last executing test programs: 27.823456333s ago: executing program 3 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x129200, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 27.696348725s ago: executing program 3 (id=374): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESHEX], 0x1, 0x522, &(0x7f0000000a80)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 27.380693059s ago: executing program 3 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22010406, &(0x7f0000000380)={[{@noblock_validity}, {@noblock_validity}, {@data_err_abort}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@usrjquota}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4cf, &(0x7f00000004c0)="$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") 27.139282943s ago: executing program 3 (id=381): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 27.060307894s ago: executing program 3 (id=383): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44891}, 0x0) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) 26.889341186s ago: executing program 3 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 26.836540447s ago: executing program 32 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 2.037632211s ago: executing program 1 (id=1083): io_uring_setup(0x3c92, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffffff, 0x0, 0x8000, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4040) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_usbip_server_init(0x3) getdents64(r0, &(0x7f0000000080)=""/42, 0x2a) 1.500584048s ago: executing program 1 (id=1098): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.440346489s ago: executing program 1 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x17) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) 1.259834532s ago: executing program 4 (id=1107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c020400) r1 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 1.257359002s ago: executing program 1 (id=1108): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_io_uring_setup(0x15d0, &(0x7f0000000900)={0x0, 0x1b5, 0x1000, 0x2, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0, 0x20008000, 0x1}) io_uring_enter(r2, 0x6c38, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 1.200422023s ago: executing program 4 (id=1109): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) close_range(r0, 0xffffffffffffffff, 0x0) 1.174092993s ago: executing program 4 (id=1110): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 964.403616ms ago: executing program 1 (id=1114): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x7) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) 860.168718ms ago: executing program 5 (id=1118): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50000004) 829.754748ms ago: executing program 5 (id=1120): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000002240)='\x00', 0x1, 0x600448e9, 0x0, 0x0) 810.220338ms ago: executing program 1 (id=1122): gettid() r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(0xffffffffffffffff, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001680)=""/199, 0xc7}, {&(0x7f00000004c0)=""/4124, 0x101c}, {&(0x7f00000002c0)=""/83, 0x53}, {&(0x7f0000001500)=""/252, 0xfc}], 0x4}, 0x1}], 0x1, 0x40000002, 0x0) recvmmsg(r1, &(0x7f0000005840), 0x4000000000000ef, 0x2000, 0x0) 794.617318ms ago: executing program 5 (id=1123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r4, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x1, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1fe, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x5, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x7ffffffe, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x1, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0x10000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x7, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x341, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xe, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x88c}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) 757.145679ms ago: executing program 0 (id=1135): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000"], 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000080)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") io_setup(0x200, &(0x7f0000000140)) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(0x0, &(0x7f0000000080)='./file2\x00') 730.552439ms ago: executing program 5 (id=1125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000009006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r2, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r1, 0x7) 490.202852ms ago: executing program 5 (id=1130): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @local}, {0x0, 0x4e22, 0x8}}}}}, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 413.687173ms ago: executing program 2 (id=1131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) pipe(&(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f00000001c0)="96b7cf01", 0x4, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) 413.018333ms ago: executing program 0 (id=1143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 395.290384ms ago: executing program 2 (id=1132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000002100)=""/4096}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xb8, 0x5002004a, 0xb, 0x0, 0xea02, 0x150, 0x3c8, 0x3c8, 0x150, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 393.670524ms ago: executing program 0 (id=1133): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 374.177624ms ago: executing program 0 (id=1134): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x2c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r1}) 364.892544ms ago: executing program 2 (id=1136): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xdfff, 0x4, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3a) timer_create(0x0, 0x0, 0x0) open(0x0, 0x141b42, 0x8) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) 361.078104ms ago: executing program 5 (id=1137): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a3, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 342.721304ms ago: executing program 0 (id=1138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0xfffffffffffffc87, 0x1, {0x11, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 328.433465ms ago: executing program 2 (id=1139): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil) munmap(&(0x7f0000308000/0x4000)=nil, 0x4000) mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil) munmap(&(0x7f0000866000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 277.329015ms ago: executing program 4 (id=1140): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) epoll_create(0x1) close_range(r0, 0xffffffffffffffff, 0x0) 276.697715ms ago: executing program 2 (id=1142): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 221.851457ms ago: executing program 0 (id=1144): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) 221.625757ms ago: executing program 2 (id=1145): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 177.140297ms ago: executing program 4 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x20, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 0s ago: executing program 4 (id=1147): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r5, 0x8f5, 0x0) write$binfmt_script(r5, 0x0, 0xd9) write(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 25.482871][ T29] audit: type=1400 audit(1746948476.140:65): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.483902][ T3303] cgroup: Unknown subsys name 'net' [ 25.505684][ T29] audit: type=1400 audit(1746948476.140:66): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.533033][ T29] audit: type=1400 audit(1746948476.180:67): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.649566][ T3303] cgroup: Unknown subsys name 'cpuset' [ 25.655587][ T3303] cgroup: Unknown subsys name 'rlimit' [ 25.807177][ T29] audit: type=1400 audit(1746948476.460:68): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.831626][ T29] audit: type=1400 audit(1746948476.460:69): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.852276][ T29] audit: type=1400 audit(1746948476.460:70): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.872645][ T29] audit: type=1400 audit(1746948476.460:71): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.878555][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.892970][ T29] audit: type=1400 audit(1746948476.470:72): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.926338][ T29] audit: type=1400 audit(1746948476.470:73): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.949639][ T29] audit: type=1400 audit(1746948476.570:74): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.983408][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.700380][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.786642][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.826730][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.843932][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.851064][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.858149][ T3320] bridge_slave_0: entered allmulticast mode [ 27.864418][ T3320] bridge_slave_0: entered promiscuous mode [ 27.872610][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.879764][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.886907][ T3320] bridge_slave_1: entered allmulticast mode [ 27.893290][ T3320] bridge_slave_1: entered promiscuous mode [ 27.904044][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.918623][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.960532][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.967691][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.974917][ T3315] bridge_slave_0: entered allmulticast mode [ 27.981297][ T3315] bridge_slave_0: entered promiscuous mode [ 27.991470][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.012166][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.019253][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.026375][ T3315] bridge_slave_1: entered allmulticast mode [ 28.032923][ T3315] bridge_slave_1: entered promiscuous mode [ 28.044841][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.068451][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.092055][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.114166][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.121241][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.128502][ T3317] bridge_slave_0: entered allmulticast mode [ 28.134874][ T3317] bridge_slave_0: entered promiscuous mode [ 28.145966][ T3320] team0: Port device team_slave_0 added [ 28.152437][ T3320] team0: Port device team_slave_1 added [ 28.166733][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.173859][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.181003][ T3318] bridge_slave_0: entered allmulticast mode [ 28.187225][ T3318] bridge_slave_0: entered promiscuous mode [ 28.194639][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.201696][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.208898][ T3317] bridge_slave_1: entered allmulticast mode [ 28.215420][ T3317] bridge_slave_1: entered promiscuous mode [ 28.234717][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.241843][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.248961][ T3318] bridge_slave_1: entered allmulticast mode [ 28.255382][ T3318] bridge_slave_1: entered promiscuous mode [ 28.266368][ T3315] team0: Port device team_slave_0 added [ 28.276338][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.283417][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.290744][ T3314] bridge_slave_0: entered allmulticast mode [ 28.297093][ T3314] bridge_slave_0: entered promiscuous mode [ 28.312520][ T3315] team0: Port device team_slave_1 added [ 28.319265][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.328467][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.335499][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.361426][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.372147][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.379274][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.386350][ T3314] bridge_slave_1: entered allmulticast mode [ 28.392760][ T3314] bridge_slave_1: entered promiscuous mode [ 28.404043][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.417202][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.424215][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.450164][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.473965][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.493556][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.500534][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.526550][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.542495][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.552583][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.562353][ T3317] team0: Port device team_slave_0 added [ 28.568946][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.575934][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.602000][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.617115][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.635530][ T3317] team0: Port device team_slave_1 added [ 28.657607][ T3318] team0: Port device team_slave_0 added [ 28.664016][ T3318] team0: Port device team_slave_1 added [ 28.674915][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.681933][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.707832][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.724271][ T3314] team0: Port device team_slave_0 added [ 28.740864][ T3320] hsr_slave_0: entered promiscuous mode [ 28.746795][ T3320] hsr_slave_1: entered promiscuous mode [ 28.760321][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.767267][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.793234][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.804516][ T3314] team0: Port device team_slave_1 added [ 28.810499][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.817430][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.843338][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.871445][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.878457][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.904370][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.925168][ T3315] hsr_slave_0: entered promiscuous mode [ 28.931077][ T3315] hsr_slave_1: entered promiscuous mode [ 28.936757][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.944432][ T3315] Cannot create hsr debugfs directory [ 28.962095][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.969077][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.994979][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.008074][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.015056][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.041075][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.069343][ T3317] hsr_slave_0: entered promiscuous mode [ 29.075268][ T3317] hsr_slave_1: entered promiscuous mode [ 29.081169][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.088701][ T3317] Cannot create hsr debugfs directory [ 29.116242][ T3318] hsr_slave_0: entered promiscuous mode [ 29.122212][ T3318] hsr_slave_1: entered promiscuous mode [ 29.127937][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.135495][ T3318] Cannot create hsr debugfs directory [ 29.178460][ T3314] hsr_slave_0: entered promiscuous mode [ 29.184575][ T3314] hsr_slave_1: entered promiscuous mode [ 29.191231][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.198760][ T3314] Cannot create hsr debugfs directory [ 29.338818][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.351133][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.359650][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.370975][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.391708][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.400887][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.411415][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.424390][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.444495][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.453044][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.462262][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.478036][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.507133][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.517447][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.531083][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.539474][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.583036][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.590238][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.598486][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.607703][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.630047][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.652798][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.664452][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.677938][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.692027][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.704031][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.711083][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.722268][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.734306][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.745636][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.752727][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.761922][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.769044][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.777414][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.784495][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.801272][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.809285][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.816324][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.826331][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.833365][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.875708][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.886136][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.904515][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.911720][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.923772][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.937217][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.947815][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.967700][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.974796][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.998069][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.008585][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.053411][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.068351][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.078015][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.085158][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.102169][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.109390][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.130477][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.145814][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.175765][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.246919][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.325757][ T3317] veth0_vlan: entered promiscuous mode [ 30.348290][ T3317] veth1_vlan: entered promiscuous mode [ 30.362204][ T3315] veth0_vlan: entered promiscuous mode [ 30.395361][ T3320] veth0_vlan: entered promiscuous mode [ 30.402152][ T3318] veth0_vlan: entered promiscuous mode [ 30.414988][ T3317] veth0_macvtap: entered promiscuous mode [ 30.422215][ T3314] veth0_vlan: entered promiscuous mode [ 30.428131][ T3317] veth1_macvtap: entered promiscuous mode [ 30.435351][ T3320] veth1_vlan: entered promiscuous mode [ 30.446441][ T3318] veth1_vlan: entered promiscuous mode [ 30.453464][ T3315] veth1_vlan: entered promiscuous mode [ 30.465030][ T3314] veth1_vlan: entered promiscuous mode [ 30.473777][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.490491][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.506920][ T3314] veth0_macvtap: entered promiscuous mode [ 30.514872][ T3314] veth1_macvtap: entered promiscuous mode [ 30.529200][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.537898][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.546749][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.555548][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.571459][ T3318] veth0_macvtap: entered promiscuous mode [ 30.577797][ T3320] veth0_macvtap: entered promiscuous mode [ 30.584256][ T3315] veth0_macvtap: entered promiscuous mode [ 30.593520][ T3318] veth1_macvtap: entered promiscuous mode [ 30.600503][ T3320] veth1_macvtap: entered promiscuous mode [ 30.610304][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.620824][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.631313][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.638946][ T3315] veth1_macvtap: entered promiscuous mode [ 30.649339][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 30.649351][ T29] audit: type=1400 audit(1746948481.310:84): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.zaFoFm/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.660866][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.681266][ T29] audit: type=1400 audit(1746948481.310:85): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.690101][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.711994][ T29] audit: type=1400 audit(1746948481.310:86): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.zaFoFm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.721790][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.721806][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.746880][ T29] audit: type=1400 audit(1746948481.310:87): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.763462][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.767266][ T29] audit: type=1400 audit(1746948481.310:88): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.zaFoFm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.797763][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.822637][ T29] audit: type=1400 audit(1746948481.310:89): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.zaFoFm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.822668][ T29] audit: type=1400 audit(1746948481.310:90): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.833062][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.844616][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.900075][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.910641][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.920520][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.923885][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.930964][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.930976][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.960002][ T29] audit: type=1400 audit(1746948481.420:91): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.965665][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.988329][ T29] audit: type=1400 audit(1746948481.420:92): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=4149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.002681][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.030542][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.041015][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.050822][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.061247][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.071160][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.081677][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.091501][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.101954][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.112478][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.123924][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.134470][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.144351][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.154807][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.167216][ T29] audit: type=1400 audit(1746948481.820:93): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.178983][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.200483][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.209284][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.217993][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.226696][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.240250][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.248946][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.257711][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.266474][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.276873][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.287379][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.297224][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.307777][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.317625][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.328076][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.338699][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.346281][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.356901][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.366827][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.377261][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.387143][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.397681][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.407516][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.418082][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.428603][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.443743][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.452557][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.461363][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.470154][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.484346][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.493147][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.501948][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.510662][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.934720][ T3505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 31.944295][ T3505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 31.953810][ T3505] netlink: 2 bytes leftover after parsing attributes in process `syz.1.20'. [ 32.025238][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 32.146466][ T3521] TCP: out of memory -- consider tuning tcp_mem [ 32.728228][ T3539] capability: warning: `syz.4.32' uses deprecated v2 capabilities in a way that may be insecure [ 32.941499][ T3538] mmap: syz.4.32 (3538) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.146435][ T3556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.166425][ T3556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.226356][ T3562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 33.245393][ T3564] all: renamed from lo (while UP) [ 33.298287][ T3573] loop0: detected capacity change from 0 to 512 [ 33.323553][ T3573] EXT4-fs warning (device loop0): dx_probe:863: inode #2: comm syz.0.47: dx entry: limit 1024 != root limit 124 [ 33.335513][ T3573] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.47: Corrupt directory, running e2fsck is recommended [ 33.350095][ T3573] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 33.358617][ T3573] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.47: corrupted in-inode xattr: invalid ea_ino [ 33.372118][ T3573] EXT4-fs (loop0): Remounting filesystem read-only [ 33.379437][ T3573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.616467][ T3594] loop1: detected capacity change from 0 to 512 [ 33.623021][ T3594] EXT4-fs: Ignoring removed bh option [ 33.628554][ T3594] EXT4-fs: Ignoring removed orlov option [ 33.635030][ T3594] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 33.679461][ T3598] loop4: detected capacity change from 0 to 128 [ 33.696889][ T3598] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 33.762057][ T3602] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 33.784412][ T3604] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.807259][ T3602] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 33.823063][ T3608] loop3: detected capacity change from 0 to 512 [ 33.830605][ T3608] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.843720][ T3608] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.855319][ T3606] loop4: detected capacity change from 0 to 512 [ 33.862207][ T3608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 33.881901][ T3608] System zones: 1-12 [ 33.883344][ T3606] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.895925][ T3604] wireguard0: entered promiscuous mode [ 33.901471][ T3604] wireguard0: entered allmulticast mode [ 33.907625][ T3608] EXT4-fs (loop3): 1 truncate cleaned up [ 33.913910][ T3608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.921906][ T3606] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.933383][ T3608] EXT4-fs (loop3): shut down requested (2) [ 33.940557][ T3606] EXT4-fs (loop4): 1 truncate cleaned up [ 33.951459][ T3606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.972185][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.039169][ T3618] loop1: detected capacity change from 0 to 512 [ 34.046233][ T3618] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.057287][ T3618] EXT4-fs (loop1): 1 truncate cleaned up [ 34.063584][ T3618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.120217][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.146659][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.283355][ T3636] netlink: 96 bytes leftover after parsing attributes in process `syz.3.74'. [ 34.293970][ T3637] loop4: detected capacity change from 0 to 128 [ 34.395269][ T3644] netlink: 'syz.3.77': attribute type 1 has an invalid length. [ 34.467541][ T3646] ip6erspan0: entered promiscuous mode [ 34.567102][ T3644] syz.3.77 (3644) used greatest stack depth: 10720 bytes left [ 34.660131][ T3652] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 34.705595][ T31] kworker/u8:1: attempt to access beyond end of device [ 34.705595][ T31] loop4: rw=1, sector=145, nr_sectors = 32 limit=128 [ 34.719475][ T31] kworker/u8:1: attempt to access beyond end of device [ 34.719475][ T31] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 34.733645][ T3658] tipc: Started in network mode [ 34.733724][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 34.738635][ T3658] tipc: Node identity 461a1bd6c819, cluster identity 4711 [ 34.754474][ T3658] tipc: Enabled bearer , priority 0 [ 34.759075][ T31] kworker/u8:1: attempt to access beyond end of device [ 34.759075][ T31] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 34.777256][ T31] kworker/u8:1: attempt to access beyond end of device [ 34.777256][ T31] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 34.806067][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.810047][ T31] kworker/u8:1: attempt to access beyond end of device [ 34.810047][ T31] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 34.826590][ T31] kworker/u8:1: attempt to access beyond end of device [ 34.826590][ T31] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 34.843478][ T31] kworker/u8:1: attempt to access beyond end of device [ 34.843478][ T31] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 34.857251][ T31] kworker/u8:1: attempt to access beyond end of device [ 34.857251][ T31] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 34.860532][ T3659] bridge_slave_1 (unregistering): left allmulticast mode [ 34.877617][ T3659] bridge_slave_1 (unregistering): left promiscuous mode [ 34.884687][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.895086][ T3653] tipc: Resetting bearer [ 34.908081][ T3653] tipc: Disabling bearer [ 34.929104][ T31] kworker/u8:1: attempt to access beyond end of device [ 34.929104][ T31] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 34.959076][ T31] kworker/u8:1: attempt to access beyond end of device [ 34.959076][ T31] loop4: rw=1, sector=313, nr_sectors = 8 limit=128 [ 35.053309][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.124753][ T3682] loop4: detected capacity change from 0 to 2048 [ 35.154706][ T3682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.214784][ T3694] batadv1: entered allmulticast mode [ 35.221854][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.222269][ T3694] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 35.250520][ T3694] bridge0: port 2(batadv1) entered blocking state [ 35.257009][ T3694] bridge0: port 2(batadv1) entered disabled state [ 35.265230][ T3694] batadv1: entered promiscuous mode [ 35.271037][ T3694] bridge0: port 2(batadv1) entered blocking state [ 35.277572][ T3694] bridge0: port 2(batadv1) entered forwarding state [ 35.284380][ T3692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 35.332548][ T3701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'. [ 35.533786][ T3710] loop2: detected capacity change from 0 to 2048 [ 35.589915][ T3305] loop2: p1 < > p4 [ 35.594660][ T3305] loop2: p4 size 8388608 extends beyond EOD, truncated [ 35.603931][ T3710] loop2: p1 < > p4 [ 35.608332][ T3710] loop2: p4 size 8388608 extends beyond EOD, truncated [ 35.648337][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 35.658581][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 35.695332][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 35.695374][ T29] audit: type=1326 audit(1746948486.350:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 35.722982][ T3421] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 35.725928][ T29] audit: type=1326 audit(1746948486.350:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 35.734060][ T3421] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 35.766666][ T29] audit: type=1326 audit(1746948486.350:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 35.790064][ T29] audit: type=1326 audit(1746948486.350:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 35.813687][ T29] audit: type=1326 audit(1746948486.350:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 35.837052][ T29] audit: type=1326 audit(1746948486.350:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 35.860373][ T29] audit: type=1326 audit(1746948486.350:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 35.884015][ T29] audit: type=1326 audit(1746948486.350:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 35.907497][ T29] audit: type=1326 audit(1746948486.350:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 35.930845][ T29] audit: type=1326 audit(1746948486.350:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 36.011848][ T3725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.106'. [ 36.021774][ T3391] Process accounting resumed [ 36.076008][ T3728] bridge_slave_0: left allmulticast mode [ 36.081723][ T3728] bridge_slave_0: left promiscuous mode [ 36.087406][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.111233][ T3728] bridge_slave_1: left allmulticast mode [ 36.116928][ T3728] bridge_slave_1: left promiscuous mode [ 36.123389][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.165916][ T3738] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 36.179466][ T3728] bond0: (slave bond_slave_0): Releasing backup interface [ 36.204238][ T3728] bond0: (slave bond_slave_1): Releasing backup interface [ 36.246881][ T3728] team0: Port device team_slave_0 removed [ 36.268335][ T3728] team0: Port device team_slave_1 removed [ 36.283309][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.290864][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.298390][ T3718] Process accounting resumed [ 36.304392][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.311891][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.346740][ C0] hrtimer: interrupt took 39678 ns [ 36.581901][ T3770] tipc: Started in network mode [ 36.586823][ T3770] tipc: Node identity ac14140f, cluster identity 4711 [ 36.629152][ T3770] tipc: New replicast peer: 0.0.255.255 [ 36.634760][ T3770] tipc: Enabled bearer , priority 10 [ 36.718452][ T3777] loop4: detected capacity change from 0 to 512 [ 36.761433][ T3777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.773119][ T3777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.789727][ T3777] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 36.810426][ T3777] EXT4-fs (loop4): 1 truncate cleaned up [ 36.820191][ T3777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.899500][ T3777] syz.4.130 (3777) used greatest stack depth: 10696 bytes left [ 36.915125][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.005366][ T3811] loop4: detected capacity change from 0 to 512 [ 37.018445][ T3811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.036536][ T3811] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.085366][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.088633][ T3819] tipc: Enabled bearer , priority 0 [ 37.105457][ T3818] tipc: Resetting bearer [ 37.141879][ T3818] tipc: Disabling bearer [ 37.461318][ T3848] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 37.512665][ T3848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.567838][ T3852] __nla_validate_parse: 2 callbacks suppressed [ 37.567855][ T3852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 37.629263][ T3852] bond1 (unregistering): Released all slaves [ 37.769393][ T10] tipc: Node number set to 2886997007 [ 37.821126][ T3867] syzkaller0: entered promiscuous mode [ 37.826677][ T3867] syzkaller0: entered allmulticast mode [ 37.998944][ T3895] loop3: detected capacity change from 0 to 1024 [ 38.007491][ T3895] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 38.017356][ T3895] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 38.028310][ T3895] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.052288][ T3895] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.170: unexpected bad inode w/o EXT4_IGET_BAD [ 38.114862][ T3895] EXT4-fs (loop3): no journal found [ 38.162030][ T3908] netlink: 'syz.4.176': attribute type 10 has an invalid length. [ 38.172751][ T3908] syz_tun: entered promiscuous mode [ 38.182059][ T3908] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 38.229690][ T3916] loop1: detected capacity change from 0 to 1024 [ 38.247237][ T3916] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.253794][ T3916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.294097][ T3916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.311530][ T3923] process 'syz.4.181' launched '/dev/fd/5' with NULL argv: empty string added [ 38.325005][ T3923] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.332910][ T3923] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 38.408559][ T3937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.677031][ T3964] loop3: detected capacity change from 0 to 128 [ 38.725548][ T3968] $H: renamed from bond0 (while UP) [ 38.732740][ T3968] $H: entered promiscuous mode [ 38.737781][ T3968] bond_slave_0: entered promiscuous mode [ 38.743713][ T3968] bond_slave_1: entered promiscuous mode [ 38.768428][ T3970] IPv4: Oversized IP packet from 127.202.26.0 [ 38.801115][ T3972] loop3: detected capacity change from 0 to 2048 [ 38.829601][ T3305] loop3: p1 < > p4 [ 38.836834][ T3305] loop3: p4 size 8388608 extends beyond EOD, truncated [ 38.846118][ T3972] loop3: p1 < > p4 [ 38.851451][ T3972] loop3: p4 size 8388608 extends beyond EOD, truncated [ 38.869385][ T3976] : renamed from vlan0 (while UP) [ 38.891700][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 38.891877][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 38.920047][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 38.931308][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.068167][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.230594][ T4003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.208'. [ 39.329364][ T4009] IPv4: Oversized IP packet from 127.202.26.0 [ 39.358749][ T4011] loop1: detected capacity change from 0 to 128 [ 39.424220][ T4011] wireguard0: entered promiscuous mode [ 39.429820][ T4011] wireguard0: entered allmulticast mode [ 39.484020][ T4017] pim6reg1: entered promiscuous mode [ 39.489459][ T4017] pim6reg1: entered allmulticast mode [ 39.642543][ T4026] loop2: detected capacity change from 0 to 2048 [ 39.652725][ T4028] netlink: 'syz.0.220': attribute type 4 has an invalid length. [ 39.716362][ T4026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.960472][ T4026] syz.2.219 (4026) used greatest stack depth: 10232 bytes left [ 40.019493][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.122185][ T4080] infiniband syz2: set down [ 40.126799][ T4080] infiniband syz2: added ipvlan1 [ 40.136696][ T4080] RDS/IB: syz2: added [ 40.140724][ T4080] smc: adding ib device syz2 with port count 1 [ 40.146894][ T4080] smc: ib device syz2 port 1 has pnetid [ 40.556265][ T4129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4129 comm=syz.1.226 [ 40.701294][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 40.701311][ T29] audit: type=1400 audit(1746948491.360:431): avc: denied { kexec_image_load } for pid=4139 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 40.744650][ T4144] gretap0: entered promiscuous mode [ 40.771697][ T4144] gretap0: left promiscuous mode [ 40.886832][ T29] audit: type=1400 audit(1746948491.540:432): avc: denied { listen } for pid=4147 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.906317][ T29] audit: type=1400 audit(1746948491.540:433): avc: denied { accept } for pid=4147 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.020673][ T4154] loop1: detected capacity change from 0 to 512 [ 41.030035][ T29] audit: type=1400 audit(1746948491.690:434): avc: denied { create } for pid=4160 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.037434][ T4154] ======================================================= [ 41.037434][ T4154] WARNING: The mand mount option has been deprecated and [ 41.037434][ T4154] and is ignored by this kernel. Remove the mand [ 41.037434][ T4154] option from the mount to silence this warning. [ 41.037434][ T4154] ======================================================= [ 41.123912][ T4154] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 41.149497][ T29] audit: type=1400 audit(1746948491.810:435): avc: denied { append } for pid=4166 comm="syz.3.241" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.198580][ T4154] syz.1.237 uses obsolete (PF_INET,SOCK_PACKET) [ 41.229933][ T4175] pim6reg1: entered promiscuous mode [ 41.235308][ T4175] pim6reg1: entered allmulticast mode [ 41.416968][ T4192] loop0: detected capacity change from 0 to 1024 [ 41.447755][ T4192] EXT4-fs: Ignoring removed nobh option [ 41.455603][ T4192] ext2: Unknown parameter 'dont_hash' [ 41.486959][ T4192] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 41.525186][ T29] audit: type=1400 audit(1746948492.180:436): avc: denied { bind } for pid=4201 comm="syz.0.255" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.545479][ T29] audit: type=1400 audit(1746948492.180:437): avc: denied { name_bind } for pid=4201 comm="syz.0.255" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 41.566065][ T29] audit: type=1400 audit(1746948492.180:438): avc: denied { node_bind } for pid=4201 comm="syz.0.255" saddr=fe80::bb src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 41.763708][ T29] audit: type=1400 audit(1746948492.420:439): avc: denied { watch watch_reads } for pid=4216 comm="syz.0.262" path="/54/file0" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.932619][ T4225] SELinux: Context is not valid (left unmapped). [ 41.995373][ T4230] loop0: detected capacity change from 0 to 128 [ 42.014222][ T4230] EXT4-fs: Ignoring removed nobh option [ 42.043212][ T4230] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.060352][ T29] audit: type=1400 audit(1746948492.720:440): avc: denied { read } for pid=4239 comm="syz.1.272" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.086934][ T4230] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.176616][ T4248] syzkaller0: entered allmulticast mode [ 42.182681][ T4230] loop0: detected capacity change from 128 to 64 [ 42.195096][ T4248] syzkaller0: entered promiscuous mode [ 42.201335][ T4249] EXT4-fs error (device loop0): ext4_dx_csum_verify:472: inode #2: comm syz.0.268: dir seems corrupt? Run e2fsck -D. [ 42.230312][ T4249] EXT4-fs error (device loop0): dx_probe:793: inode #2: comm syz.0.268: Directory index failed checksum [ 42.246054][ T4255] loop2: detected capacity change from 0 to 1024 [ 42.255412][ T4248] syzkaller0 (unregistering): left promiscuous mode [ 42.262142][ T4248] syzkaller0 (unregistering): left allmulticast mode [ 42.276247][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.278134][ T4255] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 42.295216][ T4255] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 42.307807][ T4255] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.318567][ T4255] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #5: comm syz.2.278: unexpected bad inode w/o EXT4_IGET_BAD [ 42.332209][ T4255] EXT4-fs (loop2): no journal found [ 42.347763][ T4263] ip6gre1: entered allmulticast mode [ 42.395081][ T4269] netlink: '+}[@': attribute type 1 has an invalid length. [ 42.407504][ T4269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.417549][ T4269] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 42.427879][ T4269] bond1 (unregistering): Released all slaves [ 42.444007][ T4273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.284'. [ 42.570134][ T4273] Zero length message leads to an empty skb [ 43.094405][ T4310] loop0: detected capacity change from 0 to 8192 [ 43.141081][ T4319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 43.371449][ T4341] pim6reg1: entered promiscuous mode [ 43.376803][ T4341] pim6reg1: entered allmulticast mode [ 43.521311][ T4353] netlink: 'syz.1.319': attribute type 3 has an invalid length. [ 43.661326][ T4364] Driver unsupported XDP return value 0 on prog (id 245) dev N/A, expect packet loss! [ 43.695479][ T4366] loop2: detected capacity change from 0 to 1024 [ 43.713749][ T4366] EXT4-fs: Ignoring removed orlov option [ 43.726724][ T4366] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 43.772196][ T4366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.956606][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.041327][ T4386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 44.135701][ T4401] veth0_vlan: entered allmulticast mode [ 44.154569][ T4401] veth0_vlan: left promiscuous mode [ 44.159929][ T4401] veth0_vlan: entered promiscuous mode [ 44.203985][ T4406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 44.347265][ T4413] IPv6: sit1: Disabled Multicast RS [ 44.552655][ T4428] veth1_to_bond: entered allmulticast mode [ 44.570289][ T4428] veth1_to_bond: entered promiscuous mode [ 44.588267][ T4428] veth1_to_bond: left promiscuous mode [ 44.593936][ T4428] veth1_to_bond: left allmulticast mode [ 44.734278][ T4441] loop4: detected capacity change from 0 to 164 [ 44.745594][ T4441] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.763130][ T4441] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.773079][ T4441] Symlink component flag not implemented [ 44.778811][ T4441] Symlink component flag not implemented [ 44.811096][ T4441] Symlink component flag not implemented (7) [ 44.817260][ T4441] Symlink component flag not implemented (116) [ 44.929760][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 44.983256][ T4450] vlan2: entered allmulticast mode [ 45.001267][ T4464] loop3: detected capacity change from 0 to 1024 [ 45.008116][ T4454] lo speed is unknown, defaulting to 1000 [ 45.032211][ T4454] lo speed is unknown, defaulting to 1000 [ 45.033196][ T4464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.038150][ T4454] lo speed is unknown, defaulting to 1000 [ 45.056716][ T4454] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 45.068938][ T4454] lo speed is unknown, defaulting to 1000 [ 45.080728][ T4454] lo speed is unknown, defaulting to 1000 [ 45.122840][ T4454] lo speed is unknown, defaulting to 1000 [ 45.128859][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.149462][ T4454] lo speed is unknown, defaulting to 1000 [ 45.155463][ T4454] lo speed is unknown, defaulting to 1000 [ 45.416957][ T4517] loop3: detected capacity change from 0 to 2048 [ 45.434571][ T4517] msdos: Unknown parameter '184467440737095516150xffffffffffffffff' [ 45.673158][ T4535] loop3: detected capacity change from 0 to 512 [ 45.685556][ T4535] EXT4-fs warning (device loop3): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.697168][ T4535] EXT4-fs warning (device loop3): dx_probe:851: Enable large directory feature to access it [ 45.707396][ T4535] EXT4-fs warning (device loop3): dx_probe:936: inode #2: comm syz.3.375: Corrupt directory, running e2fsck is recommended [ 45.824097][ T4535] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 45.852665][ T4535] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.375: corrupted in-inode xattr: e_name out of bounds [ 45.867921][ T4535] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.375: couldn't read orphan inode 15 (err -117) [ 45.881382][ T4535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.936803][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.960891][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 45.960903][ T29] audit: type=1400 audit(1746948496.620:781): avc: denied { mounton } for pid=4574 comm="syz.3.381" path="/68/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 46.047390][ T4576] lo speed is unknown, defaulting to 1000 [ 46.116295][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 46.142885][ T29] audit: type=1400 audit(1746948496.800:782): avc: denied { wake_alarm } for pid=4587 comm="syz.4.387" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.275345][ T4601] x_tables: duplicate underflow at hook 2 [ 46.328949][ T29] audit: type=1400 audit(1746948496.980:783): avc: denied { mounton } for pid=4606 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.382680][ T4613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 46.391942][ T29] audit: type=1400 audit(1746948497.040:784): avc: denied { ioctl } for pid=4611 comm="syz.4.398" path="socket:[7090]" dev="sockfs" ino=7090 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.442490][ T3440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.468772][ T4613] hsr_slave_0: left promiscuous mode [ 46.477062][ T4613] hsr_slave_1: left promiscuous mode [ 46.516846][ T3440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.541379][ T4625] bridge0: port 1(bond0) entered blocking state [ 46.548102][ T4625] bridge0: port 1(bond0) entered disabled state [ 46.559802][ T4625] bond0: entered allmulticast mode [ 46.573270][ T4625] bond0: entered promiscuous mode [ 46.581321][ T4627] : renamed from vlan1 (while UP) [ 46.603671][ T3440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.615586][ T4606] lo speed is unknown, defaulting to 1000 [ 46.630955][ T29] audit: type=1400 audit(1746948497.290:785): avc: denied { mount } for pid=4630 comm="syz.1.404" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 46.653040][ T29] audit: type=1400 audit(1746948497.290:786): avc: denied { mounton } for pid=4630 comm="syz.1.404" path="/94/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 46.721041][ T29] audit: type=1400 audit(1746948497.370:787): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 46.743671][ T3440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.773056][ T4642] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 46.807025][ T4606] chnl_net:caif_netlink_parms(): no params data found [ 46.846541][ T29] audit: type=1400 audit(1746948497.500:788): avc: denied { execute_no_trans } for pid=4649 comm="syz.2.413" path="/75/file1" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.919688][ T4606] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.926838][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.935223][ T4606] bridge_slave_0: entered allmulticast mode [ 46.941887][ T4606] bridge_slave_0: entered promiscuous mode [ 46.948417][ T3440] bridge_slave_1: left allmulticast mode [ 46.954205][ T3440] bridge_slave_1: left promiscuous mode [ 46.959879][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.973882][ T3440] bridge_slave_0: left allmulticast mode [ 46.979655][ T3440] bridge_slave_0: left promiscuous mode [ 46.985366][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.131928][ T3440] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.139625][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 47.149466][ T3440] bond_slave_0: left promiscuous mode [ 47.157309][ T3440] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.166380][ T3440] bond_slave_1: left promiscuous mode [ 47.172475][ T3440] $H (unregistering): Released all slaves [ 47.180486][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.187556][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.194764][ T4606] bridge_slave_1: entered allmulticast mode [ 47.201157][ T4606] bridge_slave_1: entered promiscuous mode [ 47.215454][ T29] audit: type=1400 audit(1746948497.870:789): avc: denied { firmware_load } for pid=4660 comm="syz.2.416" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 47.261469][ T4606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.273358][ T3440] hsr_slave_0: left promiscuous mode [ 47.280654][ T3440] hsr_slave_1: left promiscuous mode [ 47.286392][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.293877][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.301956][ T3440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.309494][ T3440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.320335][ T3440] veth1_macvtap: left promiscuous mode [ 47.325936][ T3440] veth0_macvtap: left promiscuous mode [ 47.331602][ T3440] veth1_vlan: left promiscuous mode [ 47.336872][ T3440] veth0_vlan: left promiscuous mode [ 47.385325][ T29] audit: type=1326 audit(1746948498.040:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8932e969 code=0x7ffc0000 [ 47.431596][ T3440] team0 (unregistering): Port device team_slave_1 removed [ 47.441077][ T3440] team0 (unregistering): Port device team_slave_0 removed [ 47.481953][ T4606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.512824][ T4606] team0: Port device team_slave_0 added [ 47.524141][ T4606] team0: Port device team_slave_1 added [ 47.573742][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.580789][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.606717][ T4606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.659773][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.666767][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.692769][ T4606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.738347][ T4694] pim6reg1: entered promiscuous mode [ 47.743909][ T4694] pim6reg1: entered allmulticast mode [ 47.796032][ T4606] hsr_slave_0: entered promiscuous mode [ 47.804273][ T4606] hsr_slave_1: entered promiscuous mode [ 47.981020][ T4606] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.002143][ T4606] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.033444][ T4606] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.058515][ T4606] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.153181][ T4606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.172072][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 48.190541][ T4606] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.199696][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.206751][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.232513][ T4712] team0: Port device team_slave_0 removed [ 48.242515][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.249593][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.288276][ T4606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.298673][ T4606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.418475][ T4606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.439188][ T4733] IPv4: Oversized IP packet from 127.202.26.0 [ 48.586023][ T4756] netlink: 100 bytes leftover after parsing attributes in process `syz.0.448'. [ 48.656577][ T4767] netlink: zone id is out of range [ 48.661763][ T4767] netlink: zone id is out of range [ 48.666899][ T4767] netlink: zone id is out of range [ 48.672088][ T4767] netlink: zone id is out of range [ 48.677357][ T4767] netlink: zone id is out of range [ 48.682557][ T4767] netlink: zone id is out of range [ 48.687680][ T4767] netlink: zone id is out of range [ 48.692934][ T4767] netlink: zone id is out of range [ 48.698278][ T4767] netlink: zone id is out of range [ 48.728950][ T4606] veth0_vlan: entered promiscuous mode [ 48.759822][ T4606] veth1_vlan: entered promiscuous mode [ 48.783676][ T4606] veth0_macvtap: entered promiscuous mode [ 48.793787][ T4781] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.831256][ T4606] veth1_macvtap: entered promiscuous mode [ 48.853318][ T4781] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.873405][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.883882][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.893709][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.904132][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.914131][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.924574][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.937068][ T4606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.944340][ T4783] lo speed is unknown, defaulting to 1000 [ 48.967703][ T4781] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.997320][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.007865][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.017740][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.028200][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.038038][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.048578][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.059388][ T4606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.079254][ T4781] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.099663][ T4606] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.108411][ T4606] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.117239][ T4606] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.125976][ T4606] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.140921][ T4792] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 49.149365][ T4792] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 49.188272][ T4781] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.206517][ T4781] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.243390][ T4781] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.293398][ T4781] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.477166][ T4832] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 49.486671][ T4832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.494290][ T4832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.503592][ T4832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.511078][ T4832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.696162][ T4846] syzkaller0: entered promiscuous mode [ 49.701722][ T4846] syzkaller0: entered allmulticast mode [ 50.168850][ T4857] netlink: 'syz.4.485': attribute type 7 has an invalid length. [ 50.176672][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 50.210223][ T4862] netlink: 'syz.4.486': attribute type 39 has an invalid length. [ 50.220381][ T4862] bond0: (slave syz_tun): Releasing backup interface [ 50.221536][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.234913][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.242736][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.250814][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.258573][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.266373][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.274333][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.282128][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.289922][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.297708][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.305456][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.313280][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.321105][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.328901][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.337170][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.345095][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.352898][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.360695][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.368417][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.376142][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.383922][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.391651][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.399547][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.407295][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.415050][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.422803][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.430613][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.438320][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.446065][ T10] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 50.489212][ T10] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 50.575251][ T4876] veth0: entered promiscuous mode [ 50.580786][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 50.624697][ T4880] syzkaller0: entered promiscuous mode [ 50.630329][ T4880] syzkaller0: entered allmulticast mode [ 50.867803][ T4896] vhci_hcd: invalid port number 224 [ 50.965178][ T4910] 9pnet: p9_errstr2errno: server reported unknown error [ 50.977975][ T4908] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 50.984008][ T4908] syzkaller0: Linktype set failed because interface is up [ 51.136778][ T4929] loop4: detected capacity change from 0 to 164 [ 51.158683][ T4929] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.169106][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 51.169120][ T29] audit: type=1326 audit(1746948501.820:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 51.169344][ T4929] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.175313][ T29] audit: type=1326 audit(1746948501.830:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 51.231871][ T4929] Symlink component flag not implemented [ 51.237531][ T4929] Symlink component flag not implemented [ 51.244246][ T4929] Symlink component flag not implemented (7) [ 51.250285][ T4929] Symlink component flag not implemented (116) [ 51.256803][ T29] audit: type=1326 audit(1746948501.920:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 51.282650][ T29] audit: type=1326 audit(1746948501.920:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.4.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 51.373570][ T4955] loop5: detected capacity change from 0 to 512 [ 51.381229][ T4955] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.397615][ T4955] EXT4-fs (loop5): 1 truncate cleaned up [ 51.410092][ T4955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.524688][ T4606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.659473][ T29] audit: type=1400 audit(1746948502.320:866): avc: denied { create } for pid=4970 comm="syz.5.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.700119][ T29] audit: type=1400 audit(1746948502.340:867): avc: denied { listen } for pid=4970 comm="syz.5.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.746968][ T29] audit: type=1326 audit(1746948502.400:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 51.770227][ T29] audit: type=1326 audit(1746948502.400:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 51.810144][ T29] audit: type=1326 audit(1746948502.400:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 51.833448][ T29] audit: type=1326 audit(1746948502.400:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdbf1e969 code=0x7ffc0000 [ 51.879363][ T4980] SELinux: failed to load policy [ 52.167113][ T4992] lo speed is unknown, defaulting to 1000 [ 52.320948][ T5000] sch_fq: defrate 0 ignored. [ 52.607364][ T5016] pim6reg1: entered promiscuous mode [ 52.612885][ T5016] pim6reg1: entered allmulticast mode [ 52.666519][ T3391] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.679305][ T3391] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.092888][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 53.101764][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 53.150738][ T5042] ref_ctr increment failed for inode: 0x29d offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811fd36e00 [ 53.162181][ T5044] loop4: detected capacity change from 0 to 2048 [ 53.170392][ T5042] uprobe: syz.1.558:5042 failed to unregister, leaking uprobe [ 53.180267][ T5044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.192559][ T5044] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.204521][ T5044] syz.4.559 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.231639][ T5044] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.559: bg 0: block 345: padding at end of block bitmap is not set [ 53.246161][ T5044] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 241 with error 117 [ 53.258728][ T5044] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.258728][ T5044] [ 53.287954][ T5044] syz.4.559 (5044) used greatest stack depth: 9592 bytes left [ 53.301870][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.367066][ T5057] lo speed is unknown, defaulting to 1000 [ 53.389414][ T5065] bond1: entered promiscuous mode [ 53.394528][ T5065] bond1: entered allmulticast mode [ 53.400417][ T5065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.411732][ T5065] bond1 (unregistering): Released all slaves [ 53.488423][ T5070] loop5: detected capacity change from 0 to 8192 [ 53.767708][ T5108] pim6reg1: entered promiscuous mode [ 53.773061][ T5108] pim6reg1: entered allmulticast mode [ 54.083151][ T5130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.589'. [ 54.147325][ T5140] xt_hashlimit: size too large, truncated to 1048576 [ 54.655121][ T5159] loop5: detected capacity change from 0 to 1024 [ 54.662108][ T5159] EXT4-fs: Ignoring removed nobh option [ 54.677457][ T5159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.691970][ T5159] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.598: Allocating blocks 385-513 which overlap fs metadata [ 54.710231][ T5159] EXT4-fs (loop5): pa ffff888106e0a070: logic 16, phys. 129, len 24 [ 54.718262][ T5159] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 54.742069][ T4606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.760203][ T5170] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 54.843343][ T5180] netlink: 48 bytes leftover after parsing attributes in process `syz.5.607'. [ 54.888710][ T5188] tipc: Started in network mode [ 54.893692][ T5188] tipc: Node identity ac14140f, cluster identity 4711 [ 54.906878][ T5188] tipc: New replicast peer: 255.255.255.223 [ 54.912919][ T5188] tipc: Enabled bearer , priority 10 [ 55.165060][ T5209] loop5: detected capacity change from 0 to 128 [ 55.178283][ T5209] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.263972][ T5218] netlink: 'syz.2.624': attribute type 16 has an invalid length. [ 55.272012][ T5218] netlink: 'syz.2.624': attribute type 17 has an invalid length. [ 55.285183][ T5209] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.321153][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 55.354322][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 55.377979][ T5218] net_ratelimit: 75 callbacks suppressed [ 55.378063][ T5218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.437863][ T4606] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.636649][ T5239] loop5: detected capacity change from 0 to 128 [ 55.733555][ T5239] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.760281][ T5239] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.029054][ T3395] tipc: Node number set to 2886997007 [ 56.175110][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 56.198522][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 56.228521][ T5262] IPVS: Error joining to the multicast group [ 56.325909][ T5273] lo speed is unknown, defaulting to 1000 [ 56.476476][ T5288] bridge: RTM_NEWNEIGH with invalid ether address [ 56.485992][ T3395] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 56.493618][ T3395] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 56.501065][ T3395] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 56.517543][ T3395] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 56.560505][ T4606] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.731524][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 56.731582][ T29] audit: type=1400 audit(1746948507.390:1001): avc: denied { create } for pid=5303 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.764774][ T29] audit: type=1400 audit(1746948507.420:1002): avc: denied { ioctl } for pid=5303 comm="syz.4.659" path="socket:[9997]" dev="sockfs" ino=9997 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.814842][ T29] audit: type=1400 audit(1746948507.450:1003): avc: denied { write } for pid=5303 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.887730][ T29] audit: type=1400 audit(1746948507.540:1004): avc: denied { create } for pid=5314 comm="syz.5.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.911170][ T29] audit: type=1400 audit(1746948507.570:1005): avc: denied { bind } for pid=5314 comm="syz.5.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.932158][ T29] audit: type=1400 audit(1746948507.590:1006): avc: denied { append } for pid=5313 comm="syz.4.663" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.169104][ T29] audit: type=1326 audit(1746948507.820:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8932e969 code=0x7ffc0000 [ 57.192555][ T29] audit: type=1326 audit(1746948507.820:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8932e969 code=0x7ffc0000 [ 57.215960][ T29] audit: type=1326 audit(1746948507.820:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8b8932e969 code=0x7ffc0000 [ 57.239728][ T29] audit: type=1326 audit(1746948507.820:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8932e969 code=0x7ffc0000 [ 57.350499][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 57.405915][ T5340] pim6reg1: entered promiscuous mode [ 57.411492][ T5340] pim6reg1: entered allmulticast mode [ 57.594048][ T5312] syz.1.658 (5312) used greatest stack depth: 9512 bytes left [ 57.831654][ T5362] block device autoloading is deprecated and will be removed. [ 57.970590][ T5302] syz.1.658 (5302) used greatest stack depth: 7208 bytes left [ 58.016371][ T5380] loop5: detected capacity change from 0 to 2048 [ 58.044119][ T5380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.066939][ T5380] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.092711][ T5389] loop0: detected capacity change from 0 to 512 [ 58.093732][ T5385] bridge_slave_0: left allmulticast mode [ 58.104779][ T5385] bridge_slave_0: left promiscuous mode [ 58.110664][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.142524][ T5385] bridge_slave_1: left allmulticast mode [ 58.148247][ T5385] bridge_slave_1: left promiscuous mode [ 58.154011][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.170699][ T5389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.185184][ T5385] bond0: (slave bond_slave_0): Releasing backup interface [ 58.189121][ T5389] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.208084][ T5385] bond0: (slave bond_slave_1): Releasing backup interface [ 58.233723][ T5389] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm +}[@: corrupted inode contents [ 58.250326][ T5385] team0: Port device team_slave_1 removed [ 58.259523][ T5389] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm +}[@: mark_inode_dirty error [ 58.271454][ T5385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.279084][ T5385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.289536][ T5389] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm +}[@: corrupted inode contents [ 58.302202][ T5389] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm +}[@: mark_inode_dirty error [ 58.315412][ T5385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.322892][ T5385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.364690][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.382800][ T3393] lo speed is unknown, defaulting to 1000 [ 58.382823][ T5378] lo speed is unknown, defaulting to 1000 [ 58.507955][ T5409] loop0: detected capacity change from 0 to 512 [ 58.535468][ T5409] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.702: corrupted in-inode xattr: invalid ea_ino [ 58.566448][ T5409] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.702: couldn't read orphan inode 15 (err -117) [ 58.623093][ T5409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.706515][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.741559][ T5426] tipc: New replicast peer: 255.255.255.83 [ 58.747493][ T5426] tipc: Enabled bearer , priority 10 [ 58.862630][ T5440] pim6reg1: entered promiscuous mode [ 58.868019][ T5440] pim6reg1: entered allmulticast mode [ 59.170515][ T5455] pim6reg1: entered promiscuous mode [ 59.175872][ T5455] pim6reg1: entered allmulticast mode [ 59.192247][ T5452] lo speed is unknown, defaulting to 1000 [ 59.211553][ T5380] syz.5.693 (5380) used greatest stack depth: 6832 bytes left [ 59.232976][ T4606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.288207][ T5458] pim6reg1: entered promiscuous mode [ 59.293584][ T5458] pim6reg1: entered allmulticast mode [ 59.386264][ T5464] openvswitch: netlink: Message has 6 unknown bytes. [ 59.896058][ T5495] msdos: Unknown parameter 'a?eIWYwE幦U7Ve@LSa-}jz3B.p;q+a8P?cez-i@../PAI(3#V#LJd-]!h> qXx餉[A3V5^mxr1Aj4aġ)' [ 59.988798][ T3395] tipc: Node number set to 2382568406 [ 60.052330][ T5505] xt_hashlimit: size too large, truncated to 1048576 [ 60.107842][ T5509] veth1_macvtap: left promiscuous mode [ 60.113527][ T5509] macsec0: entered promiscuous mode [ 60.223231][ T5514] netlink: 'syz.5.744': attribute type 4 has an invalid length. [ 60.287570][ T5518] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 60.305812][ T5518] SELinux: failed to load policy [ 60.404122][ T5527] vlan3: entered allmulticast mode [ 60.413772][ T5527] dummy0: entered allmulticast mode [ 60.615268][ T5549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.760'. [ 60.718229][ T5556] SELinux: failed to load policy [ 60.784238][ T3395] IPVS: starting estimator thread 0... [ 60.879065][ T5559] IPVS: using max 2880 ests per chain, 144000 per kthread [ 61.034417][ T5582] Invalid ELF header magic: != ELF [ 61.214730][ T5602] pim6reg1: entered promiscuous mode [ 61.220142][ T5602] pim6reg1: entered allmulticast mode [ 61.338352][ T5621] loop5: detected capacity change from 0 to 1024 [ 61.346408][ T5621] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.357371][ T5621] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.372806][ T5621] JBD2: no valid journal superblock found [ 61.378544][ T5621] EXT4-fs (loop5): Could not load journal inode [ 61.389110][ T5623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.398600][ T5623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.722757][ T5653] tipc: Started in network mode [ 61.727703][ T5653] tipc: Node identity ac14140f, cluster identity 4711 [ 61.735631][ T5653] tipc: New replicast peer: 10.1.1.2 [ 61.741128][ T5653] tipc: Enabled bearer , priority 10 [ 61.778501][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 61.778515][ T29] audit: type=1400 audit(1746948512.496:1363): avc: denied { mounton } for pid=5656 comm="syz.4.806" path="/184/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 61.811814][ T29] audit: type=1400 audit(1746948512.536:1364): avc: denied { mount } for pid=5656 comm="syz.4.806" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.833818][ T29] audit: type=1400 audit(1746948512.536:1365): avc: denied { unmount } for pid=5656 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.874834][ T29] audit: type=1400 audit(1746948512.596:1366): avc: denied { create } for pid=5662 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.897020][ T29] audit: type=1400 audit(1746948512.616:1367): avc: denied { write } for pid=5662 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.917163][ T29] audit: type=1400 audit(1746948512.616:1368): avc: denied { nlmsg_write } for pid=5662 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.942096][ T29] audit: type=1400 audit(1746948512.666:1369): avc: denied { create } for pid=5664 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.000490][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 62.012118][ T5673] ip6gre1: entered allmulticast mode [ 62.098271][ T5686] syzkaller0: entered promiscuous mode [ 62.103955][ T5686] syzkaller0: entered allmulticast mode [ 62.121314][ T29] audit: type=1400 audit(1746948512.846:1370): avc: denied { bind } for pid=5690 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.141027][ T29] audit: type=1400 audit(1746948512.846:1371): avc: denied { write } for pid=5690 comm="syz.4.821" path="socket:[11151]" dev="sockfs" ino=11151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.248316][ T29] audit: type=1400 audit(1746948512.966:1372): avc: denied { write } for pid=5700 comm="syz.1.826" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.272109][ T5701] sd 0:0:1:0: device reset [ 62.413735][ T5719] syzkaller0: entered promiscuous mode [ 62.419303][ T5719] syzkaller0: entered allmulticast mode [ 62.426348][ T3440] syzkaller0: tun_net_xmit 48 [ 62.428143][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 62.439123][ T5719] syzkaller0: tun_net_xmit 1280 [ 62.439883][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 62.444788][ T5719] syzkaller0: create flow: hash 2017310815 index 1 [ 62.470441][ T5718] syzkaller0: delete flow: hash 2017310815 index 1 [ 62.580658][ T5730] netlink: 80 bytes leftover after parsing attributes in process `syz.4.840'. [ 62.627437][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.841'. [ 62.702904][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.710324][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.717732][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.725183][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.732610][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.740031][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 62.747451][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.754920][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.762396][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.769872][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.777258][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.784695][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 62.792200][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.799735][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.807126][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.814544][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.821988][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.829457][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.836827][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.844273][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.851682][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.859104][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.866483][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.873997][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.881427][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.888806][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.896311][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.903721][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.911155][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.918587][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.925993][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.933438][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.940859][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 62.948318][ T3395] tipc: Node number set to 2886997007 [ 62.954714][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.082798][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.857'. [ 63.091840][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.857'. [ 63.100758][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.857'. [ 63.158117][ T5782] unsupported nla_type 52263 [ 63.315163][ T5802] program syz.2.870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.341956][ T5804] IPv4: Oversized IP packet from 127.202.26.0 [ 63.473769][ T5813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.875'. [ 63.646942][ T5819] loop5: detected capacity change from 0 to 512 [ 63.665719][ T5819] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.675016][ T5821] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 63.692641][ T5821] SELinux: failed to load policy [ 63.700542][ T5819] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.728356][ T4606] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 64.576801][ T5920] syzkaller1: entered promiscuous mode [ 64.582568][ T5920] syzkaller1: entered allmulticast mode [ 64.831000][ T5947] tipc: Enabled bearer , priority 0 [ 64.838241][ T5946] tipc: Resetting bearer [ 64.861554][ T5946] tipc: Disabling bearer [ 64.988444][ T5960] loop5: detected capacity change from 0 to 512 [ 65.001790][ T5960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.019498][ T5960] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.052200][ T4606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.071778][ T5956] xt_hashlimit: max too large, truncated to 1048576 [ 65.181830][ T5982] syzkaller0: entered promiscuous mode [ 65.187343][ T5982] syzkaller0: entered allmulticast mode [ 65.293869][ T5988] pim6reg1: entered promiscuous mode [ 65.299260][ T5988] pim6reg1: entered allmulticast mode [ 65.306213][ T5990] loop5: detected capacity change from 0 to 1024 [ 65.313484][ T5990] EXT4-fs: Ignoring removed orlov option [ 65.319300][ T5990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.334786][ T5990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.421294][ T4606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.609747][ T6012] syzkaller0: entered promiscuous mode [ 65.615346][ T6012] syzkaller0: entered allmulticast mode [ 65.884887][ T6031] __nla_validate_parse: 9 callbacks suppressed [ 65.884899][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 65.901236][ T6031] bond0: left allmulticast mode [ 65.906175][ T6031] bond0: left promiscuous mode [ 65.911152][ T6031] bridge0: port 1(bond0) entered disabled state [ 66.102817][ T6042] netlink: 'syz.2.975': attribute type 4 has an invalid length. [ 66.110684][ T6042] netlink: 152 bytes leftover after parsing attributes in process `syz.2.975'. [ 66.144419][ T6042] : renamed from bond0 (while UP) [ 66.174744][ T6045] pim6reg1: entered promiscuous mode [ 66.180127][ T6045] pim6reg1: entered allmulticast mode [ 66.325555][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 66.365467][ T6055] bond_slave_1: mtu greater than device maximum [ 66.378699][ T6053] SELinux: failed to load policy [ 66.443947][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 66.521315][ T6070] SELinux: failed to load policy [ 66.775968][ T6100] SELinux: failed to load policy [ 67.286842][ T6108] loop5: detected capacity change from 0 to 512 [ 67.301341][ T6108] EXT4-fs (loop5): 1 orphan inode deleted [ 67.307562][ T6108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.320270][ T6108] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.321128][ T265] __quota_error: 164 callbacks suppressed [ 67.321142][ T265] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 67.346282][ T265] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 67.347918][ T29] audit: type=1400 audit(1746948518.066:1536): avc: denied { read write } for pid=6107 comm="syz.5.1005" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.380381][ T29] audit: type=1400 audit(1746948518.066:1537): avc: denied { open } for pid=6107 comm="syz.5.1005" path="/125/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.409640][ T6108] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #18: comm syz.5.1005: corrupted inode contents [ 67.422105][ T6108] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #18: comm syz.5.1005: mark_inode_dirty error [ 67.433558][ T6108] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #18: comm syz.5.1005: corrupted inode contents [ 67.445555][ T29] audit: type=1400 audit(1746948518.126:1538): avc: denied { ioctl } for pid=6107 comm="syz.5.1005" path="/125/file1/file1" dev="loop5" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.471123][ T6108] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.1005: mark_inode_dirty error [ 67.485615][ T6108] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.1005: mark inode dirty (error -117) [ 67.499162][ T6108] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -117) [ 67.538515][ T4606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.678186][ T6128] SELinux: failed to load policy [ 67.809288][ T29] audit: type=1326 audit(1746948518.526:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6146 comm="syz.0.1022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b8932e969 code=0x0 [ 67.937315][ T29] audit: type=1400 audit(1746948518.656:1540): avc: denied { create } for pid=6157 comm="syz.5.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.967655][ T29] audit: type=1400 audit(1746948518.686:1541): avc: denied { write } for pid=6157 comm="syz.5.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.988403][ T6158] infiniband syz!: set active [ 67.993226][ T6158] infiniband syz!: added team_slave_0 [ 68.005322][ T6158] RDS/IB: syz!: added [ 68.009429][ T6158] smc: adding ib device syz! with port count 1 [ 68.015576][ T6158] smc: ib device syz! port 1 has pnetid [ 68.679743][ T6165] SELinux: failed to load policy [ 68.905661][ T6194] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 68.940966][ T29] audit: type=1326 audit(1746948519.666:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f142584e969 code=0x0 [ 68.972921][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 68.980377][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 68.987814][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 68.996727][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 69.004161][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 69.011689][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 69.019103][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 69.026534][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 69.033937][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 69.041480][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 69.048889][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 69.056302][ T3458] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 69.066400][ T3458] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.02 Device [syz0] on syz1 [ 69.077787][ T6205] pim6reg1: entered promiscuous mode [ 69.083257][ T6205] pim6reg1: entered allmulticast mode [ 69.627993][ T29] audit: type=1400 audit(1746948520.346:1543): avc: denied { ioctl } for pid=6213 comm="syz.4.1050" path="socket:[13640]" dev="sockfs" ino=13640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.444271][ T29] audit: type=1400 audit(1746948521.166:1544): avc: denied { create } for pid=6220 comm="syz.5.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.572739][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.580341][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.587736][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.615229][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.622676][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.630206][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.637600][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.645062][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.652485][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.659945][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.667333][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.674810][ T3458] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 70.697323][ T6246] pim6reg1: entered promiscuous mode [ 70.702791][ T6246] pim6reg1: entered allmulticast mode [ 70.714366][ T3458] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.02 Device [syz0] on syz1 [ 70.810361][ T6259] bond1: entered promiscuous mode [ 70.815422][ T6259] bond1: entered allmulticast mode [ 70.820711][ T6259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.835269][ T6259] bond1 (unregistering): Released all slaves [ 70.881040][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 70.894207][ T6271] netlink: 'syz.0.1072': attribute type 3 has an invalid length. [ 70.938604][ T6278] loop5: detected capacity change from 0 to 256 [ 71.005715][ T6290] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 71.012376][ T6290] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 71.013988][ T6294] syzkaller0: entered allmulticast mode [ 71.019980][ T6290] vhci_hcd vhci_hcd.0: Device attached [ 71.027268][ T6294] syzkaller0: entered promiscuous mode [ 71.039632][ T6291] vhci_hcd: connection closed [ 71.040753][ T4122] vhci_hcd: stop threads [ 71.049720][ T4122] vhci_hcd: release socket [ 71.054220][ T4122] vhci_hcd: disconnect device [ 71.060948][ T6294] syzkaller0 (unregistering): left promiscuous mode [ 71.067553][ T6294] syzkaller0 (unregistering): left allmulticast mode [ 71.243368][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.256480][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.664892][ T6336] batadv1: entered allmulticast mode [ 71.682625][ T6336] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 71.878866][ T6356] TCP: out of memory -- consider tuning tcp_mem [ 72.076823][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1113'. [ 72.091791][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1113'. [ 72.115825][ T6366] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1113'. [ 72.151705][ T6368] wireguard0: entered promiscuous mode [ 72.157199][ T6368] wireguard0: entered allmulticast mode [ 72.456017][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 72.456030][ T29] audit: type=1400 audit(1746948523.176:1577): avc: denied { mount } for pid=6404 comm="syz.2.1128" name="/" dev="ramfs" ino=14419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 72.720496][ T6426] loop5: detected capacity change from 0 to 512 [ 72.732386][ T6426] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.750627][ T6426] EXT4-fs (loop5): 1 truncate cleaned up [ 72.757489][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 72.766688][ T29] audit: type=1400 audit(1746948523.476:1578): avc: denied { execute } for pid=6431 comm="syz.2.1139" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 72.794866][ T6426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.212382][ T6426] ================================================================== [ 73.220681][ T6426] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 73.227887][ T6426] [ 73.230205][ T6426] write to 0xffff888106dea624 of 4 bytes by task 6442 on cpu 0: [ 73.237831][ T6426] __xa_set_mark+0x172/0x1a0 [ 73.242430][ T6426] __folio_mark_dirty+0x3af/0x4c0 [ 73.247454][ T6426] mark_buffer_dirty+0x11e/0x210 [ 73.252394][ T6426] block_write_end+0x12e/0x210 [ 73.257166][ T6426] ext4_write_end+0x13a/0x730 [ 73.261844][ T6426] generic_perform_write+0x30f/0x490 [ 73.267147][ T6426] ext4_buffered_write_iter+0x1ee/0x3c0 [ 73.272713][ T6426] ext4_file_write_iter+0x383/0xf00 [ 73.277914][ T6426] iter_file_splice_write+0x5ef/0x970 [ 73.283287][ T6426] direct_splice_actor+0x153/0x2a0 [ 73.288400][ T6426] splice_direct_to_actor+0x30f/0x680 [ 73.293777][ T6426] do_splice_direct+0xda/0x150 [ 73.298553][ T6426] do_sendfile+0x380/0x640 [ 73.302980][ T6426] __x64_sys_sendfile64+0x105/0x150 [ 73.308195][ T6426] x64_sys_call+0xb39/0x2fb0 [ 73.312800][ T6426] do_syscall_64+0xd0/0x1a0 [ 73.317311][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.323212][ T6426] [ 73.325530][ T6426] read to 0xffff888106dea624 of 4 bytes by task 6426 on cpu 1: [ 73.333067][ T6426] xas_find_marked+0x5dc/0x620 [ 73.337831][ T6426] find_get_entry+0x5d/0x380 [ 73.342427][ T6426] filemap_get_folios_tag+0x92/0x210 [ 73.347722][ T6426] filemap_fdatawait_range+0x88/0x1d0 [ 73.353101][ T6426] __writeback_single_inode+0xdb/0x7c0 [ 73.358586][ T6426] writeback_single_inode+0x167/0x3e0 [ 73.363984][ T6426] sync_inode_metadata+0x5b/0x90 [ 73.368931][ T6426] generic_buffers_fsync_noflush+0xd9/0x120 [ 73.374831][ T6426] ext4_sync_file+0x1ab/0x690 [ 73.379521][ T6426] vfs_fsync_range+0x10a/0x130 [ 73.384291][ T6426] ext4_buffered_write_iter+0x34f/0x3c0 [ 73.389847][ T6426] ext4_file_write_iter+0x383/0xf00 [ 73.395071][ T6426] iter_file_splice_write+0x5ef/0x970 [ 73.400446][ T6426] direct_splice_actor+0x153/0x2a0 [ 73.405558][ T6426] splice_direct_to_actor+0x30f/0x680 [ 73.410940][ T6426] do_splice_direct+0xda/0x150 [ 73.415711][ T6426] do_sendfile+0x380/0x640 [ 73.420146][ T6426] __x64_sys_sendfile64+0x105/0x150 [ 73.425356][ T6426] x64_sys_call+0xb39/0x2fb0 [ 73.429948][ T6426] do_syscall_64+0xd0/0x1a0 [ 73.434482][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.440394][ T6426] [ 73.442714][ T6426] value changed: 0x00000021 -> 0x0a000021 [ 73.448426][ T6426] [ 73.450747][ T6426] Reported by Kernel Concurrency Sanitizer on: [ 73.456909][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.5.1137 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 73.469323][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 73.479374][ T6426] ================================================================== [ 73.678279][ T4606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.