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.438398][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.448192][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.455631][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.474956][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.483565][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.504827][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.512786][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.536441][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.547935][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.575172][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.615924][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.645755][ T3302] veth0_vlan: entered promiscuous mode [ 38.661572][ T3302] veth1_vlan: entered promiscuous mode [ 38.687355][ T3302] veth0_macvtap: entered promiscuous mode [ 38.708992][ T3303] veth0_vlan: entered promiscuous mode [ 38.716957][ T3302] veth1_macvtap: entered promiscuous mode [ 38.724761][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.742873][ T3303] veth1_vlan: entered promiscuous mode [ 38.753270][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.765275][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.780766][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.803747][ T1736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.827172][ T3303] veth0_macvtap: entered promiscuous mode [ 38.838265][ T1736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.855414][ T3303] veth1_macvtap: entered promiscuous mode [ 38.863012][ T1736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.878734][ T3310] veth0_vlan: entered promiscuous mode [ 38.905353][ T3310] veth1_vlan: entered promiscuous mode [ 38.916203][ T1736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.945265][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.963994][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.968358][ T3310] veth0_macvtap: entered promiscuous mode [ 38.989175][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.010049][ T1736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.019263][ T1736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.031244][ T3310] veth1_macvtap: entered promiscuous mode [ 39.039140][ T3305] veth0_vlan: entered promiscuous mode [ 39.053176][ T1736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.077686][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 39.077704][ T29] audit: type=1400 audit(1756224873.958:93): avc: denied { map_create } for pid=3470 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.107834][ T29] audit: type=1400 audit(1756224873.958:94): avc: denied { perfmon } for pid=3470 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.131016][ T29] audit: type=1400 audit(1756224873.958:95): avc: denied { map_read map_write } for pid=3470 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.152396][ T29] audit: type=1400 audit(1756224873.968:96): avc: denied { prog_load } for pid=3470 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.156146][ T3305] veth1_vlan: entered promiscuous mode [ 39.172703][ T29] audit: type=1400 audit(1756224873.968:97): avc: denied { bpf } for pid=3470 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.201438][ T29] audit: type=1400 audit(1756224873.968:98): avc: denied { prog_run } for pid=3470 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.204732][ T1736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.246706][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.263526][ T3307] veth0_vlan: entered promiscuous mode [ 39.278922][ T3305] veth0_macvtap: entered promiscuous mode [ 39.288886][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.301100][ T3305] veth1_macvtap: entered promiscuous mode [ 39.317821][ T3307] veth1_vlan: entered promiscuous mode [ 39.327295][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.363102][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.373104][ T1736] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.399789][ T29] audit: type=1400 audit(1756224874.278:99): avc: denied { open } for pid=3474 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.401393][ T3307] veth0_macvtap: entered promiscuous mode [ 39.419238][ T29] audit: type=1400 audit(1756224874.278:100): avc: denied { kernel } for pid=3474 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.438988][ T3307] veth1_macvtap: entered promiscuous mode [ 39.453035][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.462877][ T1736] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.482355][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.507312][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.507442][ T3476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3476 comm=syz.4.5 [ 39.530569][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.539719][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.551950][ T29] audit: type=1400 audit(1756224874.418:101): avc: denied { create } for pid=3479 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.573090][ T29] audit: type=1400 audit(1756224874.418:102): avc: denied { write } for pid=3479 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.602581][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.611129][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.640065][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649379][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.679805][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.693017][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.717973][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.775183][ T3492] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 39.792438][ T3490] pim6reg: entered allmulticast mode [ 39.824161][ T3490] pim6reg: left allmulticast mode [ 39.984636][ T3512] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.236199][ T3533] netlink: 96 bytes leftover after parsing attributes in process `syz.2.26'. [ 40.498106][ T3566] mmap: syz.2.43 (3566) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.942189][ T3597] ======================================================= [ 40.942189][ T3597] WARNING: The mand mount option has been deprecated and [ 40.942189][ T3597] and is ignored by this kernel. Remove the mand [ 40.942189][ T3597] option from the mount to silence this warning. [ 40.942189][ T3597] ======================================================= [ 41.014174][ T3583] loop4: detected capacity change from 0 to 32768 [ 41.041577][ T3596] loop0: detected capacity change from 0 to 512 [ 41.083320][ T3583] loop4: p1 p3 < > [ 41.119087][ T3608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.59'. [ 41.151813][ T3596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.177674][ T3611] syz.1.60 uses obsolete (PF_INET,SOCK_PACKET) [ 41.204471][ T3596] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.302843][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.373733][ T3603] udevd[3603]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.401749][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.429412][ T3627] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 41.468136][ T3631] loop1: detected capacity change from 0 to 512 [ 41.500528][ T3631] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.524341][ T3637] loop2: detected capacity change from 0 to 512 [ 41.550409][ T3631] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 41.579750][ T3631] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.609052][ T3637] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 41.620210][ T3631] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.648168][ T3637] System zones: 0-2, 18-18, 34-34 [ 41.654790][ T3637] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.655222][ T3631] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.70: Invalid block bitmap block 0 in block_group 0 [ 41.680072][ T3637] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.72: bg 0: block 248: padding at end of block bitmap is not set [ 41.715523][ T3631] EXT4-fs (loop1): Remounting filesystem read-only [ 41.723083][ T3631] EXT4-fs (loop1): 1 orphan inode deleted [ 41.730954][ T3631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.747925][ T3637] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.72: Failed to acquire dquot type 1 [ 41.774074][ T3637] EXT4-fs (loop2): 1 orphan inode deleted [ 41.780973][ T3495] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 1 [ 41.795573][ T3631] syz.1.70 (3631) used greatest stack depth: 9592 bytes left [ 41.820659][ T3637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.875528][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.894275][ T3637] syz.2.72 (3637) used greatest stack depth: 9552 bytes left [ 41.923143][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.964101][ T3411] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 41.972262][ T3411] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 42.005106][ T3411] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 42.023698][ T3681] netlink: 'syz.4.89': attribute type 2 has an invalid length. [ 42.031938][ T3681] netlink: 'syz.4.89': attribute type 1 has an invalid length. [ 42.039868][ T3681] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.89'. [ 42.054143][ T3411] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 42.214240][ T3686] fido_id[3686]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.290205][ T3701] Falling back ldisc for ttyS3. [ 42.362656][ T3714] netlink: '+}[@': attribute type 13 has an invalid length. [ 42.401568][ T3714] gretap0: refused to change device tx_queue_len [ 42.414323][ T3722] loop1: detected capacity change from 0 to 1024 [ 42.434073][ T3722] EXT4-fs: Ignoring removed bh option [ 42.440581][ T3714] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 42.494546][ T3734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 42.504302][ T3722] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 42.510683][ T62] nci: nci_rx_work: unknown MT 0x1 [ 42.542109][ T3722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.551152][ T3734] vlan2: entered allmulticast mode [ 42.589776][ T3734] dummy0: entered allmulticast mode [ 42.599535][ T3734] Zero length message leads to an empty skb [ 42.608407][ T3722] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.712123][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.856419][ T3767] loop2: detected capacity change from 0 to 8192 [ 42.876292][ T3767] syz.2.114: attempt to access beyond end of device [ 42.876292][ T3767] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 42.890445][ T3767] Buffer I/O error on dev loop2, logical block 57847, async page read [ 42.899557][ T3767] syz.2.114: attempt to access beyond end of device [ 42.899557][ T3767] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 42.914161][ T3767] Buffer I/O error on dev loop2, logical block 57847, async page read [ 42.922767][ T3767] syz.2.114: attempt to access beyond end of device [ 42.922767][ T3767] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 42.937532][ T3767] Buffer I/O error on dev loop2, logical block 57847, async page read [ 43.226328][ T3760] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 43.282255][ T3780] netlink: 96 bytes leftover after parsing attributes in process `syz.0.118'. [ 43.655315][ T3817] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 43.655315][ T3817] program syz.1.136 not setting count and/or reply_len properly [ 43.916192][ T3853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.153'. [ 43.927854][ T3853] netlink: 80 bytes leftover after parsing attributes in process `syz.3.153'. [ 43.938624][ T3853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.153'. [ 43.949482][ T3853] netlink: 80 bytes leftover after parsing attributes in process `syz.3.153'. [ 43.964047][ T3853] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 43.972155][ T3847] ALSA: seq fatal error: cannot create timer (-19) [ 44.102457][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 44.102475][ T29] audit: type=1400 audit(1756224878.988:442): avc: denied { relabelfrom } for pid=3861 comm="syz.3.157" name="NETLINK" dev="sockfs" ino=5511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 44.140665][ T29] audit: type=1400 audit(1756224878.988:443): avc: denied { relabelto } for pid=3861 comm="syz.3.157" name="NETLINK" dev="sockfs" ino=5511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 44.197680][ T29] audit: type=1326 audit(1756224879.078:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a21cebe9 code=0x7ffc0000 [ 44.224670][ T29] audit: type=1326 audit(1756224879.078:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a21cebe9 code=0x7ffc0000 [ 44.254610][ T29] audit: type=1326 audit(1756224879.078:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f91a21cebe9 code=0x7ffc0000 [ 44.280690][ T29] audit: type=1326 audit(1756224879.078:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a21cebe9 code=0x7ffc0000 [ 44.306676][ T29] audit: type=1326 audit(1756224879.078:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a21cebe9 code=0x7ffc0000 [ 44.337854][ T29] audit: type=1326 audit(1756224879.218:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a21cebe9 code=0x7ffc0000 [ 44.363453][ T29] audit: type=1326 audit(1756224879.218:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a21cebe9 code=0x7ffc0000 [ 44.389659][ T29] audit: type=1326 audit(1756224879.258:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a21cebe9 code=0x7ffc0000 [ 44.566445][ T3896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.172'. [ 44.708500][ T3916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 44.720318][ T3916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 44.728794][ T3916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 44.736411][ T3916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 44.744062][ T3916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 44.751350][ T3916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 44.758732][ T3916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 44.766574][ T3916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 44.821710][ T3920] SELinux: failed to load policy [ 45.263036][ T3953] bridge0: entered promiscuous mode [ 45.275993][ T3953] macsec1: entered promiscuous mode [ 45.298610][ T3953] bridge0: port 3(macsec1) entered blocking state [ 45.305741][ T3953] bridge0: port 3(macsec1) entered disabled state [ 45.321514][ T3953] macsec1: entered allmulticast mode [ 45.328190][ T3953] bridge0: entered allmulticast mode [ 45.346884][ T3953] macsec1: left allmulticast mode [ 45.353281][ T3953] bridge0: left allmulticast mode [ 45.359793][ T3953] bridge0: left promiscuous mode [ 45.600265][ T3989] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 45.909719][ T4016] netlink: 32 bytes leftover after parsing attributes in process `syz.3.228'. [ 46.032354][ T36] kernel write not supported for file /input/event2 (pid: 36 comm: kworker/1:1) [ 46.332695][ T4051] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 46.415577][ T4062] loop3: detected capacity change from 0 to 512 [ 46.472046][ T4062] EXT4-fs (loop3): too many log groups per flexible block group [ 46.480167][ T4062] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 46.492335][ T4062] EXT4-fs (loop3): mount failed [ 46.569769][ T4074] loop1: detected capacity change from 0 to 4096 [ 46.603732][ T4074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.685839][ T4086] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 46.712056][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.830978][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 46.841336][ T4096] netlink: 'syz.1.260': attribute type 30 has an invalid length. [ 46.894959][ T3495] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.923608][ T3495] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.958247][ T3495] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.988491][ T10] kernel write not supported for file /135/attr/exec (pid: 10 comm: kworker/0:1) [ 47.005285][ T3495] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.116181][ T4119] program syz.1.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.162609][ T4123] SELinux: security_context_str_to_sid () failed with errno=-22 [ 47.198700][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 47.207794][ T4129] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 47.215694][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 47.233086][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 47.242621][ T4129] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 47.251416][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 47.409961][ T4139] ================================================================== [ 47.418376][ T4139] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 47.427498][ T4139] [ 47.430011][ T4139] read-write to 0xffff8881071bd228 of 8 bytes by task 12 on cpu 0: [ 47.438338][ T4139] __xa_clear_mark+0xf5/0x1e0 [ 47.443313][ T4139] __folio_end_writeback+0x177/0x470 [ 47.448809][ T4139] folio_end_writeback+0x71/0x3d0 [ 47.453953][ T4139] ext4_finish_bio+0x459/0x8c0 [ 47.459439][ T4139] ext4_release_io_end+0x9f/0x1f0 [ 47.465020][ T4139] ext4_end_io_end+0x18d/0x240 [ 47.470354][ T4139] ext4_end_io_rsv_work+0x151/0x1e0 [ 47.476529][ T4139] process_scheduled_works+0x4ce/0x9d0 [ 47.482364][ T4139] worker_thread+0x582/0x770 [ 47.487207][ T4139] kthread+0x486/0x510 [ 47.491374][ T4139] ret_from_fork+0xda/0x150 [ 47.495997][ T4139] ret_from_fork_asm+0x1a/0x30 [ 47.501203][ T4139] [ 47.503620][ T4139] read to 0xffff8881071bd228 of 8 bytes by task 4139 on cpu 1: [ 47.511430][ T4139] xas_find_marked+0x218/0x620 [ 47.516653][ T4139] find_get_entry+0x5d/0x380 [ 47.521372][ T4139] filemap_get_folios_tag+0x13b/0x210 [ 47.526754][ T4139] filemap_fdatawait_keep_errors+0x6c/0x180 [ 47.532843][ T4139] sync_inodes_sb+0x39c/0x440 [ 47.537794][ T4139] sync_inodes_one_sb+0x3d/0x50 [ 47.543184][ T4139] __iterate_supers+0x10d/0x220 [ 47.548552][ T4139] iterate_supers+0x1f/0x30 [ 47.553529][ T4139] ksys_sync+0x5c/0xe0 [ 47.557723][ T4139] __ia32_sys_sync+0xe/0x20 [ 47.562341][ T4139] x64_sys_call+0x2d10/0x2ff0 [ 47.567060][ T4139] do_syscall_64+0xd2/0x200 [ 47.571625][ T4139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.578068][ T4139] [ 47.580404][ T4139] value changed: 0xffffffffffff8000 -> 0xfffffffffff80000 [ 47.587708][ T4139] [ 47.590056][ T4139] Reported by Kernel Concurrency Sanitizer on: [ 47.596399][ T4139] CPU: 1 UID: 0 PID: 4139 Comm: syz.3.284 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.606818][ T4139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.616976][ T4139] ==================================================================