last executing test programs: 2.643256808s ago: executing program 3 (id=760): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r1, 0x2) sendto$inet6(r1, &(0x7f0000000300)="6cf321b25ecd11", 0x7, 0x20000010, &(0x7f0000000000)={0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 2.10282936s ago: executing program 0 (id=775): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.815043372s ago: executing program 3 (id=777): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6802000001050102000000000000000002000002540201000100000009000000067ef3005619210073797a3100000000000000000000000000000000000000000000000000000000da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea07bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d0e00018003000000ff0200000100540f36000000010000000700160e02000000ad0900000800fd0900000000080000002f05009303000000000000000800070000000000130000000101eed40200000003"], 0x268}, 0x1, 0x0, 0x0, 0x200080c4}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xd) 1.783114952s ago: executing program 3 (id=778): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(r3, 0x0, 0x20000000, 0x0) 1.605991163s ago: executing program 3 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) ioprio_get$pid(0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x40000) 1.594146823s ago: executing program 1 (id=780): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000200)="a6bea8a120e5f8320c30ce5088a8a5", 0xf, 0x0, &(0x7f0000000140)={0x11, 0xd, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) 1.573375693s ago: executing program 1 (id=781): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) 1.254775944s ago: executing program 0 (id=792): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x9) 1.112553115s ago: executing program 2 (id=794): mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x60102, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x60400) vmsplice(r0, &(0x7f0000000100), 0x0, 0x0) 1.112036755s ago: executing program 0 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 1.087730605s ago: executing program 2 (id=785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 1.069880565s ago: executing program 0 (id=786): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0xa72, &(0x7f0000000280)={0x0, 0x4054, 0x1a0, 0x3, 0x360}, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0xcb, 0x0, r2, 0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r4}}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 875.593896ms ago: executing program 2 (id=788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1e031c003c5ca601288763"], 0xffdd) close(r1) close(r0) 853.308956ms ago: executing program 0 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_pid(r3, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000bc0)=0x56, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 752.408487ms ago: executing program 3 (id=791): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 706.426647ms ago: executing program 3 (id=793): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 672.080757ms ago: executing program 2 (id=795): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x9) 628.386997ms ago: executing program 1 (id=796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0x1de0, &(0x7f0000000a00)={0x0, 0x7068, 0x400}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000300)={0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x26, 0x0, 0xb, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 627.304167ms ago: executing program 4 (id=806): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x40000080806, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 617.468088ms ago: executing program 2 (id=797): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000fc0)={{0x7f, 0x45, 0x4c, 0x46, 0xb2, 0x71, 0x3, 0x8, 0xd, 0x2, 0x3e, 0xd9b, 0x23, 0x38, 0x1d7, 0x10000, 0x5, 0x20, 0x1, 0x7, 0x5, 0x4}, [{0x4, 0x0, 0x7fff, 0x40, 0x3, 0x2, 0xe, 0x5}]}, 0x58) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) statx(r0, &(0x7f0000000340)='./file0/file0\x00', 0x4000, 0x40, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000400)="00214717a707000000000306c72bda0ba6c4be6a2ab384e79d088d30278d47dcaf384c74581a027886e332f3099ce2665082", 0x32}], 0x1, 0x1000000, 0x0) 577.240038ms ago: executing program 4 (id=798): mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x60102, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x60400) vmsplice(r0, &(0x7f0000000100), 0x0, 0x0) 576.644198ms ago: executing program 0 (id=799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) 576.365548ms ago: executing program 1 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00011000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@dellink={0x20, 0x11, 0x1, 0x1070bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x0, 0x10201}}, 0x20}}, 0x0) 547.840998ms ago: executing program 4 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3M1vG0UbAPBnN02afibtW73QD6ihICIKSZMW6IEDIJB6ASHBoRxDGqrStEVNkGhV0YBQOSL+AuCIhMSJCyeQEAIugLjCHSFVqJcWDsho7d3EbmzHTpqY1r+ftPbM7uzOPrM79nrHdgA9q5Q9JBFbI+LXiBiqZusLlKpPN65dmvrr2qWpJMrll/5MKuWuX7s0VRQt1tuSZ0bSiPS9JPY2qHf2wsXTkzMz0+fz/NjcmTfGZi9cfPTUmcmT0yenz04cPXrk8PgTj0881lYcl5dZnsV1fc/b5/btPvbKh89PlePV7z/L9ndrvrw2jqrhtuptpRSlKOcW5w5UHh9c9db/W7bVpJMNXdwROtIXEdnh6q/0/6Hoi8WDNxTPvbuQ+aZLOwismey9aceSuX35c7rw/gXciRJ9HHpU8Y6fff4tpvW8/ui2q09nj9OV+G/k048vVNsmzT7LDlc/sfc1Wf//DeYNLibLQ8vUvzUijs///VE2RcP7EC0kbZcEAFjwVXb980ij67+07tpmez6GMhwRByNiZ0T8LyJ2RbpQ5q6IuLvD+ks35Zde//y8qcNNdiS7/nsyH9sqpuqSIq5kIbetEn9/8tqpmelDeZuMRP/GLD/eoo6vn/3lg2bLSjXXf9mU1V9cC+b78ceGjfXrnJicm1xFyHWuvhOxZ0Oj+JOFkYCsBXZHxJ4VbD9rs1MPf7ovS2/fsnT58vG3cAvGmcqfRDxUPf7zcVP8haRaU7PxybHBmJk+NFacFUv98NOVF2vz/TXpuvgH24tpcKXBNpAd/80Nz/88/qIbFOO1s53XceW395t+pll6/JM4Pl9bIj//Ny02W3b+DyQvV9ID+by3Jufmzo9HDOQz6uZPLG6tyBfls/hHDjTu/zsj/vk4X29vRGQn8T0RcW9E7M/3/b6IuD8iDrSI/7tnHni9dQut8Py/BbL4T7Q6/hHDSe14/QoSfae//bJZ/e29/h2ppEbyOe28/rW7g6tpOwAAALhdpJUx6CQdLdI1N6d2xeZ05tzs3MFSvHn2RHWsejj60+JO11DN/dDx/N5wkZ+4KX84InZUvmm0qZIfnTo3s62bgQOV3+rU9f9I09HR6rLfm33pBbhzdDSOVvuls8+/uPU7A6wrv9eE3qX/Q+/S/6F36f/Quxr1/8sRN7qwK8A68/4PvUv/h96l/0Pv0v+hJy39SXzxdysr+aX/YmLnsVWtvuaJ8tCabHm+87X61ijSqP3TjqaJJCJWVkWkrcsMtFF71xLpsmWeWq5Z+lf1nxhZYn+e2BgR7a51ed1atXiFSPzLJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFv7NwAA//8Aq+SG") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 376.729038ms ago: executing program 2 (id=802): r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0xa72, &(0x7f0000000280)={0x0, 0x4054, 0x1a0, 0x3, 0x360}, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0xcb, 0x0, r2, 0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r4}}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 376.457728ms ago: executing program 1 (id=803): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) chdir(&(0x7f0000000240)='./file0\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) getdents(r2, 0x0, 0x0) 375.531248ms ago: executing program 4 (id=813): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(r3, 0x0, 0x20000000, 0x0) 231.604159ms ago: executing program 1 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) ioprio_get$pid(0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x40000) 145.91088ms ago: executing program 4 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 0s ago: executing program 4 (id=807): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioperm(0x1, 0x8, 0x8000000000000001) rmdir(0x0) fchdir(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 20.428390][ T29] audit: type=1400 audit(1732831383.015:81): avc: denied { read } for pid=3004 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 26.373369][ T29] audit: type=1400 audit(1732831388.955:82): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.374317][ T3311] cgroup: Unknown subsys name 'net' [ 26.396072][ T29] audit: type=1400 audit(1732831388.955:83): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.423435][ T29] audit: type=1400 audit(1732831388.995:84): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.575499][ T3311] cgroup: Unknown subsys name 'cpuset' [ 26.581495][ T3311] cgroup: Unknown subsys name 'rlimit' [ 26.720082][ T29] audit: type=1400 audit(1732831389.305:85): avc: denied { setattr } for pid=3311 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.743422][ T29] audit: type=1400 audit(1732831389.305:86): avc: denied { create } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.763911][ T29] audit: type=1400 audit(1732831389.305:87): avc: denied { write } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.771545][ T3313] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.784234][ T29] audit: type=1400 audit(1732831389.305:88): avc: denied { read } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.813084][ T29] audit: type=1400 audit(1732831389.315:89): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.837836][ T29] audit: type=1400 audit(1732831389.315:90): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.861088][ T29] audit: type=1400 audit(1732831389.385:91): avc: denied { relabelto } for pid=3313 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.890223][ T3311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.622331][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 28.667209][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 28.696201][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.770908][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.778068][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.785461][ T3325] bridge_slave_0: entered allmulticast mode [ 28.791837][ T3325] bridge_slave_0: entered promiscuous mode [ 28.809772][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.816845][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.823940][ T3325] bridge_slave_1: entered allmulticast mode [ 28.830316][ T3325] bridge_slave_1: entered promiscuous mode [ 28.841752][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.848819][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.856011][ T3328] bridge_slave_0: entered allmulticast mode [ 28.862352][ T3328] bridge_slave_0: entered promiscuous mode [ 28.890477][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.897601][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.904786][ T3328] bridge_slave_1: entered allmulticast mode [ 28.911115][ T3328] bridge_slave_1: entered promiscuous mode [ 28.917273][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.924349][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.931453][ T3321] bridge_slave_0: entered allmulticast mode [ 28.937930][ T3321] bridge_slave_0: entered promiscuous mode [ 28.944153][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 28.958373][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.971745][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.978833][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.985986][ T3321] bridge_slave_1: entered allmulticast mode [ 28.992324][ T3321] bridge_slave_1: entered promiscuous mode [ 29.005065][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.037113][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.046716][ T3325] team0: Port device team_slave_0 added [ 29.055373][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.064475][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 29.073779][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.083443][ T3325] team0: Port device team_slave_1 added [ 29.091624][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.126943][ T3321] team0: Port device team_slave_0 added [ 29.133257][ T3328] team0: Port device team_slave_0 added [ 29.151210][ T3321] team0: Port device team_slave_1 added [ 29.157370][ T3328] team0: Port device team_slave_1 added [ 29.163256][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.170214][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.196101][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.221219][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.228222][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.254211][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.264979][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.272054][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.279170][ T3320] bridge_slave_0: entered allmulticast mode [ 29.285459][ T3320] bridge_slave_0: entered promiscuous mode [ 29.303951][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.311088][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.318216][ T3320] bridge_slave_1: entered allmulticast mode [ 29.324620][ T3320] bridge_slave_1: entered promiscuous mode [ 29.332785][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.339785][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.365734][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.376550][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.383472][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.409360][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.420884][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.427865][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.453763][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.473790][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.480744][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.506761][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.535567][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.542704][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.549856][ T3329] bridge_slave_0: entered allmulticast mode [ 29.556371][ T3329] bridge_slave_0: entered promiscuous mode [ 29.573402][ T3325] hsr_slave_0: entered promiscuous mode [ 29.579393][ T3325] hsr_slave_1: entered promiscuous mode [ 29.586586][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.595809][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.602844][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.610009][ T3329] bridge_slave_1: entered allmulticast mode [ 29.616356][ T3329] bridge_slave_1: entered promiscuous mode [ 29.632030][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.650877][ T3321] hsr_slave_0: entered promiscuous mode [ 29.656987][ T3321] hsr_slave_1: entered promiscuous mode [ 29.662766][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.670335][ T3321] Cannot create hsr debugfs directory [ 29.677399][ T3328] hsr_slave_0: entered promiscuous mode [ 29.683259][ T3328] hsr_slave_1: entered promiscuous mode [ 29.689157][ T3328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.696725][ T3328] Cannot create hsr debugfs directory [ 29.731760][ T3320] team0: Port device team_slave_0 added [ 29.740264][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.754390][ T3320] team0: Port device team_slave_1 added [ 29.761054][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.826452][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.833445][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.859390][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.870697][ T3329] team0: Port device team_slave_0 added [ 29.877185][ T3329] team0: Port device team_slave_1 added [ 29.892791][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.899832][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.925778][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.957657][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.964605][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.990615][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.010437][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.017493][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.043387][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.097014][ T3320] hsr_slave_0: entered promiscuous mode [ 30.102979][ T3320] hsr_slave_1: entered promiscuous mode [ 30.108940][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.116539][ T3320] Cannot create hsr debugfs directory [ 30.124040][ T3329] hsr_slave_0: entered promiscuous mode [ 30.129903][ T3329] hsr_slave_1: entered promiscuous mode [ 30.136056][ T3329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.143590][ T3329] Cannot create hsr debugfs directory [ 30.162353][ T3328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.180621][ T3328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.189026][ T3328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.201346][ T3328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.243807][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.273808][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.284332][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.304776][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.325072][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.334386][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.342620][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.352114][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.377172][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.386505][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.401800][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.410758][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.428774][ T3329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.437973][ T3329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.449804][ T3329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.458757][ T3329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.491923][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.502906][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.525393][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.541353][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.554876][ T1789] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.561963][ T1789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.570606][ T1789] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.577640][ T1789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.599538][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.609910][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.623961][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.632189][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.639291][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.652963][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.660006][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.682149][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.692559][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.714479][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.723643][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.730717][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.747180][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.754235][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.769981][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.781188][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.788357][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.796641][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.803896][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.837241][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.847750][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.861554][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.875154][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.891563][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.898712][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.914365][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.921441][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.942414][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.960436][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.042384][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.090614][ T3321] veth0_vlan: entered promiscuous mode [ 31.098253][ T3328] veth0_vlan: entered promiscuous mode [ 31.107144][ T3328] veth1_vlan: entered promiscuous mode [ 31.125657][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.134706][ T3325] veth0_vlan: entered promiscuous mode [ 31.147592][ T3328] veth0_macvtap: entered promiscuous mode [ 31.166991][ T3328] veth1_macvtap: entered promiscuous mode [ 31.173532][ T3321] veth1_vlan: entered promiscuous mode [ 31.180548][ T3325] veth1_vlan: entered promiscuous mode [ 31.196444][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.211300][ T3321] veth0_macvtap: entered promiscuous mode [ 31.222013][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.233472][ T3321] veth1_macvtap: entered promiscuous mode [ 31.243804][ T3320] veth0_vlan: entered promiscuous mode [ 31.252238][ T3328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.261003][ T3328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.269725][ T3328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.278433][ T3328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.294567][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.305178][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.315709][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.323438][ T3325] veth0_macvtap: entered promiscuous mode [ 31.330745][ T3320] veth1_vlan: entered promiscuous mode [ 31.342720][ T3325] veth1_macvtap: entered promiscuous mode [ 31.355744][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.366194][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.377086][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.380458][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.380469][ T29] audit: type=1400 audit(1732831393.965:110): avc: denied { mounton } for pid=3328 comm="syz-executor" path="/root/syzkaller.7VymI4/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.392843][ T3321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.414730][ T29] audit: type=1400 audit(1732831393.965:111): avc: denied { mount } for pid=3328 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.414751][ T29] audit: type=1400 audit(1732831393.965:112): avc: denied { mounton } for pid=3328 comm="syz-executor" path="/root/syzkaller.7VymI4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.414773][ T29] audit: type=1400 audit(1732831393.965:113): avc: denied { mount } for pid=3328 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.414793][ T29] audit: type=1400 audit(1732831393.965:114): avc: denied { mounton } for pid=3328 comm="syz-executor" path="/root/syzkaller.7VymI4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.423532][ T3321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.445509][ T29] audit: type=1400 audit(1732831393.965:115): avc: denied { mounton } for pid=3328 comm="syz-executor" path="/root/syzkaller.7VymI4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.470702][ T3321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.492452][ T29] audit: type=1400 audit(1732831393.965:116): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.519142][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.575009][ T29] audit: type=1400 audit(1732831394.145:117): avc: denied { mounton } for pid=3328 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.616282][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.626868][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.636822][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.637797][ T3328] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.647272][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.647832][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.679657][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.690094][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.699983][ T3325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.710587][ T3325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.721048][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.731709][ T3325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.740487][ T3325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.749218][ T3325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.757924][ T3325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.785495][ T29] audit: type=1400 audit(1732831394.355:118): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.797196][ T3320] veth0_macvtap: entered promiscuous mode [ 31.809658][ T29] audit: type=1400 audit(1732831394.355:119): avc: denied { open } for pid=3328 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.881710][ T3320] veth1_macvtap: entered promiscuous mode [ 31.925985][ T3329] veth0_vlan: entered promiscuous mode [ 31.933062][ T3329] veth1_vlan: entered promiscuous mode [ 31.945124][ T3470] loop3: detected capacity change from 0 to 512 [ 31.953803][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.957929][ T3470] EXT4-fs: Ignoring removed bh option [ 31.964305][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.971277][ T3470] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 31.979491][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.979505][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.979512][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.979522][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.997899][ T3470] EXT4-fs (loop3): 1 truncate cleaned up [ 31.999032][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.016696][ T3470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.019185][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.063536][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.073412][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.083886][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.093894][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.104352][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.114772][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.123787][ T3320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.132615][ T3320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.141392][ T3320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.150104][ T3320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.159540][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.163484][ T3476] loop0: detected capacity change from 0 to 128 [ 32.190190][ T3329] veth0_macvtap: entered promiscuous mode [ 32.203312][ T3476] syz.0.9: attempt to access beyond end of device [ 32.203312][ T3476] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 32.225075][ T3476] syz.0.9: attempt to access beyond end of device [ 32.225075][ T3476] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 32.239040][ T3329] veth1_macvtap: entered promiscuous mode [ 32.241776][ T3476] syz.0.9: attempt to access beyond end of device [ 32.241776][ T3476] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.255677][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.268143][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.276262][ T3479] loop3: detected capacity change from 0 to 128 [ 32.278037][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.284505][ T3476] syz.0.9: attempt to access beyond end of device [ 32.284505][ T3476] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.294657][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.317392][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.327899][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.329258][ T3476] syz.0.9: attempt to access beyond end of device [ 32.329258][ T3476] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.337696][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.337718][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.340288][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.366402][ T3479] syz.3.10: attempt to access beyond end of device [ 32.366402][ T3479] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 32.373947][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.402204][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.402463][ T3476] syz.0.9: attempt to access beyond end of device [ 32.402463][ T3476] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.412021][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.435305][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.445167][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.455069][ T3479] syz.3.10: attempt to access beyond end of device [ 32.455069][ T3479] loop3: rw=0, sector=177, nr_sectors = 1 limit=128 [ 32.455580][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.478307][ T3329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.484268][ T3477] syz.3.10: attempt to access beyond end of device [ 32.484268][ T3477] loop3: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 32.488728][ T3329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.490481][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.520198][ T3477] syz.3.10: attempt to access beyond end of device [ 32.520198][ T3477] loop3: rw=524288, sector=185, nr_sectors = 184 limit=128 [ 32.539115][ T3329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.547952][ T3329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.556705][ T3329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.565434][ T3329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.606069][ T3477] Buffer I/O error on dev loop3, logical block 177, async page read [ 32.614289][ T3477] Buffer I/O error on dev loop3, logical block 178, async page read [ 32.622843][ T3477] Buffer I/O error on dev loop3, logical block 179, async page read [ 32.630971][ T3477] Buffer I/O error on dev loop3, logical block 180, async page read [ 32.639216][ T3477] Buffer I/O error on dev loop3, logical block 181, async page read [ 32.648128][ T3477] Buffer I/O error on dev loop3, logical block 182, async page read [ 32.667404][ T3481] syzkaller0: entered promiscuous mode [ 32.668808][ T3477] Buffer I/O error on dev loop3, logical block 183, async page read [ 32.672928][ T3481] syzkaller0: entered allmulticast mode [ 32.698077][ T3477] Buffer I/O error on dev loop3, logical block 184, async page read [ 32.706298][ T3477] Buffer I/O error on dev loop3, logical block 177, async page read [ 32.714405][ T3477] Buffer I/O error on dev loop3, logical block 178, async page read [ 32.833493][ T3502] loop2: detected capacity change from 0 to 1024 [ 32.838996][ T3503] loop3: detected capacity change from 0 to 2048 [ 32.841194][ T3502] EXT4-fs: Ignoring removed oldalloc option [ 32.854095][ T3502] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 32.897209][ T3502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.897238][ T3503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.922758][ T3503] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.966488][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.994496][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.013217][ T3511] capability: warning: `syz.2.19' uses deprecated v2 capabilities in a way that may be insecure [ 33.026871][ T3511] syz.2.19[3511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.026981][ T3511] syz.2.19[3511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.038842][ T3511] syz.2.19[3511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.068349][ T3514] ======================================================= [ 33.068349][ T3514] WARNING: The mand mount option has been deprecated and [ 33.068349][ T3514] and is ignored by this kernel. Remove the mand [ 33.068349][ T3514] option from the mount to silence this warning. [ 33.068349][ T3514] ======================================================= [ 33.268313][ T3531] serio: Serial port pts0 [ 33.636306][ T3543] loop0: detected capacity change from 0 to 1024 [ 33.644021][ T3543] EXT4-fs: Ignoring removed oldalloc option [ 33.651256][ T3543] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 33.687892][ T3546] syz.4.31 (3546) used greatest stack depth: 10168 bytes left [ 33.717542][ T3543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.773147][ T3554] pim6reg1: entered promiscuous mode [ 33.778533][ T3554] pim6reg1: entered allmulticast mode [ 33.793964][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.243732][ T3587] netlink: 96 bytes leftover after parsing attributes in process `syz.1.43'. [ 34.292674][ T3592] loop1: detected capacity change from 0 to 256 [ 34.306804][ T3592] FAT-fs (loop1): Directory bread(block 64) failed [ 34.313719][ T3592] FAT-fs (loop1): Directory bread(block 65) failed [ 34.321366][ T3592] FAT-fs (loop1): Directory bread(block 66) failed [ 34.329775][ T3592] FAT-fs (loop1): Directory bread(block 67) failed [ 34.337151][ T3592] FAT-fs (loop1): Directory bread(block 68) failed [ 34.346333][ T3594] loop0: detected capacity change from 0 to 512 [ 34.352987][ T3594] EXT4-fs: Ignoring removed nobh option [ 34.358622][ T3594] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.365163][ T3592] FAT-fs (loop1): Directory bread(block 69) failed [ 34.371823][ T3592] FAT-fs (loop1): Directory bread(block 70) failed [ 34.379331][ T3592] FAT-fs (loop1): Directory bread(block 71) failed [ 34.386006][ T3592] FAT-fs (loop1): Directory bread(block 72) failed [ 34.392604][ T3592] FAT-fs (loop1): Directory bread(block 73) failed [ 34.402372][ T3594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.461330][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.492793][ T3597] Zero length message leads to an empty skb [ 34.533465][ T3601] syz.0.49 (3601) used greatest stack depth: 9584 bytes left [ 34.560179][ T3603] SELinux: policydb version -1621357889 does not match my version range 15-33 [ 34.605634][ T3603] SELinux: failed to load policy [ 34.616458][ T3607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 34.632052][ T3609] loop4: detected capacity change from 0 to 512 [ 34.678825][ T3609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.700508][ T3613] team0 (unregistering): Port device team_slave_0 removed [ 34.708392][ T3609] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.720407][ T3613] team0 (unregistering): Port device team_slave_1 removed [ 34.803416][ T3620] process 'syz.2.57' launched './file0' with NULL argv: empty string added [ 34.837271][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.857837][ T3624] netem: change failed [ 35.020886][ T3640] macvlan0: entered allmulticast mode [ 35.026412][ T3640] veth1_vlan: entered allmulticast mode [ 35.050414][ T3640] veth1_vlan: left allmulticast mode [ 35.068994][ T3640] macvlan0 (unregistering): left allmulticast mode [ 35.198736][ T3657] netlink: 'syz.4.74': attribute type 4 has an invalid length. [ 35.238176][ T3666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 35.267960][ T3669] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.312050][ T3672] loop3: detected capacity change from 0 to 512 [ 35.335957][ T3676] loop1: detected capacity change from 0 to 512 [ 35.342944][ T3672] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 35.367146][ T3676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.380295][ T3676] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.393472][ T3672] EXT4-fs (loop3): 1 truncate cleaned up [ 35.399524][ T3676] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 35.412361][ T3672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.413015][ T3682] syzkaller0: entered promiscuous mode [ 35.430116][ T3682] syzkaller0: entered allmulticast mode [ 35.460256][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.466980][ T3672] EXT4-fs error (device loop3): __ext4_iget:4984: inode #12: block 2: comm syz.3.81: invalid block [ 35.528759][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.563440][ T3693] loop1: detected capacity change from 0 to 512 [ 35.608955][ T3693] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 35.619398][ T3693] System zones: 0-2, 18-18, 34-34 [ 35.626161][ T3693] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.89: bg 0: block 248: padding at end of block bitmap is not set [ 35.649133][ T3693] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.89: Failed to acquire dquot type 1 [ 35.671754][ T3693] EXT4-fs (loop1): 1 truncate cleaned up [ 35.680936][ T3693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.693558][ T3693] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.717501][ T3713] lo speed is unknown, defaulting to 1000 [ 35.743793][ T3693] bridge_slave_0: left allmulticast mode [ 35.749504][ T3693] bridge_slave_0: left promiscuous mode [ 35.755180][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.768126][ T3693] bridge_slave_1: left allmulticast mode [ 35.773812][ T3693] bridge_slave_1: left promiscuous mode [ 35.779524][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.789309][ T3693] bond0: (slave bond_slave_0): Releasing backup interface [ 35.799856][ T3693] bond0: (slave bond_slave_1): Releasing backup interface [ 35.811643][ T3693] team0: Port device team_slave_0 removed [ 35.820883][ T3693] team0: Port device team_slave_1 removed [ 35.829311][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.836763][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.853862][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.861376][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.864256][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 35.897240][ T3713] lo speed is unknown, defaulting to 1000 [ 35.917468][ T3737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.99'. [ 35.919919][ T3728] syz.2.97 uses obsolete (PF_INET,SOCK_PACKET) [ 35.932963][ T3713] lo speed is unknown, defaulting to 1000 [ 35.939301][ T3713] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.940876][ T3728] syzkaller1: entered promiscuous mode [ 35.951843][ T3728] syzkaller1: entered allmulticast mode [ 35.956244][ T3713] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 35.995219][ T3739] No such timeout policy "syz0" [ 36.001056][ T3713] lo speed is unknown, defaulting to 1000 [ 36.008205][ T3713] lo speed is unknown, defaulting to 1000 [ 36.014612][ T3713] lo speed is unknown, defaulting to 1000 [ 36.023863][ T3693] syz.1.89 (3693) used greatest stack depth: 9304 bytes left [ 36.032746][ T3713] lo speed is unknown, defaulting to 1000 [ 36.039147][ T3713] lo speed is unknown, defaulting to 1000 [ 36.048664][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.235911][ T3763] syzkaller0: entered allmulticast mode [ 36.248466][ T3763] syzkaller0 (unregistering): left allmulticast mode [ 36.314732][ T3769] lo speed is unknown, defaulting to 1000 [ 36.392668][ T3775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.394282][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 36.394297][ T29] audit: type=1400 audit(1732831398.975:752): avc: denied { write } for pid=3774 comm="syz.2.117" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.409310][ T3775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.430181][ T29] audit: type=1400 audit(1732831398.975:753): avc: denied { ioctl } for pid=3774 comm="syz.2.117" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.548234][ T29] audit: type=1400 audit(1732831399.135:754): avc: denied { read } for pid=3782 comm="syz.4.120" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.570852][ T29] audit: type=1400 audit(1732831399.135:755): avc: denied { open } for pid=3782 comm="syz.4.120" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.593878][ T29] audit: type=1400 audit(1732831399.135:756): avc: denied { ioctl } for pid=3782 comm="syz.4.120" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.623191][ T29] audit: type=1400 audit(1732831399.215:757): avc: denied { setopt } for pid=3786 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.700939][ T3791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 36.759941][ T3794] ebtables: ebtables: counters copy to user failed while replacing table [ 36.819509][ T29] audit: type=1400 audit(1732831399.395:758): avc: denied { map } for pid=3799 comm="syz.3.127" path="socket:[5063]" dev="sockfs" ino=5063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 36.894192][ T3804] pim6reg1: entered promiscuous mode [ 36.899584][ T3804] pim6reg1: entered allmulticast mode [ 37.004218][ T29] audit: type=1400 audit(1732831399.585:759): avc: denied { bind } for pid=3810 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.029859][ T3815] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 37.040377][ T29] audit: type=1400 audit(1732831399.615:760): avc: denied { listen } for pid=3810 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.060848][ T3815] SELinux: failed to load policy [ 37.069084][ T29] audit: type=1400 audit(1732831399.665:761): avc: denied { read } for pid=3810 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.107462][ T3822] bridge0: entered promiscuous mode [ 37.112908][ T3822] macvlan2: entered promiscuous mode [ 37.119784][ T3822] bridge0: port 3(macvlan2) entered blocking state [ 37.126402][ T3822] bridge0: port 3(macvlan2) entered disabled state [ 37.133214][ T3822] macvlan2: entered allmulticast mode [ 37.138627][ T3822] bridge0: entered allmulticast mode [ 37.150302][ T3822] macvlan2: left allmulticast mode [ 37.155640][ T3822] bridge0: left allmulticast mode [ 37.161448][ T3822] bridge0: left promiscuous mode [ 37.179934][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 37.213998][ T3835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 37.277148][ T3846] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.139'. [ 37.379044][ T3859] loop2: detected capacity change from 0 to 4096 [ 37.383833][ T3863] lo speed is unknown, defaulting to 1000 [ 37.393786][ T3859] EXT4-fs: Ignoring removed nobh option [ 37.399463][ T3859] EXT4-fs: Ignoring removed i_version option [ 37.417035][ T3859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.437453][ T3863] netlink: 56 bytes leftover after parsing attributes in process `syz.3.149'. [ 37.437568][ T3859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.523846][ T3396] IPVS: starting estimator thread 0... [ 37.624934][ T3875] IPVS: using max 2784 ests per chain, 139200 per kthread [ 37.737629][ T3888] netlink: 'syz.0.160': attribute type 39 has an invalid length. [ 37.861971][ T3897] pim6reg1: entered promiscuous mode [ 37.867346][ T3897] pim6reg1: entered allmulticast mode [ 38.385958][ T3931] syz.1.177[3931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.386078][ T3931] syz.1.177[3931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.404796][ T3931] syz.1.177[3931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.418667][ T3931] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 38.436388][ T3931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 38.444069][ T3931] vhci_hcd vhci_hcd.0: Device attached [ 38.462880][ T3934] vhci_hcd: connection closed [ 38.463070][ T2091] vhci_hcd: stop threads [ 38.472139][ T2091] vhci_hcd: release socket [ 38.476600][ T2091] vhci_hcd: disconnect device [ 38.867352][ C0] hrtimer: interrupt took 26660 ns [ 39.089319][ T3957] 9pnet: Could not find request transport: fdSe*!̿L8GfwOľϲ`hW$c\.\ר;='AnD!w "J4tF9:.VYe [ 39.322795][ T3382] IPVS: starting estimator thread 0... [ 39.403239][ T3994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 39.415226][ T3982] IPVS: using max 2832 ests per chain, 141600 per kthread [ 39.452830][ T3999] smc: net device bond0 applied user defined pnetid SYZ0 [ 39.460534][ T3999] smc: net device bond0 erased user defined pnetid SYZ0 [ 39.470798][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.481480][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.492220][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.503022][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.513773][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.524521][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.535287][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.545884][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.556544][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.567126][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.577843][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.588487][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.599074][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.609763][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.620462][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.631288][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.641949][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.652703][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.663338][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.673999][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.684906][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.695578][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.697552][ T4006] lo speed is unknown, defaulting to 1000 [ 39.706190][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.722534][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.733210][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.743838][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.754590][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.765234][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.775867][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.786443][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.797165][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.807997][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.818783][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.829498][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.840300][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.850898][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.861518][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.872145][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.882705][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.893323][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.903975][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.914603][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.925268][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.935840][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.946501][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.957104][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.967689][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.978348][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.988975][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 39.999654][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 40.010922][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 40.249499][ T4035] loop3: detected capacity change from 0 to 2048 [ 40.286715][ T4035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.353933][ T4045] lo speed is unknown, defaulting to 1000 [ 40.360253][ T4050] Illegal XDP return value 4294967274 on prog (id 213) dev N/A, expect packet loss! [ 40.373542][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.507967][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.515507][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.522901][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.531706][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.539100][ T4067] TCP: TCP_TX_DELAY enabled [ 40.543640][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551105][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551133][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551157][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551187][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551206][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551225][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551243][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551325][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551344][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551382][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551402][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551527][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551547][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551569][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551592][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551617][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551637][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551656][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551704][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551762][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551781][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551805][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551827][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551915][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.551937][ T3397] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.742769][ T3397] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 41.208840][ T4111] lo speed is unknown, defaulting to 1000 [ 41.304219][ T4118] loop4: detected capacity change from 0 to 2048 [ 41.330224][ T4118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.376325][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.891897][ T4145] macvlan0: entered allmulticast mode [ 41.897533][ T4145] veth1_vlan: entered allmulticast mode [ 41.908026][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 41.908039][ T29] audit: type=1107 audit(1732831404.495:873): pid=4143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 41.938962][ T4145] veth1_vlan: left allmulticast mode [ 41.967966][ T4145] macvlan0 (unregistering): left allmulticast mode [ 42.101969][ T4161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 42.121183][ T4160] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 42.461343][ T4182] loop4: detected capacity change from 0 to 512 [ 42.475853][ T29] audit: type=1107 audit(1732831405.065:874): pid=4183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 42.484772][ T4182] EXT4-fs (loop4): 1 truncate cleaned up [ 42.501429][ T4182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.519048][ T4182] EXT4-fs error (device loop4): __ext4_iget:4984: inode #12: block 2: comm syz.4.276: invalid block [ 42.539867][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.622753][ T4194] macvlan0: entered allmulticast mode [ 42.628239][ T4194] veth1_vlan: entered allmulticast mode [ 42.644074][ T4194] veth1_vlan: left allmulticast mode [ 42.655922][ T4194] macvlan0 (unregistering): left allmulticast mode [ 42.753701][ T4198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 42.798578][ T4200] netlink: 'syz.3.282': attribute type 4 has an invalid length. [ 42.818403][ T3382] lo speed is unknown, defaulting to 1000 [ 43.076911][ T4229] macvlan0: entered allmulticast mode [ 43.076951][ T4229] veth1_vlan: entered allmulticast mode [ 43.092103][ T4229] veth1_vlan: left allmulticast mode [ 43.116382][ T4229] macvlan0 (unregistering): left allmulticast mode [ 43.304400][ T29] audit: type=1400 audit(1732831405.885:875): avc: denied { read } for pid=4232 comm="syz.1.295" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 43.327479][ T29] audit: type=1400 audit(1732831405.885:876): avc: denied { open } for pid=4232 comm="syz.1.295" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 43.351603][ T4235] macvlan0: entered allmulticast mode [ 43.351622][ T4235] veth1_vlan: entered allmulticast mode [ 43.359935][ T4235] veth1_vlan: left allmulticast mode [ 43.361766][ T29] audit: type=1400 audit(1732831405.935:877): avc: denied { ioctl } for pid=4232 comm="syz.1.295" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 43.362190][ T4235] macvlan0 (unregistering): left allmulticast mode [ 43.367617][ T4234] lo speed is unknown, defaulting to 1000 [ 43.487822][ T4248] smc: net device bond0 applied user defined pnetid SYZ0 [ 43.503175][ T4248] smc: net device bond0 erased user defined pnetid SYZ0 [ 43.523135][ T4251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'. [ 43.652203][ T24] IPVS: starting estimator thread 0... [ 43.747835][ T4269] IPVS: using max 2832 ests per chain, 141600 per kthread [ 43.954875][ T4289] lo speed is unknown, defaulting to 1000 [ 44.051087][ T29] audit: type=1326 audit(1732831406.635:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e843b0809 code=0x7ffc0000 [ 44.089616][ T29] audit: type=1326 audit(1732831406.635:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e843b0809 code=0x7ffc0000 [ 44.105966][ T4294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'. [ 44.112940][ T29] audit: type=1326 audit(1732831406.635:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e843b0809 code=0x7ffc0000 [ 44.145034][ T29] audit: type=1326 audit(1732831406.635:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e843b0809 code=0x7ffc0000 [ 44.168312][ T29] audit: type=1326 audit(1732831406.635:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f0e843b0809 code=0x7ffc0000 [ 44.431657][ T4318] 9pnet: Could not find request transport: fdSe*!̿L8GfwOľϲ`hW$c\.\ר;='AnD!w "J4tF9:.VYe [ 44.456901][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 44.559159][ T4326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.331'. [ 45.097660][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 45.708437][ T4361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.344'. [ 45.956257][ T4387] syz.3.354[4387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.956318][ T4387] syz.3.354[4387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.968624][ T4387] syz.3.354[4387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.985012][ T4387] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 46.002770][ T4387] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 46.002846][ T4387] vhci_hcd vhci_hcd.0: Device attached [ 46.022790][ T4388] vhci_hcd: connection closed [ 46.022918][ T11] vhci_hcd: stop threads [ 46.031949][ T11] vhci_hcd: release socket [ 46.031958][ T11] vhci_hcd: disconnect device [ 46.594710][ T4404] pim6reg1: entered promiscuous mode [ 46.600155][ T4404] pim6reg1: entered allmulticast mode [ 46.703400][ T4409] netlink: 'syz.3.365': attribute type 39 has an invalid length. [ 46.965214][ T4434] lo speed is unknown, defaulting to 1000 [ 47.012392][ T4434] netlink: 56 bytes leftover after parsing attributes in process `syz.1.378'. [ 47.043481][ T4437] loop0: detected capacity change from 0 to 4096 [ 47.058610][ T4437] EXT4-fs: Ignoring removed nobh option [ 47.064234][ T4437] EXT4-fs: Ignoring removed i_version option [ 47.074244][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 47.074257][ T29] audit: type=1326 audit(1732831409.655:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a92d0809 code=0x7ffc0000 [ 47.104416][ T4437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.117119][ T29] audit: type=1326 audit(1732831409.655:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46a92d0809 code=0x7ffc0000 [ 47.118332][ T4437] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.140401][ T29] audit: type=1326 audit(1732831409.655:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a92d0809 code=0x7ffc0000 [ 47.140426][ T29] audit: type=1326 audit(1732831409.655:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f46a92d0809 code=0x7ffc0000 [ 47.140446][ T29] audit: type=1326 audit(1732831409.665:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a92d0809 code=0x7ffc0000 [ 47.218949][ T29] audit: type=1326 audit(1732831409.665:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a92d0809 code=0x7ffc0000 [ 47.242267][ T29] audit: type=1326 audit(1732831409.695:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46a92d0809 code=0x7ffc0000 [ 47.265643][ T29] audit: type=1326 audit(1732831409.695:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a92d0809 code=0x7ffc0000 [ 47.288923][ T29] audit: type=1326 audit(1732831409.695:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a92d0809 code=0x7ffc0000 [ 47.312231][ T29] audit: type=1326 audit(1732831409.695:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4442 comm="syz.4.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f46a92d0809 code=0x7ffc0000 [ 47.396629][ T4448] netlink: 'syz.4.383': attribute type 39 has an invalid length. [ 47.462230][ T4454] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.393'. [ 47.775595][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 47.813128][ T4476] lo speed is unknown, defaulting to 1000 [ 47.844671][ T4478] netlink: 56 bytes leftover after parsing attributes in process `syz.4.392'. [ 47.978862][ T4486] lo speed is unknown, defaulting to 1000 [ 47.987939][ T4484] loop4: detected capacity change from 0 to 4096 [ 47.994407][ T4484] EXT4-fs: Ignoring removed nobh option [ 47.999987][ T4484] EXT4-fs: Ignoring removed i_version option [ 48.009046][ T4484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.026431][ T4484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.029768][ T4486] netlink: 56 bytes leftover after parsing attributes in process `syz.2.407'. [ 48.090306][ T4494] bridge0: entered promiscuous mode [ 48.095662][ T4494] macvlan0: entered promiscuous mode [ 48.102499][ T4494] bridge0: port 3(macvlan0) entered blocking state [ 48.109063][ T4494] bridge0: port 3(macvlan0) entered disabled state [ 48.115841][ T4494] macvlan0: entered allmulticast mode [ 48.121287][ T4494] bridge0: entered allmulticast mode [ 48.126948][ T4494] macvlan0: left allmulticast mode [ 48.132081][ T4494] bridge0: left allmulticast mode [ 48.137923][ T4494] bridge0: left promiscuous mode [ 48.289560][ T4507] netlink: 'syz.2.400': attribute type 39 has an invalid length. [ 48.306682][ T4508] netlink: 1272 bytes leftover after parsing attributes in process `syz.4.412'. [ 48.459729][ T4514] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 48.468386][ T4514] SELinux: failed to load policy [ 48.487428][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 48.569541][ T4525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 48.636957][ T4529] pim6reg1: entered promiscuous mode [ 48.642291][ T4529] pim6reg1: entered allmulticast mode [ 48.642368][ T4527] loop3: detected capacity change from 0 to 4096 [ 48.657123][ T4527] EXT4-fs: Ignoring removed nobh option [ 48.662768][ T4527] EXT4-fs: Ignoring removed i_version option [ 48.680950][ T4527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.694052][ T4527] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.776646][ T4539] ebtables: ebtables: counters copy to user failed while replacing table [ 48.930800][ T4554] netlink: 'syz.1.420': attribute type 39 has an invalid length. [ 48.963588][ T4561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.980875][ T4561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.088573][ T4567] loop1: detected capacity change from 0 to 4096 [ 49.108685][ T4567] EXT4-fs: Ignoring removed nobh option [ 49.114293][ T4567] EXT4-fs: Ignoring removed i_version option [ 49.122024][ T4567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.135427][ T4567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.177128][ T4579] pim6reg1: entered promiscuous mode [ 49.182490][ T4579] pim6reg1: entered allmulticast mode [ 49.299701][ T4586] lo speed is unknown, defaulting to 1000 [ 49.332097][ T4591] syzkaller0: entered allmulticast mode [ 49.341882][ T4591] syzkaller0 (unregistering): left allmulticast mode [ 49.397496][ T4586] syzkaller0: entered promiscuous mode [ 49.402995][ T4586] syzkaller0: entered allmulticast mode [ 49.490940][ T4609] No such timeout policy "syz0" [ 49.529552][ T4608] pim6reg1: entered promiscuous mode [ 49.534887][ T4608] pim6reg1: entered allmulticast mode [ 49.559346][ T4615] syzkaller1: entered promiscuous mode [ 49.564971][ T4615] syzkaller1: entered allmulticast mode [ 49.571411][ T4613] __nla_validate_parse: 3 callbacks suppressed [ 49.571429][ T4613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 49.761067][ T4652] lo speed is unknown, defaulting to 1000 [ 49.767594][ T4651] loop3: detected capacity change from 0 to 512 [ 49.817704][ T4652] syzkaller0: entered promiscuous mode [ 49.821788][ T4651] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 49.823167][ T4652] syzkaller0: entered allmulticast mode [ 49.837024][ T4651] System zones: 0-2, 18-18, 34-34 [ 49.842918][ T4651] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.459: bg 0: block 248: padding at end of block bitmap is not set [ 49.862896][ T4651] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.459: Failed to acquire dquot type 1 [ 49.874539][ T4651] EXT4-fs (loop3): 1 truncate cleaned up [ 49.880654][ T4651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.893203][ T4651] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.920205][ T4651] bridge_slave_0: left allmulticast mode [ 49.925649][ T4663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.925890][ T4651] bridge_slave_0: left promiscuous mode [ 49.939942][ T4651] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.948181][ T4663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.959508][ T4651] bridge_slave_1: left allmulticast mode [ 49.965340][ T4651] bridge_slave_1: left promiscuous mode [ 49.971086][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.991531][ T4651] bond0: (slave bond_slave_0): Releasing backup interface [ 50.003472][ T4651] bond0: (slave bond_slave_1): Releasing backup interface [ 50.019152][ T4651] team0: Port device team_slave_0 removed [ 50.027225][ T4651] team0: Port device team_slave_1 removed [ 50.033686][ T4651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.041274][ T4651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.049886][ T4651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.057310][ T4651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.074110][ T4665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 50.115071][ T4670] pim6reg1: entered promiscuous mode [ 50.120394][ T4670] pim6reg1: entered allmulticast mode [ 50.122513][ T4651] syz.3.459 (4651) used greatest stack depth: 9296 bytes left [ 50.136410][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.163218][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 50.177305][ T4676] syzkaller1: entered promiscuous mode [ 50.182828][ T4676] syzkaller1: entered allmulticast mode [ 50.218350][ T4678] siw: device registration error -23 [ 50.498482][ T4707] loop3: detected capacity change from 0 to 512 [ 50.511844][ T4706] lo speed is unknown, defaulting to 1000 [ 50.523821][ T4707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.537720][ T4707] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.571540][ T4707] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 50.575906][ T4706] syzkaller0: entered promiscuous mode [ 50.587478][ T4706] syzkaller0: entered allmulticast mode [ 50.598826][ T4715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 50.654798][ T4719] lo speed is unknown, defaulting to 1000 [ 50.660729][ T4719] lo speed is unknown, defaulting to 1000 [ 50.675148][ T4719] lo speed is unknown, defaulting to 1000 [ 50.682163][ T4719] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.687693][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.699823][ T4719] lo speed is unknown, defaulting to 1000 [ 50.705810][ T4719] lo speed is unknown, defaulting to 1000 [ 50.718355][ T4719] lo speed is unknown, defaulting to 1000 [ 50.742251][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 50.777989][ T4719] lo speed is unknown, defaulting to 1000 [ 50.790759][ T4719] lo speed is unknown, defaulting to 1000 [ 50.798427][ T4726] syzkaller1: entered promiscuous mode [ 50.803915][ T4726] syzkaller1: entered allmulticast mode [ 50.814759][ T4719] lo speed is unknown, defaulting to 1000 [ 50.874760][ T4721] lo speed is unknown, defaulting to 1000 [ 50.890875][ T4721] lo speed is unknown, defaulting to 1000 [ 50.908446][ T4737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.917152][ T4737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.032356][ T4746] @: renamed from bond0 (while UP) [ 51.112386][ T4752] loop2: detected capacity change from 0 to 512 [ 51.156392][ T4752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.171279][ T4752] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.204516][ T4752] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 51.224590][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.495535][ T28] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 51.507589][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 51.545830][ T4759] loop0: detected capacity change from 0 to 128 [ 51.647657][ T4759] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.675052][ T4759] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.735899][ T4770] siw: device registration error -23 [ 51.778942][ T3325] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.801630][ T3397] hid-generic 0000:400000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 51.894754][ T4778] loop3: detected capacity change from 0 to 512 [ 51.911021][ T4778] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.924129][ T4778] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.951960][ T4778] EXT4-fs (loop3): 1 truncate cleaned up [ 51.964779][ T4778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.007169][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.428583][ T4789] loop0: detected capacity change from 0 to 512 [ 52.443661][ T4789] EXT4-fs: Ignoring removed bh option [ 52.458494][ T4789] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 52.459229][ T4790] syzkaller0: entered promiscuous mode [ 52.472538][ T4790] syzkaller0: entered allmulticast mode [ 52.487499][ T4789] EXT4-fs (loop0): 1 truncate cleaned up [ 52.498304][ T4789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.530017][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 52.570951][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.634630][ T4800] loop0: detected capacity change from 0 to 512 [ 52.662042][ T4800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.683146][ T4800] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.708790][ T4800] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 52.731034][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 52.731046][ T29] audit: type=1400 audit(1732831415.315:1137): avc: denied { ioctl } for pid=4805 comm="syz.3.512" path="socket:[8714]" dev="sockfs" ino=8714 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.731281][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 52.824900][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.843129][ T4810] loop1: detected capacity change from 0 to 128 [ 52.878409][ T4812] siw: device registration error -23 [ 52.904349][ T4810] bio_check_eod: 225 callbacks suppressed [ 52.904363][ T4810] syz.1.517: attempt to access beyond end of device [ 52.904363][ T4810] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 52.930691][ T4817] loop0: detected capacity change from 0 to 128 [ 52.950438][ T4810] syz.1.517: attempt to access beyond end of device [ 52.950438][ T4810] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 52.965744][ T4810] syz.1.517: attempt to access beyond end of device [ 52.965744][ T4810] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 52.979001][ T4810] syz.1.517: attempt to access beyond end of device [ 52.979001][ T4810] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 52.986770][ T4817] syz.0.520: attempt to access beyond end of device [ 52.986770][ T4817] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 52.992575][ T4810] syz.1.517: attempt to access beyond end of device [ 52.992575][ T4810] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.019008][ T4810] syz.1.517: attempt to access beyond end of device [ 53.019008][ T4810] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 53.022410][ T4817] syz.0.520: attempt to access beyond end of device [ 53.022410][ T4817] loop0: rw=0, sector=177, nr_sectors = 1 limit=128 [ 53.056577][ T4816] syz.0.520: attempt to access beyond end of device [ 53.056577][ T4816] loop0: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 53.070815][ T4816] syz.0.520: attempt to access beyond end of device [ 53.070815][ T4816] loop0: rw=524288, sector=185, nr_sectors = 184 limit=128 [ 53.087885][ T4816] buffer_io_error: 214 callbacks suppressed [ 53.087899][ T4816] Buffer I/O error on dev loop0, logical block 177, async page read [ 53.101868][ T4816] Buffer I/O error on dev loop0, logical block 178, async page read [ 53.109960][ T4816] Buffer I/O error on dev loop0, logical block 179, async page read [ 53.117986][ T4816] Buffer I/O error on dev loop0, logical block 180, async page read [ 53.126011][ T4816] Buffer I/O error on dev loop0, logical block 181, async page read [ 53.134034][ T4816] Buffer I/O error on dev loop0, logical block 182, async page read [ 53.142148][ T4816] Buffer I/O error on dev loop0, logical block 183, async page read [ 53.150145][ T4816] Buffer I/O error on dev loop0, logical block 184, async page read [ 53.158147][ T4816] Buffer I/O error on dev loop0, logical block 177, async page read [ 53.166176][ T4816] Buffer I/O error on dev loop0, logical block 178, async page read [ 53.711770][ T4827] lo speed is unknown, defaulting to 1000 [ 53.722655][ T4827] lo speed is unknown, defaulting to 1000 [ 53.788131][ T29] audit: type=1326 audit(1732831416.375:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b840809 code=0x7ffc0000 [ 53.813702][ T29] audit: type=1326 audit(1732831416.375:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b840809 code=0x7ffc0000 [ 53.825096][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 53.837119][ T29] audit: type=1326 audit(1732831416.405:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc14b840809 code=0x7ffc0000 [ 53.837147][ T29] audit: type=1326 audit(1732831416.405:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b840809 code=0x7ffc0000 [ 53.837171][ T29] audit: type=1326 audit(1732831416.405:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b840809 code=0x7ffc0000 [ 53.846354][ T4843] loop4: detected capacity change from 0 to 512 [ 53.926124][ T29] audit: type=1326 audit(1732831416.505:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc14b840809 code=0x7ffc0000 [ 53.949511][ T29] audit: type=1326 audit(1732831416.505:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b840809 code=0x7ffc0000 [ 53.972920][ T29] audit: type=1326 audit(1732831416.505:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14b840809 code=0x7ffc0000 [ 53.996381][ T29] audit: type=1326 audit(1732831416.515:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc14b840809 code=0x7ffc0000 [ 54.047432][ T4843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.062445][ T4843] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.094007][ T4843] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 54.105245][ T4835] syzkaller0: entered promiscuous mode [ 54.110874][ T4835] syzkaller0: entered allmulticast mode [ 54.128025][ T4852] netem: change failed [ 54.144759][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.216993][ T4864] lo speed is unknown, defaulting to 1000 [ 54.223142][ T4864] lo speed is unknown, defaulting to 1000 [ 54.275797][ T4868] serio: Serial port pts0 [ 54.331880][ T4877] netlink: 96 bytes leftover after parsing attributes in process `syz.4.544'. [ 54.369635][ T4884] loop4: detected capacity change from 0 to 512 [ 54.392497][ T4884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.410136][ T4884] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.425752][ T4884] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 54.463317][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.512131][ T4899] pim6reg1: entered promiscuous mode [ 54.517555][ T4899] pim6reg1: entered allmulticast mode [ 54.555500][ T4909] loop1: detected capacity change from 0 to 512 [ 54.566945][ T4909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.591872][ T4909] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.623334][ T4911] syzkaller0: entered promiscuous mode [ 54.628932][ T4911] syzkaller0: entered allmulticast mode [ 54.683758][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.982534][ T4923] syz.0.567[4923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.982588][ T4923] syz.0.567[4923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.997606][ T4923] syz.0.567[4923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.012614][ T4926] loop1: detected capacity change from 0 to 512 [ 55.013048][ T4928] loop4: detected capacity change from 0 to 256 [ 55.036746][ T4926] EXT4-fs: Ignoring removed nobh option [ 55.042328][ T4926] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.068430][ T4928] FAT-fs (loop4): Directory bread(block 64) failed [ 55.079266][ T4928] FAT-fs (loop4): Directory bread(block 65) failed [ 55.086020][ T4928] FAT-fs (loop4): Directory bread(block 66) failed [ 55.086734][ T4926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.092585][ T4928] FAT-fs (loop4): Directory bread(block 67) failed [ 55.113414][ T4928] FAT-fs (loop4): Directory bread(block 68) failed [ 55.116524][ T4930] lo speed is unknown, defaulting to 1000 [ 55.121434][ T4928] FAT-fs (loop4): Directory bread(block 69) failed [ 55.132199][ T4928] FAT-fs (loop4): Directory bread(block 70) failed [ 55.138306][ T4930] lo speed is unknown, defaulting to 1000 [ 55.138988][ T4928] FAT-fs (loop4): Directory bread(block 71) failed [ 55.151014][ T4928] FAT-fs (loop4): Directory bread(block 72) failed [ 55.157573][ T4928] FAT-fs (loop4): Directory bread(block 73) failed [ 55.193370][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.241929][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 55.409578][ T4954] loop1: detected capacity change from 0 to 1024 [ 55.417729][ T4954] EXT4-fs: Ignoring removed oldalloc option [ 55.424363][ T4954] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 55.436549][ T4954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.491683][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.538104][ T4962] loop1: detected capacity change from 0 to 2048 [ 55.545686][ T4964] loop2: detected capacity change from 0 to 512 [ 55.552331][ T4964] EXT4-fs: Ignoring removed nobh option [ 55.558035][ T4964] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.576707][ T4962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.589192][ T4964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.602119][ T4962] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.648613][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.666797][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.712178][ T4970] lo speed is unknown, defaulting to 1000 [ 55.719481][ T4970] lo speed is unknown, defaulting to 1000 [ 55.743208][ T4974] loop3: detected capacity change from 0 to 256 [ 55.759801][ T4974] FAT-fs (loop3): Directory bread(block 64) failed [ 55.769781][ T4974] FAT-fs (loop3): Directory bread(block 65) failed [ 55.780849][ T4974] FAT-fs (loop3): Directory bread(block 66) failed [ 55.787446][ T4974] FAT-fs (loop3): Directory bread(block 67) failed [ 55.796739][ T4974] FAT-fs (loop3): Directory bread(block 68) failed [ 55.809932][ T4974] FAT-fs (loop3): Directory bread(block 69) failed [ 55.817235][ T4974] FAT-fs (loop3): Directory bread(block 70) failed [ 55.823905][ T4974] FAT-fs (loop3): Directory bread(block 71) failed [ 55.834559][ T4974] FAT-fs (loop3): Directory bread(block 72) failed [ 55.848783][ T4974] FAT-fs (loop3): Directory bread(block 73) failed [ 56.050768][ T5019] SELinux: policydb version -1621357889 does not match my version range 15-33 [ 56.060134][ T5019] SELinux: failed to load policy [ 56.077020][ T5021] loop1: detected capacity change from 0 to 128 [ 56.130789][ T5028] loop0: detected capacity change from 0 to 1024 [ 56.144536][ T5028] EXT4-fs: Ignoring removed oldalloc option [ 56.153515][ T5028] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 56.181862][ T5028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.197008][ T5034] loop3: detected capacity change from 0 to 512 [ 56.203715][ T5034] EXT4-fs: Ignoring removed nobh option [ 56.209412][ T5034] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.220499][ T5034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.255218][ T5037] loop1: detected capacity change from 0 to 1024 [ 56.265614][ T5037] EXT4-fs: Ignoring removed oldalloc option [ 56.274412][ T5039] loop4: detected capacity change from 0 to 2048 [ 56.291382][ T5039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.303714][ T5037] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 56.319549][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.330146][ T5037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.348947][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.377550][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.411912][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.416051][ T5045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.454209][ T5050] loop3: detected capacity change from 0 to 128 [ 56.519480][ T5057] loop0: detected capacity change from 0 to 1024 [ 56.536745][ T5057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.559274][ T5064] loop1: detected capacity change from 0 to 512 [ 56.572990][ T5064] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 56.573235][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.617982][ T5066] loop4: detected capacity change from 0 to 128 [ 56.625513][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 56.661375][ T5068] syzkaller0: entered promiscuous mode [ 56.667060][ T5068] syzkaller0: entered allmulticast mode [ 56.679903][ T5070] loop0: detected capacity change from 0 to 512 [ 56.723471][ T5070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.737424][ T5070] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.778855][ T5082] loop3: detected capacity change from 0 to 1024 [ 56.790058][ T5082] EXT4-fs: Ignoring removed nobh option [ 56.795721][ T5082] EXT4-fs: Ignoring removed orlov option [ 56.807752][ T5084] serio: Serial port pts0 [ 56.813371][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.823225][ T5082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.860375][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.915987][ T5097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.924495][ T5097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.937375][ T5099] pim6reg1: entered promiscuous mode [ 56.942660][ T5099] pim6reg1: entered allmulticast mode [ 57.255238][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 57.462316][ T5114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.614'. [ 57.578518][ T5126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.621'. [ 57.587468][ T5126] netlink: 228 bytes leftover after parsing attributes in process `syz.2.621'. [ 57.596799][ T5126] netlink: 72 bytes leftover after parsing attributes in process `syz.2.621'. [ 57.741212][ T29] kauditd_printk_skb: 611 callbacks suppressed [ 57.741226][ T29] audit: type=1326 audit(1732831420.325:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a0c377a7 code=0x7ffc0000 [ 57.770813][ T29] audit: type=1326 audit(1732831420.325:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0a0bdc149 code=0x7ffc0000 [ 57.794495][ T29] audit: type=1326 audit(1732831420.325:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc0a0c40809 code=0x7ffc0000 [ 57.817980][ T29] audit: type=1326 audit(1732831420.355:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a0c377a7 code=0x7ffc0000 [ 57.841335][ T29] audit: type=1326 audit(1732831420.355:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0a0bdc149 code=0x7ffc0000 [ 57.864792][ T29] audit: type=1326 audit(1732831420.355:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc0a0c40809 code=0x7ffc0000 [ 57.888296][ T29] audit: type=1326 audit(1732831420.365:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a0c377a7 code=0x7ffc0000 [ 57.912126][ T29] audit: type=1326 audit(1732831420.365:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0a0bdc149 code=0x7ffc0000 [ 57.935541][ T29] audit: type=1326 audit(1732831420.365:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc0a0c40809 code=0x7ffc0000 [ 57.958963][ T29] audit: type=1326 audit(1732831420.375:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0a0c377a7 code=0x7ffc0000 [ 57.998889][ T5136] loop3: detected capacity change from 0 to 1024 [ 58.012079][ T5138] pim6reg1: entered promiscuous mode [ 58.017465][ T5138] pim6reg1: entered allmulticast mode [ 58.091093][ T5143] EXT4-fs (loop3): shut down requested (0) [ 58.150143][ T5145] syzkaller0: entered promiscuous mode [ 58.155732][ T5145] syzkaller0: entered allmulticast mode [ 58.237115][ T2091] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 58.252876][ T2091] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 58.265821][ T2091] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.265821][ T2091] [ 58.275488][ T2091] EXT4-fs (loop3): Total free blocks count 0 [ 58.281985][ T2091] EXT4-fs (loop3): Free/Dirty block details [ 58.287945][ T2091] EXT4-fs (loop3): free_blocks=68451041280 [ 58.293818][ T2091] EXT4-fs (loop3): dirty_blocks=16384 [ 58.299279][ T2091] EXT4-fs (loop3): Block reservation details [ 58.305321][ T2091] EXT4-fs (loop3): i_reserved_data_blocks=1024 [ 58.312222][ T5150] syzkaller0: entered promiscuous mode [ 58.317758][ T5150] syzkaller0: entered allmulticast mode [ 58.319617][ T50] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 58.484668][ T5154] loop1: detected capacity change from 0 to 8192 [ 58.500891][ T5164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.635'. [ 58.571222][ T5169] syzkaller0: entered allmulticast mode [ 58.597419][ T5174] loop0: detected capacity change from 0 to 2048 [ 58.616397][ T5170] syzkaller0: entered promiscuous mode [ 58.621913][ T5170] syzkaller0: entered allmulticast mode [ 58.640028][ T5169] syzkaller0 (unregistering): left allmulticast mode [ 58.685839][ T5180] loop1: detected capacity change from 0 to 2048 [ 58.716994][ T5180] loop1: p2 < > [ 58.727551][ C0] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 58.785759][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 58.794779][ T5189] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 58.845048][ T5197] syzkaller0: entered promiscuous mode [ 58.850552][ T5197] syzkaller0: entered allmulticast mode [ 58.994145][ T5210] loop1: detected capacity change from 0 to 2048 [ 59.022066][ T5214] capability: warning: `syz.0.656' uses 32-bit capabilities (legacy support in use) [ 59.240539][ T5240] syzkaller0: entered promiscuous mode [ 59.246162][ T5240] syzkaller0: entered allmulticast mode [ 59.287599][ T5242] loop1: detected capacity change from 0 to 2048 [ 59.294225][ T5242] EXT4-fs: Ignoring removed oldalloc option [ 59.470338][ T5254] loop1: detected capacity change from 0 to 128 [ 59.773239][ T5254] bio_check_eod: 688 callbacks suppressed [ 59.773253][ T5254] syz.1.673: attempt to access beyond end of device [ 59.773253][ T5254] loop1: rw=2049, sector=153, nr_sectors = 888 limit=128 [ 59.850073][ T5272] netlink: 'syz.1.680': attribute type 4 has an invalid length. [ 59.947848][ T5287] loop4: detected capacity change from 0 to 1024 [ 59.955962][ T5287] EXT4-fs: Ignoring removed oldalloc option [ 59.965872][ T5287] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 61.073086][ T5323] syzkaller0: entered promiscuous mode [ 61.078632][ T5323] syzkaller0: entered allmulticast mode [ 61.101385][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 61.511922][ T5345] netlink: 'syz.0.709': attribute type 3 has an invalid length. [ 61.996322][ T5348] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.999150][ T5351] loop1: detected capacity change from 0 to 1024 [ 62.021738][ T5351] EXT4-fs: Ignoring removed oldalloc option [ 62.028208][ T5353] loop2: detected capacity change from 0 to 128 [ 62.029394][ T5351] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 62.081194][ T5353] syz.2.712: attempt to access beyond end of device [ 62.081194][ T5353] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 62.102285][ T5353] syz.2.712: attempt to access beyond end of device [ 62.102285][ T5353] loop2: rw=0, sector=177, nr_sectors = 1 limit=128 [ 62.116331][ T5353] syz.2.712: attempt to access beyond end of device [ 62.116331][ T5353] loop2: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 62.130585][ T5353] syz.2.712: attempt to access beyond end of device [ 62.130585][ T5353] loop2: rw=524288, sector=185, nr_sectors = 184 limit=128 [ 62.375903][ T2091] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.387253][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.415411][ T5384] loop0: detected capacity change from 0 to 128 [ 62.428844][ T5384] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.750915][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 62.750930][ T29] audit: type=1326 audit(1732831425.335:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc47cd577a7 code=0x7ffc0000 [ 62.781328][ T29] audit: type=1326 audit(1732831425.365:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc47ccfc149 code=0x7ffc0000 [ 62.804663][ T29] audit: type=1326 audit(1732831425.365:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc47cd577a7 code=0x7ffc0000 [ 62.828042][ T29] audit: type=1326 audit(1732831425.365:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc47ccfc149 code=0x7ffc0000 [ 62.851258][ T29] audit: type=1326 audit(1732831425.365:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc47cd577a7 code=0x7ffc0000 [ 62.874633][ T29] audit: type=1326 audit(1732831425.365:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc47ccfc149 code=0x7ffc0000 [ 62.897982][ T29] audit: type=1326 audit(1732831425.365:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc47cd60809 code=0x7ffc0000 [ 62.923253][ T29] audit: type=1326 audit(1732831425.425:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc47cd577a7 code=0x7ffc0000 [ 62.946508][ T29] audit: type=1326 audit(1732831425.425:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc47ccfc149 code=0x7ffc0000 [ 62.969783][ T29] audit: type=1326 audit(1732831425.425:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.1.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc47cd60809 code=0x7ffc0000 [ 63.017874][ T3382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 63.216584][ T5412] netlink: 'syz.4.733': attribute type 3 has an invalid length. [ 63.259377][ T5416] loop1: detected capacity change from 0 to 128 [ 63.280471][ T5418] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.288492][ T5416] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.373439][ T5424] loop1: detected capacity change from 0 to 128 [ 63.417140][ T5424] syz.1.741: attempt to access beyond end of device [ 63.417140][ T5424] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 63.463732][ T5424] syz.1.741: attempt to access beyond end of device [ 63.463732][ T5424] loop1: rw=0, sector=177, nr_sectors = 1 limit=128 [ 63.485776][ T5424] syz.1.741: attempt to access beyond end of device [ 63.485776][ T5424] loop1: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 63.516116][ T5424] syz.1.741: attempt to access beyond end of device [ 63.516116][ T5424] loop1: rw=524288, sector=185, nr_sectors = 184 limit=128 [ 64.663094][ T5469] loop0: detected capacity change from 0 to 128 [ 64.708804][ T5472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 64.731679][ T5469] syz.0.756: attempt to access beyond end of device [ 64.731679][ T5469] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 64.749508][ T5472] bond1: entered promiscuous mode [ 64.759296][ T5472] bond1 (unregistering): Released all slaves [ 64.779136][ T5469] syz.0.756: attempt to access beyond end of device [ 64.779136][ T5469] loop0: rw=0, sector=177, nr_sectors = 1 limit=128 [ 64.793549][ T5469] syz.0.756: attempt to access beyond end of device [ 64.793549][ T5469] loop0: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 64.809193][ T5469] syz.0.756: attempt to access beyond end of device [ 64.809193][ T5469] loop0: rw=524288, sector=185, nr_sectors = 184 limit=128 [ 64.907103][ T5478] loop0: detected capacity change from 0 to 2048 [ 64.980155][ T5486] netlink: 'syz.3.760': attribute type 3 has an invalid length. [ 65.081634][ T5492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.764'. [ 65.265960][ T5507] loop4: detected capacity change from 0 to 128 [ 65.311727][ T5507] syz.4.772: attempt to access beyond end of device [ 65.311727][ T5507] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 65.356266][ T5507] syz.4.772: attempt to access beyond end of device [ 65.356266][ T5507] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 65.376856][ T5507] syz.4.772: attempt to access beyond end of device [ 65.376856][ T5507] loop4: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 65.391227][ T5507] syz.4.772: attempt to access beyond end of device [ 65.391227][ T5507] loop4: rw=524288, sector=185, nr_sectors = 184 limit=128 [ 66.335743][ T5537] loop4: detected capacity change from 0 to 128 [ 66.369720][ T5537] EXT4-fs mount: 18 callbacks suppressed [ 66.369736][ T5537] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.387796][ T5537] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.452762][ T3329] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.489001][ T5547] loop2: detected capacity change from 0 to 512 [ 66.502754][ T5547] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.514452][ T5547] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 66.517152][ T5550] loop4: detected capacity change from 0 to 512 [ 66.524676][ T5547] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.785: Corrupt directory, running e2fsck is recommended [ 66.535804][ T5550] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.787: invalid block [ 66.553197][ T5547] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 66.557576][ T5550] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.787: invalid indirect mapped block 4294967295 (level 1) [ 66.578152][ T5547] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.785: corrupted in-inode xattr: invalid ea_ino [ 66.578604][ T5550] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.787: invalid indirect mapped block 4294967295 (level 1) [ 66.597221][ T5547] EXT4-fs (loop2): Remounting filesystem read-only [ 66.613115][ T5550] EXT4-fs (loop4): 2 truncates cleaned up [ 66.613560][ T5547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.619271][ T5550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.634759][ T5547] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 66.651879][ T5547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.684713][ T5550] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.4.787: path /144/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 66.746327][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.760474][ T5556] syzkaller0: entered promiscuous mode [ 66.765999][ T5556] syzkaller0: entered allmulticast mode [ 66.822463][ T5561] loop4: detected capacity change from 0 to 2048 [ 66.861933][ T5561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.938899][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.955625][ T5571] netlink: 'syz.1.796': attribute type 4 has an invalid length. [ 67.003899][ T5578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 67.021333][ T5578] bond1: entered promiscuous mode [ 67.032632][ T5578] bond1 (unregistering): Released all slaves [ 67.033822][ T5582] loop4: detected capacity change from 0 to 512 [ 67.056363][ T5582] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 67.067973][ T5582] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 67.078201][ T5582] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.801: Corrupt directory, running e2fsck is recommended [ 67.091822][ T5582] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 67.101202][ T5582] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.801: corrupted in-inode xattr: invalid ea_ino [ 67.114738][ T5582] EXT4-fs (loop4): Remounting filesystem read-only [ 67.121633][ T5582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.134147][ T5582] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 67.141090][ T5582] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.158730][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.196939][ T5587] loop1: detected capacity change from 0 to 512 [ 67.204208][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.223710][ T5587] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.803: invalid indirect mapped block 4294967295 (level 1) [ 67.246002][ T5587] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.803: invalid indirect mapped block 4294967295 (level 1) [ 67.260769][ T5587] EXT4-fs (loop1): 2 truncates cleaned up [ 67.267030][ T5587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.281299][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.284362][ T5587] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.1.803: path /171/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 67.335841][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.356886][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.375300][ T5591] lo speed is unknown, defaulting to 1000 [ 67.381242][ T5591] lo speed is unknown, defaulting to 1000 [ 67.429295][ T54] bridge_slave_1: left allmulticast mode [ 67.435019][ T54] bridge_slave_1: left promiscuous mode [ 67.440688][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.448741][ T54] bridge_slave_0: left allmulticast mode [ 67.454410][ T54] bridge_slave_0: left promiscuous mode [ 67.460124][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.527242][ T54] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.536881][ T54] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.546711][ T54] @ (unregistering): Released all slaves [ 67.600748][ T54] hsr_slave_0: left promiscuous mode [ 67.606661][ T54] hsr_slave_1: left promiscuous mode [ 67.612354][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.619818][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.628423][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.635887][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.644745][ T54] veth1_vlan: left promiscuous mode [ 67.650104][ T54] veth0_vlan: left promiscuous mode [ 67.701598][ T54] team0 (unregistering): Port device team_slave_1 removed [ 67.710797][ T54] team0 (unregistering): Port device team_slave_0 removed [ 67.762797][ T5591] chnl_net:caif_netlink_parms(): no params data found [ 67.820210][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.827427][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.834728][ T5591] bridge_slave_0: entered allmulticast mode [ 67.842982][ T5591] bridge_slave_0: entered promiscuous mode [ 67.849819][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.856921][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.864567][ T5591] bridge_slave_1: entered allmulticast mode [ 67.871357][ T5591] bridge_slave_1: entered promiscuous mode [ 67.897153][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.911152][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.930289][ T5591] team0: Port device team_slave_0 added [ 67.937150][ T5591] team0: Port device team_slave_1 added [ 67.951539][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.958549][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.984434][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.995629][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.002569][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.028635][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.053055][ T5591] hsr_slave_0: entered promiscuous mode [ 68.059169][ T5591] hsr_slave_1: entered promiscuous mode [ 68.065261][ T5591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.072863][ T5591] Cannot create hsr debugfs directory [ 68.127848][ T3314] ================================================================== [ 68.135973][ T3314] BUG: KCSAN: data-race in set_nlink / set_nlink [ 68.142323][ T3314] [ 68.144648][ T3314] read to 0xffff8881065e2eb8 of 4 bytes by task 3022 on cpu 0: [ 68.152192][ T3314] set_nlink+0x2b/0xb0 [ 68.156270][ T3314] kernfs_iop_permission+0x1c8/0x210 [ 68.161572][ T3314] inode_permission+0x18c/0x300 [ 68.166433][ T3314] link_path_walk+0x14b/0x820 [ 68.171112][ T3314] path_openat+0x1af/0x1fa0 [ 68.175197][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.175615][ T3314] do_filp_open+0x107/0x230 [ 68.186704][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.190569][ T3314] do_sys_openat2+0xab/0x120 [ 68.205646][ T3314] __x64_sys_openat+0xf3/0x120 [ 68.210407][ T3314] x64_sys_call+0x2b30/0x2dc0 [ 68.215078][ T3314] do_syscall_64+0xc9/0x1c0 [ 68.219574][ T3314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.225465][ T3314] [ 68.227775][ T3314] write to 0xffff8881065e2eb8 of 4 bytes by task 3314 on cpu 1: [ 68.235393][ T3314] set_nlink+0x98/0xb0 [ 68.239452][ T3314] kernfs_iop_permission+0x1c8/0x210 [ 68.244731][ T3314] inode_permission+0x18c/0x300 [ 68.249572][ T3314] link_path_walk+0x14b/0x820 [ 68.254243][ T3314] path_openat+0x1af/0x1fa0 [ 68.258740][ T3314] do_filp_open+0x107/0x230 [ 68.263240][ T3314] do_sys_openat2+0xab/0x120 [ 68.267824][ T3314] __x64_sys_openat+0xf3/0x120 [ 68.272582][ T3314] x64_sys_call+0x2b30/0x2dc0 [ 68.277252][ T3314] do_syscall_64+0xc9/0x1c0 [ 68.281743][ T3314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.287637][ T3314] [ 68.289947][ T3314] value changed: 0x00000006 -> 0x00000005 [ 68.295659][ T3314] [ 68.297973][ T3314] Reported by Kernel Concurrency Sanitizer on: [ 68.304117][ T3314] CPU: 1 UID: 0 PID: 3314 Comm: udevd Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 68.313998][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.324043][ T3314] ================================================================== [ 68.520813][ T5591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.532044][ T5591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.540932][ T5591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.551338][ T5591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.587796][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.601943][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.612456][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.619542][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.639043][ T5591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.649466][ T5591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.663759][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.670842][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.723966][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.794411][ T5591] veth0_vlan: entered promiscuous mode [ 68.801914][ T5591] veth1_vlan: entered promiscuous mode [ 68.818336][ T5591] veth0_macvtap: entered promiscuous mode [ 68.826382][ T5591] veth1_macvtap: entered promiscuous mode [ 68.836148][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.846804][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.856648][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.867099][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.878088][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.889487][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.900045][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.909951][ T5591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.920470][ T5591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.931048][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.940500][ T5591] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.949246][ T5591] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.958025][ T5591] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.966777][ T5591] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.986489][ T29] kauditd_printk_skb: 787 callbacks suppressed [ 68.986501][ T29] audit: type=1400 audit(1732831431.575:2860): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/root/syzkaller.bk5ARY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.255404][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.895423][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration