last executing test programs: 26.593700299s ago: executing program 1 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 26.456890622s ago: executing program 1 (id=166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) 26.424531482s ago: executing program 1 (id=169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x75}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x0, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x80000001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x34}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x9}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 26.333997563s ago: executing program 1 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') 26.317606433s ago: executing program 1 (id=176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 26.072899787s ago: executing program 1 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x9, 0x7}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x21, 0x4}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x800) 26.046336388s ago: executing program 32 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x9, 0x7}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x21, 0x4}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x800) 17.350634295s ago: executing program 3 (id=425): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) 17.189714307s ago: executing program 3 (id=431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="26e36059b453afd3", 0x8}], 0x1}}], 0x2, 0x0) 17.101950439s ago: executing program 3 (id=434): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 17.071256529s ago: executing program 3 (id=435): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000040)={[{@mb_optimize_scan}, {@nobarrier}]}, 0x1, 0x59d, &(0x7f0000001100)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 16.631324166s ago: executing program 3 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 16.066523994s ago: executing program 3 (id=468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 16.031786285s ago: executing program 33 (id=468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 1.595784747s ago: executing program 6 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 1.520489558s ago: executing program 6 (id=860): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.232033422s ago: executing program 6 (id=870): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 1.155574483s ago: executing program 6 (id=873): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1.076102065s ago: executing program 0 (id=875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x44000000010080}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) 853.542888ms ago: executing program 6 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 803.722659ms ago: executing program 0 (id=882): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 782.747629ms ago: executing program 6 (id=883): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 706.79474ms ago: executing program 0 (id=887): socket(0x25, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 658.321911ms ago: executing program 4 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x51ce8, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000380)={0x800080, 0x80, 0x7fffffff, 0x10000008, 0xfffffffc, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) 620.242371ms ago: executing program 0 (id=891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 516.366452ms ago: executing program 2 (id=892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='limits\x00') r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000380)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) close_range(r1, 0xffffffffffffffff, 0x0) 516.180403ms ago: executing program 4 (id=893): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000380)) r3 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) close(r2) 478.104243ms ago: executing program 4 (id=895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1d, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 473.065673ms ago: executing program 0 (id=896): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 439.738204ms ago: executing program 2 (id=897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) 406.548394ms ago: executing program 0 (id=898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@block_validity}, {@resuid}, {@noinit_itable}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) 376.283235ms ago: executing program 2 (id=899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 320.358486ms ago: executing program 4 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 297.948296ms ago: executing program 2 (id=902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) 268.686196ms ago: executing program 5 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 261.384896ms ago: executing program 4 (id=904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0xe1b2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x70}}, 0x2000c040) 234.485597ms ago: executing program 2 (id=905): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 187.916858ms ago: executing program 2 (id=906): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) delete_module(&(0x7f0000000000)='-\\},\x00', 0x200) dup2(r1, r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 187.286818ms ago: executing program 5 (id=916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) 143.524138ms ago: executing program 4 (id=907): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) dup2(r0, r1) poll(&(0x7f0000000000), 0x35, 0x0) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)='\x00', 0xfffffeb0}], 0x1) read(r0, &(0x7f0000000180)=""/216, 0xd8) 125.057179ms ago: executing program 5 (id=908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000900)={{0x80}, 'port0\x00', 0xf3, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xf8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x3, 0xe1d6, 0x0, 0xff}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 79.584669ms ago: executing program 5 (id=909): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x7, 0x0, 0xfffffffffffffffd, 0xd, 0x80000000006, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x32}, 0xa, @in6=@local, 0x1502, 0x4, 0x3, 0x0, 0xc36, 0xfffffffb}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 34.38212ms ago: executing program 5 (id=910): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000200)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000240)={@fda={0x66646185, 0x5, 0x0, 0x18}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x14}, @fda={0x66646185, 0xa, 0x0, 0x18}}, 0x0}}], 0x0, 0x1000000, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r1}, 0x38) 0s ago: executing program 5 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 28.665301][ T29] audit: type=1400 audit(1751564626.336:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.666492][ T3291] cgroup: Unknown subsys name 'net' [ 28.688120][ T29] audit: type=1400 audit(1751564626.336:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.715597][ T29] audit: type=1400 audit(1751564626.376:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.931866][ T3291] cgroup: Unknown subsys name 'cpuset' [ 28.938223][ T3291] cgroup: Unknown subsys name 'rlimit' [ 29.050234][ T29] audit: type=1400 audit(1751564626.716:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.075524][ T29] audit: type=1400 audit(1751564626.726:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.096145][ T29] audit: type=1400 audit(1751564626.726:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.116543][ T29] audit: type=1400 audit(1751564626.726:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.125649][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.137005][ T29] audit: type=1400 audit(1751564626.726:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.170434][ T29] audit: type=1400 audit(1751564626.726:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.193893][ T29] audit: type=1400 audit(1751564626.826:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.228651][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.333384][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 30.413287][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.420395][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.427811][ T3303] bridge_slave_0: entered allmulticast mode [ 30.434243][ T3303] bridge_slave_0: entered promiscuous mode [ 30.457488][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.464652][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.471967][ T3303] bridge_slave_1: entered allmulticast mode [ 30.478338][ T3303] bridge_slave_1: entered promiscuous mode [ 30.488421][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.530616][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 30.541405][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.554445][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.583110][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 30.591756][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.627191][ T3303] team0: Port device team_slave_0 added [ 30.633961][ T3303] team0: Port device team_slave_1 added [ 30.680926][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.687926][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.713990][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.733794][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.740938][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.748100][ T3305] bridge_slave_0: entered allmulticast mode [ 30.754722][ T3305] bridge_slave_0: entered promiscuous mode [ 30.761661][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.768622][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.794621][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.814372][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.821497][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.828802][ T3305] bridge_slave_1: entered allmulticast mode [ 30.835314][ T3305] bridge_slave_1: entered promiscuous mode [ 30.861331][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.868409][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.875633][ T3302] bridge_slave_0: entered allmulticast mode [ 30.882147][ T3302] bridge_slave_0: entered promiscuous mode [ 30.888876][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.896152][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.903475][ T3302] bridge_slave_1: entered allmulticast mode [ 30.909867][ T3302] bridge_slave_1: entered promiscuous mode [ 30.937296][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.944531][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.951884][ T3309] bridge_slave_0: entered allmulticast mode [ 30.958257][ T3309] bridge_slave_0: entered promiscuous mode [ 30.965658][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.972962][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.980176][ T3309] bridge_slave_1: entered allmulticast mode [ 30.986625][ T3309] bridge_slave_1: entered promiscuous mode [ 30.994012][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.004483][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.028896][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.040325][ T3303] hsr_slave_0: entered promiscuous mode [ 31.046460][ T3303] hsr_slave_1: entered promiscuous mode [ 31.063692][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.074091][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.083374][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.090449][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.098169][ T3312] bridge_slave_0: entered allmulticast mode [ 31.104704][ T3312] bridge_slave_0: entered promiscuous mode [ 31.126949][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.141121][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.148181][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.155418][ T3312] bridge_slave_1: entered allmulticast mode [ 31.162054][ T3312] bridge_slave_1: entered promiscuous mode [ 31.174196][ T3302] team0: Port device team_slave_0 added [ 31.199471][ T3302] team0: Port device team_slave_1 added [ 31.211303][ T3305] team0: Port device team_slave_0 added [ 31.217622][ T3309] team0: Port device team_slave_0 added [ 31.224670][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.235254][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.254409][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.261464][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.287432][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.298901][ T3305] team0: Port device team_slave_1 added [ 31.305368][ T3309] team0: Port device team_slave_1 added [ 31.327112][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.334162][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.360195][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.381738][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.388725][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.415042][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.428944][ T3312] team0: Port device team_slave_0 added [ 31.435723][ T3312] team0: Port device team_slave_1 added [ 31.455832][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.462875][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.488883][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.510167][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.517183][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.543760][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.563773][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.570888][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.597119][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.618032][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.625063][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.651107][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.662852][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.669830][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.695790][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.721520][ T3302] hsr_slave_0: entered promiscuous mode [ 31.727671][ T3302] hsr_slave_1: entered promiscuous mode [ 31.733496][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.741099][ T3302] Cannot create hsr debugfs directory [ 31.757702][ T3309] hsr_slave_0: entered promiscuous mode [ 31.763730][ T3309] hsr_slave_1: entered promiscuous mode [ 31.769655][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.777249][ T3309] Cannot create hsr debugfs directory [ 31.801620][ T3305] hsr_slave_0: entered promiscuous mode [ 31.807711][ T3305] hsr_slave_1: entered promiscuous mode [ 31.814849][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.822436][ T3305] Cannot create hsr debugfs directory [ 31.868344][ T3312] hsr_slave_0: entered promiscuous mode [ 31.874724][ T3312] hsr_slave_1: entered promiscuous mode [ 31.880651][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.888380][ T3312] Cannot create hsr debugfs directory [ 32.011645][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.029439][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.046799][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.070169][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.093444][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.103916][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.124154][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.132988][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.153547][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.162948][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.175736][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.184558][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.217523][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.235773][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.245484][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.255912][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.281100][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.290385][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.304368][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.316264][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.326025][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.356769][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.376663][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.383830][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.394286][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.401400][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.422070][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.453505][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.481072][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.496339][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.505267][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.514224][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.521315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.536250][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.543402][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.552726][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.559834][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.575905][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.583065][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.597473][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.617116][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.646120][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.655626][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.662764][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.678034][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.688221][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.695357][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.720281][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.733769][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.740943][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.754956][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.762119][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.876120][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.899697][ T3303] veth0_vlan: entered promiscuous mode [ 32.941178][ T3303] veth1_vlan: entered promiscuous mode [ 32.960449][ T3302] veth0_vlan: entered promiscuous mode [ 32.977909][ T3302] veth1_vlan: entered promiscuous mode [ 32.991309][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.005116][ T3303] veth0_macvtap: entered promiscuous mode [ 33.013172][ T3303] veth1_macvtap: entered promiscuous mode [ 33.039504][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.062659][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.084119][ T3302] veth0_macvtap: entered promiscuous mode [ 33.094072][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.105728][ T3302] veth1_macvtap: entered promiscuous mode [ 33.115717][ T3303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.124590][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.133472][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.142353][ T3303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.177052][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.201963][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.218219][ T3305] veth0_vlan: entered promiscuous mode [ 33.230099][ T3309] veth0_vlan: entered promiscuous mode [ 33.237016][ T3302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.245838][ T3302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.254675][ T3302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.263510][ T3302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.275489][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.276082][ T3305] veth1_vlan: entered promiscuous mode [ 33.299208][ T3309] veth1_vlan: entered promiscuous mode [ 33.343127][ T3305] veth0_macvtap: entered promiscuous mode [ 33.369782][ T3305] veth1_macvtap: entered promiscuous mode [ 33.386323][ T3309] veth0_macvtap: entered promiscuous mode [ 33.401701][ T3312] veth0_vlan: entered promiscuous mode [ 33.409786][ T3312] veth1_vlan: entered promiscuous mode [ 33.420049][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.434495][ T3309] veth1_macvtap: entered promiscuous mode [ 33.448116][ T3312] veth0_macvtap: entered promiscuous mode [ 33.464795][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.475986][ T3312] veth1_macvtap: entered promiscuous mode [ 33.484922][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.498614][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.512905][ T3482] loop1: detected capacity change from 0 to 128 [ 33.522552][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.531436][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.540223][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.549340][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.559477][ T3482] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.565701][ T3309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.572781][ T3482] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.580357][ T3309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.599488][ T3309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.608292][ T3309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.643575][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.667956][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.703264][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 33.703282][ T29] audit: type=1400 audit(1751564631.376:105): avc: denied { ioctl } for pid=3481 comm="syz.1.8" path="/2/file1/file1" dev="loop1" ino=12 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.735002][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.743998][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.752827][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.761665][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.813377][ T29] audit: type=1400 audit(1751564631.486:106): avc: denied { getopt } for pid=3488 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.835883][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.881847][ T29] audit: type=1400 audit(1751564631.546:107): avc: denied { read write } for pid=3492 comm="syz.0.1" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.905218][ T29] audit: type=1400 audit(1751564631.546:108): avc: denied { open } for pid=3492 comm="syz.0.1" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.964211][ T3505] loop4: detected capacity change from 0 to 512 [ 34.054823][ T29] audit: type=1400 audit(1751564631.596:109): avc: denied { allowed } for pid=3498 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.074109][ T29] audit: type=1400 audit(1751564631.606:110): avc: denied { create } for pid=3498 comm="syz.1.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.095177][ T29] audit: type=1400 audit(1751564631.606:111): avc: denied { map } for pid=3498 comm="syz.1.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.112219][ T3505] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.119061][ T29] audit: type=1400 audit(1751564631.606:112): avc: denied { read write } for pid=3498 comm="syz.1.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.220931][ T3505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.235080][ T3505] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.301334][ T3518] process 'syz.3.15' launched '/dev/fd/3' with NULL argv: empty string added [ 34.304320][ T29] audit: type=1400 audit(1751564631.976:113): avc: denied { execute } for pid=3516 comm="syz.3.15" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.364777][ T3505] syz.4.5 (3505) used greatest stack depth: 10560 bytes left [ 34.388914][ T29] audit: type=1400 audit(1751564632.006:114): avc: denied { append } for pid=3497 comm="syz.4.5" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.431947][ T3526] bond1: entered promiscuous mode [ 34.437105][ T3526] bond1: entered allmulticast mode [ 34.444673][ T3526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.457986][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.472413][ T3526] bond1 (unregistering): Released all slaves [ 34.479545][ T3533] serio: Serial port ptm0 [ 34.524311][ T3536] loop3: detected capacity change from 0 to 1024 [ 34.560016][ T3536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.576402][ T3538] loop4: detected capacity change from 0 to 4096 [ 34.598862][ T3538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.665498][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.718423][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.852101][ T3567] loop9: detected capacity change from 0 to 7 [ 34.860392][ T3567] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.869260][ T3567] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.877265][ T3567] loop9: unable to read partition table [ 34.883708][ T3567] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 34.883708][ T3567] ) failed (rc=-5) [ 34.898006][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.910048][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.918327][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.938531][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.946765][ T3296] Buffer I/O error on dev loop9, logical block 0, async page read [ 34.970753][ T3575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40'. [ 34.996151][ T3573] syz.4.39 uses obsolete (PF_INET,SOCK_PACKET) [ 35.130549][ T3590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 35.206383][ T3596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 35.239667][ T3598] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.296397][ T3399] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.311109][ T3399] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.338311][ T3607] SELinux: failed to load policy [ 35.376177][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 35.409144][ T3608] fido_id[3608]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.469730][ T3620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'. [ 35.479440][ T3622] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 35.609161][ T3638] loop4: detected capacity change from 0 to 512 [ 35.618037][ T3638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.627341][ T3638] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.640490][ T3638] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.677350][ T3638] EXT4-fs (loop4): 1 truncate cleaned up [ 35.689845][ T3638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.728045][ T3638] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 35.779337][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.817093][ T3647] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=3647 comm=syz.4.70 [ 35.896464][ C0] hrtimer: interrupt took 70321 ns [ 35.960358][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 35.969293][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 35.993306][ T3645] syzkaller1: entered promiscuous mode [ 35.998921][ T3645] syzkaller1: entered allmulticast mode [ 36.220382][ T3665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 36.229333][ T3665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 36.754302][ T3700] loop2: detected capacity change from 0 to 512 [ 36.775989][ T3700] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.795594][ T3700] EXT4-fs (loop2): 1 orphan inode deleted [ 36.801462][ T3700] EXT4-fs (loop2): 1 truncate cleaned up [ 36.807681][ T3700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.840516][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.850907][ T3712] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96 [ 36.918865][ T3718] loop1: detected capacity change from 0 to 512 [ 36.934353][ T3720] netlink: 'syz.4.100': attribute type 3 has an invalid length. [ 36.954672][ T3718] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.99: Failed to acquire dquot type 1 [ 36.975821][ T3718] EXT4-fs (loop1): 1 truncate cleaned up [ 36.986953][ T3718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.001883][ T3718] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.020797][ T3718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.183061][ T3744] mmap: syz.2.111 (3744) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.265873][ T3746] loop4: detected capacity change from 0 to 8192 [ 37.285282][ T3753] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.113'. [ 37.357235][ T3758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3758 comm=syz.2.115 [ 37.507442][ T3763] netlink: 'syz.3.118': attribute type 10 has an invalid length. [ 37.539463][ T3764] loop2: detected capacity change from 0 to 1024 [ 37.546519][ T3763] dummy0: entered promiscuous mode [ 37.564241][ T3763] bridge0: port 3(dummy0) entered blocking state [ 37.570732][ T3763] bridge0: port 3(dummy0) entered disabled state [ 37.583010][ T3764] ======================================================= [ 37.583010][ T3764] WARNING: The mand mount option has been deprecated and [ 37.583010][ T3764] and is ignored by this kernel. Remove the mand [ 37.583010][ T3764] option from the mount to silence this warning. [ 37.583010][ T3764] ======================================================= [ 37.679193][ T3763] dummy0: entered allmulticast mode [ 37.689572][ T3763] bridge0: port 3(dummy0) entered blocking state [ 37.696050][ T3763] bridge0: port 3(dummy0) entered forwarding state [ 37.732417][ T3764] EXT4-fs: Ignoring removed oldalloc option [ 37.763926][ T3764] EXT4-fs: Ignoring removed orlov option [ 37.786968][ T3764] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 37.804159][ T3764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.956413][ T3774] program syz.0.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.966484][ T3774] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 38.017404][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.301601][ T3802] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 38.313211][ T3804] netlink: 'syz.0.133': attribute type 39 has an invalid length. [ 38.321385][ T3762] syz.1.116 (3762) used greatest stack depth: 10464 bytes left [ 38.354977][ T3759] syz.1.116 (3759) used greatest stack depth: 10440 bytes left [ 38.549479][ T3824] loop2: detected capacity change from 0 to 1024 [ 38.583649][ T3824] EXT4-fs: Ignoring removed nobh option [ 38.589308][ T3824] EXT4-fs: Ignoring removed bh option [ 38.626014][ T3826] loop3: detected capacity change from 0 to 512 [ 38.642193][ T3824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.706235][ T3826] EXT4-fs (loop3): 1 orphan inode deleted [ 38.720957][ T37] __quota_error: 168 callbacks suppressed [ 38.720976][ T37] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 38.733717][ T3826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.736764][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 38.751151][ T3826] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.773425][ T29] audit: type=1400 audit(1751564636.446:281): avc: denied { setattr } for pid=3823 comm="syz.2.140" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.841311][ T29] audit: type=1326 audit(1751564636.496:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd96438d290 code=0x7ffc0000 [ 38.853575][ T3826] syz.3.141 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.864776][ T29] audit: type=1326 audit(1751564636.496:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd96438d677 code=0x7ffc0000 [ 38.898186][ T29] audit: type=1326 audit(1751564636.496:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd96438d290 code=0x7ffc0000 [ 38.921705][ T29] audit: type=1326 audit(1751564636.496:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 38.945199][ T29] audit: type=1326 audit(1751564636.496:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 38.970965][ T29] audit: type=1326 audit(1751564636.516:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.0.144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecdc4ee929 code=0x0 [ 38.993801][ T29] audit: type=1326 audit(1751564636.516:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 39.017581][ T29] audit: type=1326 audit(1751564636.516:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 39.049816][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.093886][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.245418][ T3841] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 39.291002][ T3841] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 39.312354][ T37] bond0: (slave bond_slave_0): interface is now down [ 39.314902][ T3854] netlink: 'syz.3.151': attribute type 10 has an invalid length. [ 39.319085][ T37] bond0: (slave bond_slave_1): interface is now down [ 39.323806][ T37] bond0: now running without any active interface! [ 39.342867][ T3841] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 39.361005][ T3854] syz_tun: entered promiscuous mode [ 39.375695][ T3854] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 39.384600][ T1086] bond0: (slave syz_tun): interface is now down [ 39.394037][ T1086] bond0: now running without any active interface! [ 39.401167][ T3841] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 39.412593][ T3841] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 39.442614][ T3841] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 39.457094][ T3841] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 39.489099][ T3841] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 39.499581][ T3841] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 39.510581][ T3841] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 39.524572][ T3862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.527908][ T3864] IPv6: Can't replace route, no match found [ 39.541083][ T3862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.644131][ T3871] loop2: detected capacity change from 0 to 2048 [ 39.662495][ T3871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.755841][ T3871] EXT4-fs (loop2): shut down requested (0) [ 39.776894][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.991928][ T3910] __nla_validate_parse: 4 callbacks suppressed [ 39.991945][ T3910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 40.035567][ T3915] smc: net device bond0 applied user defined pnetid SYZ2 [ 40.043100][ T3915] smc: net device bond0 erased user defined pnetid SYZ2 [ 40.088088][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.097071][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.106557][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.127639][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.136601][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.146415][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.167838][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.211051][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.219906][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.232167][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 40.242113][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.314436][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.408327][ T3946] loop3: detected capacity change from 0 to 1024 [ 40.538646][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.572475][ T3946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.598247][ T3946] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.615187][ T3946] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 3: comm syz.3.193: lblock 3 mapped to illegal pblock 3 (length 13) [ 40.631137][ T3946] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 40.643581][ T3946] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.643581][ T3946] [ 40.730100][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.812509][ T3961] loop2: detected capacity change from 0 to 512 [ 40.842107][ T3961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.921007][ T3941] chnl_net:caif_netlink_parms(): no params data found [ 40.931666][ T3961] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.948932][ T37] bridge_slave_1: left allmulticast mode [ 40.954708][ T37] bridge_slave_1: left promiscuous mode [ 40.960391][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.993368][ T37] bridge_slave_0: left allmulticast mode [ 40.999087][ T37] bridge_slave_0: left promiscuous mode [ 41.004889][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.018060][ T3961] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 41.071452][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.103558][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.114836][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.124626][ T37] bond0 (unregistering): Released all slaves [ 41.134947][ T3972] sit0: entered allmulticast mode [ 41.157125][ T3975] sit0: entered promiscuous mode [ 41.205239][ T3981] netlink: 'syz.4.200': attribute type 12 has an invalid length. [ 41.217887][ T37] hsr_slave_0: left promiscuous mode [ 41.228491][ T37] hsr_slave_1: left promiscuous mode [ 41.243612][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.251198][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.266542][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.274093][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.298554][ T37] veth1_macvtap: left promiscuous mode [ 41.305035][ T37] veth0_macvtap: left promiscuous mode [ 41.311197][ T37] veth1_vlan: left promiscuous mode [ 41.316651][ T37] veth0_vlan: left promiscuous mode [ 41.386802][ T37] team0 (unregistering): Port device team_slave_1 removed [ 41.397080][ T37] team0 (unregistering): Port device team_slave_0 removed [ 41.445366][ T3990] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 41.476188][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.483365][ T3941] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.490701][ T3941] bridge_slave_0: entered allmulticast mode [ 41.497438][ T3941] bridge_slave_0: entered promiscuous mode [ 41.504011][ T3980] Falling back ldisc for ttyS3. [ 41.504572][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.516228][ T3941] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.545758][ T3941] bridge_slave_1: entered allmulticast mode [ 41.553084][ T3941] bridge_slave_1: entered promiscuous mode [ 41.612866][ T3941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.624129][ T3941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.655326][ T3941] team0: Port device team_slave_0 added [ 41.661942][ T3941] team0: Port device team_slave_1 added [ 41.681403][ T3941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.688516][ T3941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.714646][ T3941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.726759][ T3941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.733828][ T3941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.759849][ T3941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.800153][ T3941] hsr_slave_0: entered promiscuous mode [ 41.812837][ T3941] hsr_slave_1: entered promiscuous mode [ 41.819342][ T3941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.829509][ T3941] Cannot create hsr debugfs directory [ 41.837409][ T4021] loop3: detected capacity change from 0 to 128 [ 41.859594][ T4021] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 41.867758][ T4021] FAT-fs (loop3): Filesystem has been set read-only [ 41.878449][ T4021] syz.3.215: attempt to access beyond end of device [ 41.878449][ T4021] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 41.893912][ T4021] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 41.901924][ T4021] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 41.916210][ T4021] syz.3.215: attempt to access beyond end of device [ 41.916210][ T4021] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.952199][ T4021] syz.3.215: attempt to access beyond end of device [ 41.952199][ T4021] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.966355][ T4021] syz.3.215: attempt to access beyond end of device [ 41.966355][ T4021] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.000356][ T4021] syz.3.215: attempt to access beyond end of device [ 42.000356][ T4021] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.029711][ T4021] syz.3.215: attempt to access beyond end of device [ 42.029711][ T4021] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.056631][ T3941] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.065834][ T3941] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.075274][ T3941] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.082167][ T4021] syz.3.215: attempt to access beyond end of device [ 42.082167][ T4021] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.095824][ T4021] syz.3.215: attempt to access beyond end of device [ 42.095824][ T4021] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.112213][ T3941] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.127803][ T4021] syz.3.215: attempt to access beyond end of device [ 42.127803][ T4021] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.141606][ T4021] syz.3.215: attempt to access beyond end of device [ 42.141606][ T4021] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.301985][ T4037] vhci_hcd: invalid port number 96 [ 42.307178][ T4037] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 42.320810][ T3941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.346125][ T3941] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.369561][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.376690][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.410000][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.417131][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.627699][ T3941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.868364][ T3941] veth0_vlan: entered promiscuous mode [ 42.884093][ T3941] veth1_vlan: entered promiscuous mode [ 42.909458][ T3941] veth0_macvtap: entered promiscuous mode [ 42.919027][ T3941] veth1_macvtap: entered promiscuous mode [ 42.921258][ T4077] xt_CT: No such helper "pptp" [ 42.930397][ T4076] sctp: [Deprecated]: syz.3.229 (pid 4076) Use of int in maxseg socket option. [ 42.930397][ T4076] Use struct sctp_assoc_value instead [ 42.945156][ T3941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.957271][ T3941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.967523][ T3941] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.976410][ T3941] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.985320][ T3941] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.994269][ T3941] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.079974][ T4091] loop5: detected capacity change from 0 to 512 [ 43.132971][ T4091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.151034][ T4091] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.173843][ T4105] 9pnet: p9_errstr2errno: server reported unknown error pA; [ 43.195792][ T4091] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.233: corrupted inode contents [ 43.210716][ T4091] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.233: mark_inode_dirty error [ 43.223897][ T4091] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.233: corrupted inode contents [ 43.236172][ T4091] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.233: mark_inode_dirty error [ 43.252185][ T4091] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.233: mark inode dirty (error -117) [ 43.282593][ T4091] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 43.308191][ T4120] loop9: detected capacity change from 0 to 7 [ 43.322430][ T4124] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 43.341127][ T3941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.362991][ T4120] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.378845][ T4120] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.386898][ T4120] loop9: unable to read partition table [ 43.389193][ T4123] loop3: detected capacity change from 0 to 8192 [ 43.398524][ T4120] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 43.398524][ T4120] ) failed (rc=-5) [ 43.506008][ T4144] loop4: detected capacity change from 0 to 128 [ 43.600683][ T4156] netem: change failed [ 43.663478][ T4166] loop4: detected capacity change from 0 to 1024 [ 43.683827][ T4166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.725822][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.771606][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 43.771623][ T29] audit: type=1326 audit(1751565409.459:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 43.827459][ T4185] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 43.835172][ T29] audit: type=1326 audit(1751565409.491:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 43.859002][ T29] audit: type=1326 audit(1751565409.491:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 43.882327][ T29] audit: type=1326 audit(1751565409.491:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 43.905685][ T29] audit: type=1326 audit(1751565409.491:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 43.928959][ T29] audit: type=1326 audit(1751565409.491:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 43.952396][ T29] audit: type=1326 audit(1751565409.491:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 43.975719][ T29] audit: type=1326 audit(1751565409.491:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 43.999040][ T29] audit: type=1326 audit(1751565409.491:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 44.022436][ T29] audit: type=1326 audit(1751565409.491:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4180 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96438e929 code=0x7ffc0000 [ 44.247984][ T4210] loop3: detected capacity change from 0 to 1024 [ 44.254772][ T4210] EXT4-fs: Ignoring removed oldalloc option [ 44.261286][ T4210] EXT4-fs: Ignoring removed orlov option [ 44.268542][ T4210] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 44.307471][ T4210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.353106][ T4210] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.284: Allocating blocks 497-513 which overlap fs metadata [ 44.392800][ T4222] loop2: detected capacity change from 0 to 8192 [ 44.405358][ T4222] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.427695][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.464683][ T4224] SELinux: failed to load policy [ 44.480975][ T4228] netlink: 'syz.2.292': attribute type 4 has an invalid length. [ 44.512484][ T4232] loop3: detected capacity change from 0 to 256 [ 44.519283][ T4232] vfat: Bad value for 'fmask' [ 44.636095][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.646230][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.691198][ T4247] loop5: detected capacity change from 0 to 1024 [ 44.699678][ T4247] EXT4-fs: Ignoring removed oldalloc option [ 44.705757][ T4247] EXT4-fs: Ignoring removed bh option [ 44.730474][ T4247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.803509][ T4255] loop3: detected capacity change from 0 to 2048 [ 44.817452][ T4255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.863008][ T4259] pim6reg1: entered promiscuous mode [ 44.868511][ T4259] pim6reg1: entered allmulticast mode [ 44.932423][ T4247] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.301: Allocating blocks 497-513 which overlap fs metadata [ 44.979493][ T4246] EXT4-fs (loop5): pa ffff88810725e000: logic 16, phys. 321, len 12 [ 44.987627][ T4246] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 45.024767][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.037079][ T3941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.087909][ T4272] __nla_validate_parse: 6 callbacks suppressed [ 45.087924][ T4272] netlink: 566 bytes leftover after parsing attributes in process `syz.5.309'. [ 45.119533][ T4274] netlink: 92 bytes leftover after parsing attributes in process `syz.4.310'. [ 45.319424][ T4316] SELinux: ebitmap: truncated map [ 45.331406][ T4316] SELinux: failed to load policy [ 45.387300][ T4332] loop5: detected capacity change from 0 to 164 [ 45.425710][ T4332] rock: directory entry would overflow storage [ 45.432018][ T4332] rock: sig=0x4f50, size=4, remaining=3 [ 45.437821][ T4332] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 45.459750][ T4332] binfmt_misc: register: failed to install interpreter file ./file0 [ 45.589403][ T4358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 45.598472][ T4358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.329'. [ 45.607386][ T4358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 45.627419][ T4358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.329'. [ 45.636644][ T4358] netlink: 'syz.0.329': attribute type 6 has an invalid length. [ 46.034183][ T4414] loop4: detected capacity change from 0 to 512 [ 46.041109][ T4414] EXT4-fs: test_dummy_encryption option not supported [ 46.071650][ T4414] loop4: detected capacity change from 0 to 256 [ 46.818712][ T4521] loop3: detected capacity change from 0 to 512 [ 46.826044][ T4521] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.839765][ T4521] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 46.847806][ T4521] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 46.860444][ T4521] System zones: 0-1, 15-15, 18-18, 34-34 [ 46.866345][ T4521] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.876223][ T4521] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 46.891935][ T4521] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 46.900213][ T4521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.351: bg 0: block 40: padding at end of block bitmap is not set [ 46.917381][ T4521] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 46.927023][ T4521] EXT4-fs (loop3): 1 truncate cleaned up [ 46.955431][ T4521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.063212][ T4525] SELinux: failed to load policy [ 47.084086][ T4541] loop2: detected capacity change from 0 to 1024 [ 47.115378][ T4541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.132593][ T4545] vhci_hcd: invalid port number 96 [ 47.137763][ T4545] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 47.173923][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.220170][ T4550] infiniband syz!: set active [ 47.224928][ T4550] infiniband syz!: added team_slave_0 [ 47.233107][ T4555] loop2: detected capacity change from 0 to 128 [ 47.252077][ T4550] RDS/IB: syz!: added [ 47.271547][ T4550] smc: adding ib device syz! with port count 1 [ 47.278062][ T4550] smc: ib device syz! port 1 has pnetid [ 47.298388][ T4562] loop4: detected capacity change from 0 to 256 [ 47.307823][ T4563] bio_check_eod: 16725 callbacks suppressed [ 47.307842][ T4563] syz.2.367: attempt to access beyond end of device [ 47.307842][ T4563] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 47.373961][ T4562] FAT-fs (loop4): Directory bread(block 64) failed [ 47.400630][ T4562] FAT-fs (loop4): Directory bread(block 65) failed [ 47.426365][ T51] kworker/u8:3: attempt to access beyond end of device [ 47.426365][ T51] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 47.450821][ T4562] FAT-fs (loop4): Directory bread(block 66) failed [ 47.460105][ T4562] FAT-fs (loop4): Directory bread(block 67) failed [ 47.476269][ T4562] FAT-fs (loop4): Directory bread(block 68) failed [ 47.490701][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.503481][ T4562] FAT-fs (loop4): Directory bread(block 69) failed [ 47.511510][ T4562] FAT-fs (loop4): Directory bread(block 70) failed [ 47.518434][ T4562] FAT-fs (loop4): Directory bread(block 71) failed [ 47.540172][ T4562] FAT-fs (loop4): Directory bread(block 72) failed [ 47.563455][ T4562] FAT-fs (loop4): Directory bread(block 73) failed [ 47.802732][ T4596] Zero length message leads to an empty skb [ 47.838472][ T4600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.387'. [ 47.847615][ T4600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 47.856737][ T4600] netlink: 204 bytes leftover after parsing attributes in process `syz.3.387'. [ 47.865833][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 47.953301][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.960799][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.992701][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.000223][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.068235][ T4624] loop5: detected capacity change from 0 to 164 [ 48.082663][ T4624] syz.5.396: attempt to access beyond end of device [ 48.082663][ T4624] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 48.123326][ T4624] syz.5.396: attempt to access beyond end of device [ 48.123326][ T4624] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 48.221843][ T4628] loop5: detected capacity change from 0 to 1024 [ 48.261845][ T4628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.335248][ T3941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.702864][ T4662] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 48.826466][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 48.826484][ T29] audit: type=1400 audit(1751565414.795:475): avc: denied { bind } for pid=4674 comm=E1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.865227][ T29] audit: type=1400 audit(1751565414.816:476): avc: denied { setopt } for pid=4674 comm=E1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.921074][ T29] audit: type=1400 audit(1751565414.858:477): avc: denied { mount } for pid=4679 comm="syz.3.422" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.943329][ T29] audit: type=1400 audit(1751565414.890:478): avc: denied { create } for pid=4676 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.962950][ T29] audit: type=1400 audit(1751565414.890:479): avc: denied { connect } for pid=4676 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.982660][ T29] audit: type=1400 audit(1751565414.890:480): avc: denied { ioctl } for pid=4676 comm="syz.0.420" path="socket:[8205]" dev="sockfs" ino=8205 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.035954][ T29] audit: type=1400 audit(1751565415.017:481): avc: denied { read } for pid=4688 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.094387][ T29] audit: type=1400 audit(1751565415.080:482): avc: denied { create } for pid=4699 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.123394][ T4704] macvlan1: entered promiscuous mode [ 49.131221][ T29] audit: type=1400 audit(1751565415.080:483): avc: denied { write } for pid=4699 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.131255][ T29] audit: type=1400 audit(1751565415.080:484): avc: denied { nlmsg_write } for pid=4699 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.132428][ T4704] ipvlan0: entered promiscuous mode [ 49.182684][ T4704] ipvlan0: left promiscuous mode [ 49.184409][ T4704] macvlan1: left promiscuous mode [ 49.236541][ T4712] loop3: detected capacity change from 0 to 1024 [ 49.255076][ T4712] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.435: Failed to acquire dquot type 0 [ 49.306161][ T4712] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 49.320770][ T4712] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.435: corrupted inode contents [ 49.335478][ T4712] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #13: comm syz.3.435: mark_inode_dirty error [ 49.354576][ T4712] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.435: corrupted inode contents [ 49.371898][ T4712] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.435: mark_inode_dirty error [ 49.392755][ T4712] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.435: corrupted inode contents [ 49.414474][ T4712] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 49.435472][ T4712] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.435: corrupted inode contents [ 49.484244][ T4712] EXT4-fs error (device loop3): ext4_truncate:4597: inode #13: comm syz.3.435: mark_inode_dirty error [ 49.498284][ T4712] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 49.516213][ T4712] EXT4-fs (loop3): 1 truncate cleaned up [ 49.522654][ T4712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.543941][ T4712] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.565837][ T4712] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 49.576373][ T4712] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.435: Failed to acquire dquot type 0 [ 49.592075][ T4712] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 49.609201][ T4737] loop2: detected capacity change from 0 to 128 [ 49.664313][ T3312] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /85/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 49.712262][ T3312] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 49.736393][ T3312] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /85/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 49.760200][ T3312] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 49.781480][ T3312] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /85/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 49.824511][ T3312] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 49.846553][ T4753] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 49.855324][ T3312] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /85/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 49.885358][ T4757] __nla_validate_parse: 2 callbacks suppressed [ 49.885433][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 49.902097][ T3312] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 49.925397][ T3312] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /85/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 49.941742][ T4757] bridge_slave_1: left allmulticast mode [ 49.952768][ T4757] bridge_slave_1: left promiscuous mode [ 49.958440][ T4757] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.032012][ T4757] bridge_slave_0: left allmulticast mode [ 50.038055][ T4757] bridge_slave_0: left promiscuous mode [ 50.043823][ T4757] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.112549][ T3312] bond0: (slave syz_tun): Releasing backup interface [ 50.189627][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.281057][ T4784] loop5: detected capacity change from 0 to 512 [ 50.288392][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.334813][ T4784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.357808][ T4784] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.382117][ T4784] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.471: corrupted inode contents [ 50.395594][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.427887][ T4784] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.471: mark_inode_dirty error [ 50.445269][ T4784] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.471: corrupted inode contents [ 50.460922][ T4784] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.471: mark_inode_dirty error [ 50.475966][ T4784] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.471: mark inode dirty (error -117) [ 50.489205][ T4784] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 50.492048][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.536270][ T4804] loop2: detected capacity change from 0 to 1024 [ 50.545029][ T4804] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 50.556345][ T4804] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.568162][ T3941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.579960][ T4804] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 50.604321][ T4804] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.613903][ T4804] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.477: Inode bitmap for bg 0 marked uninitialized [ 50.627290][ T37] dummy0: left allmulticast mode [ 50.632383][ T37] bridge0: port 3(dummy0) entered disabled state [ 50.642627][ T37] bridge_slave_1: left allmulticast mode [ 50.643631][ T4804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.648425][ T37] bridge_slave_1: left promiscuous mode [ 50.666588][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.674257][ T4804] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 50.685661][ T37] bridge_slave_0: left allmulticast mode [ 50.691430][ T37] bridge_slave_0: left promiscuous mode [ 50.697225][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.724248][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.783338][ T4819] netlink: 'syz.4.480': attribute type 1 has an invalid length. [ 50.823475][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.833363][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.843221][ T37] bond0 (unregistering): Released all slaves [ 50.918045][ T37] hsr_slave_0: left promiscuous mode [ 50.923828][ T37] hsr_slave_1: left promiscuous mode [ 50.933473][ T37] veth1_macvtap: left promiscuous mode [ 50.947580][ T37] veth0_macvtap: left promiscuous mode [ 50.953383][ T37] veth1_vlan: left promiscuous mode [ 50.958973][ T37] veth0_vlan: left promiscuous mode [ 51.084280][ T37] team0 (unregistering): Port device team_slave_1 removed [ 51.095067][ T37] team0 (unregistering): Port device team_slave_0 removed [ 51.141532][ T4844] syzkaller1: entered promiscuous mode [ 51.147164][ T4844] syzkaller1: entered allmulticast mode [ 51.169653][ T4847] loop4: detected capacity change from 0 to 8192 [ 51.199367][ T4788] chnl_net:caif_netlink_parms(): no params data found [ 51.248537][ T4788] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.255738][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.263479][ T4788] bridge_slave_0: entered allmulticast mode [ 51.271570][ T4788] bridge_slave_0: entered promiscuous mode [ 51.279041][ T4788] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.286182][ T4788] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.293549][ T4788] bridge_slave_1: entered allmulticast mode [ 51.300762][ T4788] bridge_slave_1: entered promiscuous mode [ 51.310705][ T4856] loop5: detected capacity change from 0 to 1024 [ 51.318964][ T4856] EXT4-fs: Ignoring removed nobh option [ 51.349945][ T4856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.350903][ T4788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.374647][ T4788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.412626][ T4788] team0: Port device team_slave_0 added [ 51.424902][ T3941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.427776][ T4788] team0: Port device team_slave_1 added [ 51.462559][ T4788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.469655][ T4788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.495695][ T4788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.509243][ T4788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.516307][ T4788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.542310][ T4788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.578809][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.497'. [ 51.622839][ T4823] syz.2.481 (4823) used greatest stack depth: 10248 bytes left [ 51.658655][ T4788] hsr_slave_0: entered promiscuous mode [ 51.676343][ T4788] hsr_slave_1: entered promiscuous mode [ 51.685692][ T4788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.696336][ T4788] Cannot create hsr debugfs directory [ 51.858032][ T4895] loop5: detected capacity change from 0 to 512 [ 51.874961][ T4895] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.911392][ T4895] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 51.919385][ T4895] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 51.934609][ T4788] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.957787][ T4895] System zones: 0-1, 15-15, 18-18, 34-34 [ 51.971556][ T4895] EXT4-fs (loop5): orphan cleanup on readonly fs [ 51.978123][ T4895] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 51.992820][ T4895] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 51.996985][ T4788] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.014029][ T4895] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.502: bg 0: block 40: padding at end of block bitmap is not set [ 52.015663][ T4788] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.041943][ T4895] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 52.053946][ T4895] EXT4-fs (loop5): 1 truncate cleaned up [ 52.063081][ T4895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.083401][ T4788] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.147240][ T4905] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 52.208300][ T4788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.254952][ T4788] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.274071][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.281290][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.307713][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.314834][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.337069][ T4788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.347740][ T4788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.412833][ T4788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.561305][ T3941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.590258][ T4788] veth0_vlan: entered promiscuous mode [ 52.600127][ T4788] veth1_vlan: entered promiscuous mode [ 52.618001][ T4788] veth0_macvtap: entered promiscuous mode [ 52.625802][ T4788] veth1_macvtap: entered promiscuous mode [ 52.637598][ T4962] loop4: detected capacity change from 0 to 1024 [ 52.637703][ T4788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.647548][ T4962] EXT4-fs: Ignoring removed nobh option [ 52.656385][ T4788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.672927][ T4962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.686480][ T4788] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.695343][ T4788] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.704178][ T4788] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.712993][ T4788] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.746509][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.807463][ T4978] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.858330][ T4978] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.922988][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 52.948436][ T4978] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.993309][ T4978] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.380808][ T5014] netlink: 'syz.5.549': attribute type 4 has an invalid length. [ 53.401147][ T5017] loop2: detected capacity change from 0 to 512 [ 53.425504][ T5020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 53.434656][ T5017] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.551: Parent and EA inode have the same ino 15 [ 53.448524][ T5017] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.462206][ T5017] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.551: Parent and EA inode have the same ino 15 [ 53.474864][ T5017] EXT4-fs (loop2): 1 orphan inode deleted [ 53.481047][ T5017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.507625][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.806209][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 53.806227][ T29] audit: type=1400 audit(1751565420.058:592): avc: denied { create } for pid=5033 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 53.806241][ T5034] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.867131][ T29] audit: type=1400 audit(1751565420.100:593): avc: denied { create } for pid=5033 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 53.887096][ T29] audit: type=1400 audit(1751565420.100:594): avc: denied { write } for pid=5033 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 53.913146][ T5036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.558'. [ 53.947562][ T29] audit: type=1400 audit(1751565420.195:595): avc: denied { read } for pid=5037 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.038131][ T29] audit: type=1400 audit(1751565420.301:596): avc: denied { ioctl } for pid=5042 comm="syz.2.560" path="socket:[9744]" dev="sockfs" ino=9744 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.137353][ T5049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 54.171252][ T29] audit: type=1326 audit(1751565420.438:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc9b0e929 code=0x7ffc0000 [ 54.194690][ T29] audit: type=1326 audit(1751565420.438:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc9b0e929 code=0x7ffc0000 [ 54.218007][ T29] audit: type=1326 audit(1751565420.438:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabc9b0e929 code=0x7ffc0000 [ 54.274803][ T5051] loop2: detected capacity change from 0 to 512 [ 54.276121][ T29] audit: type=1326 audit(1751565420.449:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc9b0e929 code=0x7ffc0000 [ 54.298647][ T5051] EXT4-fs: Ignoring removed oldalloc option [ 54.304544][ T29] audit: type=1326 audit(1751565420.449:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc9b0e929 code=0x7ffc0000 [ 54.322468][ T5051] EXT4-fs: inline encryption not supported [ 54.364081][ T4978] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.381768][ T4978] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.407393][ T5051] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 54.416348][ T5051] EXT4-fs (loop2): 1 truncate cleaned up [ 54.422646][ T5051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.437815][ T4978] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.451363][ T4978] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.503504][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.541358][ T5069] ALSA: seq fatal error: cannot create timer (-22) [ 54.580391][ T5073] loop5: detected capacity change from 0 to 1024 [ 54.590891][ T5077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'. [ 54.619300][ T5073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.717351][ T5073] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.732458][ T5087] loop6: detected capacity change from 0 to 512 [ 54.767516][ T5087] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 54.781023][ T5087] EXT4-fs (loop6): 1 truncate cleaned up [ 54.789943][ T5087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.847844][ T3941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.878653][ T5098] loop5: detected capacity change from 0 to 128 [ 54.919239][ T5098] syz.5.584: attempt to access beyond end of device [ 54.919239][ T5098] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 54.959528][ T4788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.053188][ T5114] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 55.220742][ T5126] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 55.229060][ T5126] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 55.295860][ T5132] loop5: detected capacity change from 0 to 256 [ 55.692176][ T5193] netlink: 340 bytes leftover after parsing attributes in process `syz.0.611'. [ 55.720645][ T5193] netlink: 48 bytes leftover after parsing attributes in process `syz.0.611'. [ 55.787808][ T5205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.796810][ T5205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.819967][ T5212] ucma_write: process 286 (syz.0.626) changed security contexts after opening file descriptor, this is not allowed. [ 56.036667][ T5240] sd 0:0:1:0: device reset [ 56.658116][ T5313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.624'. [ 56.706332][ T5322] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.628'. [ 56.776030][ T5333] Driver unsupported XDP return value 0 on prog (id 426) dev N/A, expect packet loss! [ 56.812998][ T5336] netlink: 76 bytes leftover after parsing attributes in process `syz.6.634'. [ 57.060990][ T5367] loop2: detected capacity change from 0 to 1024 [ 57.081871][ T5367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.143089][ T5367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.161813][ T5384] netlink: 'syz.4.647': attribute type 1 has an invalid length. [ 57.241435][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.290355][ T5403] netlink: 'syz.6.653': attribute type 10 has an invalid length. [ 57.298186][ T5403] netlink: 40 bytes leftover after parsing attributes in process `syz.6.653'. [ 57.320563][ T5403] dummy0: entered promiscuous mode [ 57.326611][ T5406] loop2: detected capacity change from 0 to 512 [ 57.327104][ T5403] bridge0: port 3(dummy0) entered blocking state [ 57.339361][ T5403] bridge0: port 3(dummy0) entered disabled state [ 57.347577][ T5403] dummy0: entered allmulticast mode [ 57.366386][ T5403] bridge0: port 3(dummy0) entered blocking state [ 57.372849][ T5403] bridge0: port 3(dummy0) entered forwarding state [ 57.382312][ T5406] EXT4-fs (loop2): too many log groups per flexible block group [ 57.390195][ T5406] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 57.404066][ T5406] EXT4-fs (loop2): mount failed [ 57.511276][ T5435] loop6: detected capacity change from 0 to 512 [ 57.554330][ T5435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.577534][ T5435] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.591098][ T5435] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.662: corrupted inode contents [ 57.601217][ T5450] lo speed is unknown, defaulting to 1000 [ 57.609461][ T5452] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.610839][ T5450] lo speed is unknown, defaulting to 1000 [ 57.624308][ T5452] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 57.631665][ T5435] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.662: mark_inode_dirty error [ 57.648462][ T5450] lo speed is unknown, defaulting to 1000 [ 57.654463][ T5435] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.662: corrupted inode contents [ 57.666739][ T5456] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.662: corrupted inode contents [ 57.666818][ T5450] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.667335][ T5450] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 57.696615][ T5450] lo speed is unknown, defaulting to 1000 [ 57.719637][ T5450] lo speed is unknown, defaulting to 1000 [ 57.734035][ T5450] lo speed is unknown, defaulting to 1000 [ 57.742342][ T4788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.750090][ T5450] lo speed is unknown, defaulting to 1000 [ 57.757480][ T5450] lo speed is unknown, defaulting to 1000 [ 57.804428][ T5467] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.668'. [ 57.973631][ T5489] netlink: 96 bytes leftover after parsing attributes in process `syz.0.675'. [ 58.176406][ T5501] netlink: 96 bytes leftover after parsing attributes in process `syz.4.679'. [ 58.195422][ T5515] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.681'. [ 59.041483][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 59.041576][ T29] audit: type=1400 audit(1751565425.593:692): avc: denied { create } for pid=5610 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.072134][ T29] audit: type=1400 audit(1751565425.614:693): avc: denied { write } for pid=5610 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.091962][ T29] audit: type=1400 audit(1751565425.614:694): avc: denied { read } for pid=5610 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.149231][ T5615] loop2: detected capacity change from 0 to 128 [ 59.162681][ T5617] capability: warning: `syz.4.702' uses deprecated v2 capabilities in a way that may be insecure [ 59.212786][ T29] audit: type=1400 audit(1751565425.772:695): avc: denied { unmount } for pid=3941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.224253][ T5615] syz.2.701: attempt to access beyond end of device [ 59.224253][ T5615] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 59.493299][ T5634] loop4: detected capacity change from 0 to 8192 [ 59.568636][ T5646] batadv1: entered promiscuous mode [ 59.574037][ T5646] batadv1: entered allmulticast mode [ 59.631434][ T5654] netlink: 'syz.5.719': attribute type 1 has an invalid length. [ 59.662469][ T5658] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 59.716376][ T29] audit: type=1400 audit(1751565426.300:696): avc: denied { mount } for pid=5663 comm="syz.4.722" name="/" dev="hugetlbfs" ino=11505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 59.947703][ T29] audit: type=1400 audit(1751565426.553:697): avc: denied { map } for pid=5689 comm="syz.6.735" path="socket:[11545]" dev="sockfs" ino=11545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.970866][ T29] audit: type=1400 audit(1751565426.553:698): avc: denied { read } for pid=5689 comm="syz.6.735" path="socket:[11545]" dev="sockfs" ino=11545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.074635][ T5695] loop6: detected capacity change from 0 to 512 [ 60.095801][ T5695] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 60.115318][ T5695] EXT4-fs: error: could not find journal device path [ 60.294280][ T29] audit: type=1400 audit(1751565426.912:699): avc: denied { append } for pid=5707 comm="syz.6.743" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.416548][ T5712] IPVS: stopping master sync thread 5713 ... [ 60.420662][ T5713] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 60.454996][ T5716] loop6: detected capacity change from 0 to 512 [ 60.462093][ T5716] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 60.471823][ T5716] EXT4-fs (loop6): invalid journal inode [ 60.477878][ T5716] EXT4-fs (loop6): can't get journal size [ 60.497275][ T5716] EXT4-fs (loop6): 1 truncate cleaned up [ 60.503377][ T5716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.666229][ T4788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.782563][ T29] audit: type=1400 audit(1751565427.430:700): avc: denied { search } for pid=5735 comm="syz.2.755" name="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.807180][ T29] audit: type=1400 audit(1751565427.451:701): avc: denied { search } for pid=5735 comm="syz.2.755" name="/" dev="configfs" ino=2086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.894479][ T5741] __nla_validate_parse: 6 callbacks suppressed [ 60.894497][ T5741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.757'. [ 60.909855][ T5741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.757'. [ 61.085393][ T5766] loop6: detected capacity change from 0 to 512 [ 61.094119][ T5766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.103605][ T5766] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 61.122392][ T5766] EXT4-fs (loop6): 1 truncate cleaned up [ 61.138504][ T5766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.236657][ T5778] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.303659][ T4788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.323271][ T5778] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.367563][ T5781] loop2: detected capacity change from 0 to 8192 [ 61.379719][ T5778] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.427074][ T5795] sd 0:0:1:0: device reset [ 61.438868][ T5778] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.605843][ T5778] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.618883][ T5778] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.639857][ T5803] macvlan1: entered promiscuous mode [ 61.650311][ T5803] ipvlan0: entered promiscuous mode [ 61.681124][ T5803] ipvlan0: left promiscuous mode [ 61.686518][ T5803] macvlan1: left promiscuous mode [ 61.699342][ T5778] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.717579][ T5778] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.895683][ T5816] netlink: 'syz.4.787': attribute type 13 has an invalid length. [ 61.960783][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.793'. [ 61.969704][ T5833] netlink: 64 bytes leftover after parsing attributes in process `syz.5.793'. [ 62.085738][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.139948][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.230890][ T5816] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.239421][ T5816] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.247852][ T5816] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.256261][ T5816] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.270842][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.793'. [ 62.535271][ T5875] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 62.535271][ T5875] program syz.6.811 not setting count and/or reply_len properly [ 62.542219][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 62.560915][ T5873] netlink: 64 bytes leftover after parsing attributes in process `syz.4.810'. [ 62.608619][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 62.757954][ T5884] loop5: detected capacity change from 0 to 1024 [ 62.774897][ T5884] EXT4-fs: inline encryption not supported [ 62.780853][ T5884] EXT4-fs: Ignoring removed i_version option [ 62.807106][ T5884] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.888116][ T5894] atomic_op ffff888104571928 conn xmit_atomic 0000000000000000 [ 62.915860][ T5884] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.815: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.933643][ T5884] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.815: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.948440][ T5884] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.815: Failed to acquire dquot type 0 [ 62.962890][ T5884] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 62.972619][ T5884] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.815: mark_inode_dirty error [ 62.988338][ T5884] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 62.999835][ T5884] EXT4-fs (loop5): 1 orphan inode deleted [ 63.006149][ T5884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.031514][ T5884] EXT4-fs: Ignoring removed orlov option [ 63.039129][ T5884] EXT4-fs (loop5): stripe (16) is not aligned with cluster size (4096), stripe is disabled [ 63.049452][ T5884] EXT4-fs (loop5): can't enable nombcache during remount [ 63.144526][ T3443] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.183115][ T3443] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 63.197027][ T3941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.206856][ T3941] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 63.221700][ T3941] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 63.222214][ T5913] loop6: detected capacity change from 0 to 1024 [ 63.231403][ T3941] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 63.254961][ T5913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.271585][ T5915] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.279976][ T5915] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.288305][ T5915] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.296846][ T5915] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.310397][ T5913] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.336672][ T5913] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 63.360590][ T5915] geneve2: entered promiscuous mode [ 63.378416][ T5913] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.826: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.394435][ T5913] EXT4-fs (loop6): Remounting filesystem read-only [ 63.405846][ T5920] syz.4.827 (5920) used greatest stack depth: 9872 bytes left [ 63.431027][ T5913] EXT4-fs (loop6): 1 orphan inode deleted [ 63.453032][ T5913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.499346][ T5913] sd 0:0:1:0: device reset [ 63.546672][ T4788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.730445][ T5943] loop5: detected capacity change from 0 to 512 [ 63.747454][ T5943] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.774615][ T5943] EXT4-fs (loop5): 1 truncate cleaned up [ 63.788225][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 63.799738][ T5943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.819965][ T5947] team1: entered promiscuous mode [ 63.826125][ T5947] team1: entered allmulticast mode [ 63.998408][ T5957] loop4: detected capacity change from 0 to 128 [ 64.023945][ T5957] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.046807][ T5961] netlink: 'syz.6.845': attribute type 13 has an invalid length. [ 64.056141][ T3941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.095535][ T5957] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.172269][ T5961] bridge0: port 3(dummy0) entered disabled state [ 64.178832][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.186287][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.195503][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 64.195520][ T29] audit: type=1400 audit(1751565431.029:793): avc: denied { ioctl } for pid=5955 comm="syz.4.842" path="/176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop4" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.267328][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.277773][ T29] audit: type=1326 audit(1751565431.103:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c24e929 code=0x7ffc0000 [ 64.301146][ T29] audit: type=1326 audit(1751565431.103:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe44c24e929 code=0x7ffc0000 [ 64.324602][ T29] audit: type=1326 audit(1751565431.103:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c24e929 code=0x7ffc0000 [ 64.348064][ T29] audit: type=1326 audit(1751565431.103:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe44c24e929 code=0x7ffc0000 [ 64.371499][ T29] audit: type=1326 audit(1751565431.103:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c24e929 code=0x7ffc0000 [ 64.394808][ T29] audit: type=1326 audit(1751565431.103:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe44c24e929 code=0x7ffc0000 [ 64.418090][ T29] audit: type=1326 audit(1751565431.103:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c24e929 code=0x7ffc0000 [ 64.441442][ T29] audit: type=1326 audit(1751565431.103:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe44c24e929 code=0x7ffc0000 [ 64.464950][ T29] audit: type=1326 audit(1751565431.103:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.5.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c24e929 code=0x7ffc0000 [ 64.519877][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.531609][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.568036][ T5961] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.576761][ T5961] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.585254][ T5961] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.593661][ T5961] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.771901][ T6003] loop6: detected capacity change from 0 to 1024 [ 64.797239][ T6003] EXT4-fs: Ignoring removed nobh option [ 64.806354][ T6003] EXT4-fs: Ignoring removed bh option [ 64.832921][ T6003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.926993][ T6003] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 64.990817][ T6003] EXT4-fs (loop6): Remounting filesystem read-only [ 65.029303][ T6023] netlink: 'syz.2.868': attribute type 13 has an invalid length. [ 65.044112][ T4788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.144900][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.152178][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.180148][ T6036] netlink: 9 bytes leftover after parsing attributes in process `syz.6.873'. [ 65.220401][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.231945][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.276231][ T6023] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.285415][ T6023] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.294454][ T6023] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.303352][ T6023] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.335639][ T6036] gretap0: entered promiscuous mode [ 65.344457][ T6039] 0{X: renamed from gretap0 [ 65.359743][ T6039] 0{X: left promiscuous mode [ 65.364872][ T6039] 0{X: entered allmulticast mode [ 65.371874][ T6039] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 65.432462][ T6047] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.476563][ T6047] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.529705][ T6047] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.540390][ T6054] loop6: detected capacity change from 0 to 8192 [ 65.567921][ T6047] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.633984][ T6047] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.673040][ T6047] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.688999][ T6047] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.708250][ T6047] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.815477][ T6084] loop9: detected capacity change from 0 to 7 [ 65.827920][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.837911][ T6084] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.845823][ T6084] loop9: unable to read partition table [ 65.875035][ T6084] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 65.875035][ T6084] U) failed (rc=-5) [ 65.953495][ T6092] usb usb1: usbfs: process 6092 (syz.5.900) did not claim interface 0 before use [ 66.031620][ T6100] xt_hashlimit: max too large, truncated to 1048576 [ 66.272644][ T54] ================================================================== [ 66.280788][ T54] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 66.289076][ T54] [ 66.291424][ T54] write to 0xffff888130650b36 of 2 bytes by task 6054 on cpu 0: [ 66.299086][ T54] fat16_ent_put+0x28/0x60 [ 66.303543][ T54] fat_alloc_clusters+0x4d1/0xa80 [ 66.308603][ T54] fat_get_block+0x258/0x5e0 [ 66.313235][ T54] __block_write_begin_int+0x400/0xf90 [ 66.318743][ T54] cont_write_begin+0x5fc/0x970 [ 66.323626][ T54] fat_write_begin+0x4f/0xe0 [ 66.328257][ T54] generic_perform_write+0x184/0x490 [ 66.334094][ T54] __generic_file_write_iter+0x9e/0x120 [ 66.339674][ T54] generic_file_write_iter+0x8d/0x2f0 [ 66.345087][ T54] vfs_write+0x4a0/0x8e0 [ 66.349374][ T54] ksys_write+0xda/0x1a0 [ 66.353667][ T54] __x64_sys_write+0x40/0x50 [ 66.358303][ T54] x64_sys_call+0x2cdd/0x2fb0 [ 66.363017][ T54] do_syscall_64+0xd2/0x200 [ 66.367557][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.373480][ T54] [ 66.375834][ T54] read to 0xffff888130650a00 of 512 bytes by task 54 on cpu 1: [ 66.383408][ T54] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 66.389334][ T54] generic_perform_write+0x2c2/0x490 [ 66.394651][ T54] shmem_file_write_iter+0xc5/0xf0 [ 66.399824][ T54] lo_rw_aio+0x6ed/0x7a0 [ 66.404088][ T54] loop_process_work+0x52d/0xa60 [ 66.409043][ T54] loop_workfn+0x31/0x40 [ 66.413302][ T54] process_scheduled_works+0x4cb/0x9d0 [ 66.418800][ T54] worker_thread+0x582/0x770 [ 66.423430][ T54] kthread+0x489/0x510 [ 66.427507][ T54] ret_from_fork+0xda/0x150 [ 66.432019][ T54] ret_from_fork_asm+0x1a/0x30 [ 66.436787][ T54] [ 66.439111][ T54] Reported by Kernel Concurrency Sanitizer on: [ 66.445289][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:4 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(voluntary) [ 66.457711][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.467799][ T54] Workqueue: loop6 loop_workfn [ 66.472604][ T54] ==================================================================