last executing test programs: 7.211447467s ago: executing program 1 (id=495): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0xb, 0x0, &(0x7f0000000040)) 7.092135828s ago: executing program 1 (id=497): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000013f, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008"], 0x38}, 0x0) 7.001175015s ago: executing program 1 (id=498): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 6.974941798s ago: executing program 1 (id=499): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket(0x200000000000011, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 6.95464545s ago: executing program 1 (id=500): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}]}, 0x1, 0xb80, &(0x7f00000017c0)="$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") r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) 6.897516304s ago: executing program 1 (id=501): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r2, 0x201, &(0x7f0000000000)) 2.252743372s ago: executing program 3 (id=638): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x14507e, 0x0) sendfile(r2, r2, 0x0, 0x100000000) 2.252107462s ago: executing program 2 (id=639): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x28101, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) write$cgroup_type(r1, &(0x7f0000000380), 0x20000382) 2.091992116s ago: executing program 3 (id=642): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) readv(r1, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/198, 0xc6}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) 2.091653366s ago: executing program 2 (id=651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x8c, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x8c}}, 0x0) 2.020093343s ago: executing program 2 (id=643): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0x0, 0x1}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 1.475977881s ago: executing program 0 (id=652): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f8) sendfile(r2, r2, 0x0, 0x100000008) 1.378035359s ago: executing program 0 (id=655): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r1, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) 1.377612499s ago: executing program 4 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) 1.241060761s ago: executing program 3 (id=656): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303120008ff6000000002000020d3"]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) timer_create(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.240967011s ago: executing program 4 (id=657): socket$kcm(0x23, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlock(&(0x7f0000f4b000/0x2000)=nil, 0x2000) 1.199783895s ago: executing program 4 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000004000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 397.544995ms ago: executing program 3 (id=659): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='cpu<00||!') 397.347485ms ago: executing program 4 (id=660): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x3c}}, 0x0) 395.479745ms ago: executing program 0 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r2}, 0x38) 395.291855ms ago: executing program 2 (id=661): syz_clone(0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) 95.988942ms ago: executing program 0 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) 95.796792ms ago: executing program 2 (id=663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utimes(0x0, 0x0) 93.885082ms ago: executing program 3 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 93.521812ms ago: executing program 4 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x1018}, './file0\x00'}) 50.910136ms ago: executing program 3 (id=667): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02150000e578a6ed5bb9c26ed697944d4b06c19897", 0x29) 50.681576ms ago: executing program 4 (id=668): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="2a050105"], 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) 50.219056ms ago: executing program 2 (id=678): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 48.121116ms ago: executing program 0 (id=669): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x28101, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) write$cgroup_type(r1, &(0x7f0000000380), 0x20000382) 0s ago: executing program 0 (id=671): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5f}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) kernel console output (not intermixed with test programs): [ 18.095152][ T29] audit: type=1400 audit(1726028863.360:81): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. [ 22.100320][ T29] audit: type=1400 audit(1726028867.360:82): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.101247][ T3249] cgroup: Unknown subsys name 'net' [ 22.123114][ T29] audit: type=1400 audit(1726028867.360:83): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.150471][ T29] audit: type=1400 audit(1726028867.390:84): avc: denied { unmount } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.316534][ T3249] cgroup: Unknown subsys name 'rlimit' [ 22.408576][ T29] audit: type=1400 audit(1726028867.670:85): avc: denied { setattr } for pid=3249 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.431878][ T29] audit: type=1400 audit(1726028867.670:86): avc: denied { create } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.452434][ T29] audit: type=1400 audit(1726028867.670:87): avc: denied { write } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.459948][ T3251] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.472778][ T29] audit: type=1400 audit(1726028867.670:88): avc: denied { read } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.501630][ T29] audit: type=1400 audit(1726028867.670:89): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.526395][ T29] audit: type=1400 audit(1726028867.670:90): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.549849][ T29] audit: type=1400 audit(1726028867.740:91): avc: denied { relabelto } for pid=3251 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.579004][ T3249] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.577821][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 23.629811][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 23.666818][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 23.718048][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.725139][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.732273][ T3260] bridge_slave_0: entered allmulticast mode [ 23.738755][ T3260] bridge_slave_0: entered promiscuous mode [ 23.749613][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 23.758076][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.765195][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.772347][ T3267] bridge_slave_0: entered allmulticast mode [ 23.778705][ T3267] bridge_slave_0: entered promiscuous mode [ 23.785381][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 23.794124][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.801282][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.808457][ T3267] bridge_slave_1: entered allmulticast mode [ 23.814887][ T3267] bridge_slave_1: entered promiscuous mode [ 23.821058][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.828128][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.835215][ T3260] bridge_slave_1: entered allmulticast mode [ 23.841589][ T3260] bridge_slave_1: entered promiscuous mode [ 23.892456][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.899648][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.906770][ T3258] bridge_slave_0: entered allmulticast mode [ 23.912993][ T3258] bridge_slave_0: entered promiscuous mode [ 23.923628][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.935610][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.945738][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.954894][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.961959][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.969251][ T3258] bridge_slave_1: entered allmulticast mode [ 23.975690][ T3258] bridge_slave_1: entered promiscuous mode [ 23.986947][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.041765][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.048986][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.056131][ T3264] bridge_slave_0: entered allmulticast mode [ 24.062550][ T3264] bridge_slave_0: entered promiscuous mode [ 24.069516][ T3267] team0: Port device team_slave_0 added [ 24.076078][ T3267] team0: Port device team_slave_1 added [ 24.082626][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.096188][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.103251][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.110414][ T3259] bridge_slave_0: entered allmulticast mode [ 24.116826][ T3259] bridge_slave_0: entered promiscuous mode [ 24.123849][ T3260] team0: Port device team_slave_0 added [ 24.129798][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.136883][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.144056][ T3264] bridge_slave_1: entered allmulticast mode [ 24.150468][ T3264] bridge_slave_1: entered promiscuous mode [ 24.157427][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.173918][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.180880][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.206890][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.217679][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.224901][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.232083][ T3259] bridge_slave_1: entered allmulticast mode [ 24.238454][ T3259] bridge_slave_1: entered promiscuous mode [ 24.245143][ T3260] team0: Port device team_slave_1 added [ 24.260184][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.267182][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.293274][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.317629][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.327243][ T3258] team0: Port device team_slave_0 added [ 24.346496][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.360052][ T3258] team0: Port device team_slave_1 added [ 24.375499][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.389145][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.396105][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.422115][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.433341][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.440375][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.466478][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.486813][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.496185][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.503122][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.529130][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.542143][ T3267] hsr_slave_0: entered promiscuous mode [ 24.548127][ T3267] hsr_slave_1: entered promiscuous mode [ 24.557202][ T3264] team0: Port device team_slave_0 added [ 24.572792][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.579785][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.605945][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.627041][ T3264] team0: Port device team_slave_1 added [ 24.633420][ T3259] team0: Port device team_slave_0 added [ 24.652183][ T3259] team0: Port device team_slave_1 added [ 24.675755][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.682796][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.708722][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.728198][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.735309][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.761450][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.776983][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.783990][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.810154][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.829720][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.836796][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.862817][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.875598][ T3260] hsr_slave_0: entered promiscuous mode [ 24.881503][ T3260] hsr_slave_1: entered promiscuous mode [ 24.887433][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.895135][ T3260] Cannot create hsr debugfs directory [ 24.911060][ T3258] hsr_slave_0: entered promiscuous mode [ 24.917077][ T3258] hsr_slave_1: entered promiscuous mode [ 24.922846][ T3258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.930475][ T3258] Cannot create hsr debugfs directory [ 24.952172][ T3264] hsr_slave_0: entered promiscuous mode [ 24.958197][ T3264] hsr_slave_1: entered promiscuous mode [ 24.964027][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.971620][ T3264] Cannot create hsr debugfs directory [ 25.025194][ T3259] hsr_slave_0: entered promiscuous mode [ 25.031884][ T3259] hsr_slave_1: entered promiscuous mode [ 25.037927][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.045566][ T3259] Cannot create hsr debugfs directory [ 25.127340][ T3267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.147964][ T3267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.169558][ T3267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.178387][ T3267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.219642][ T3258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.228377][ T3258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.236855][ T3258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.248768][ T3258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.272591][ T3260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.287138][ T3260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.295843][ T3260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.309266][ T3260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.333637][ T3259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.361541][ T3259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.371844][ T3264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.380851][ T3264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.389963][ T3259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.398127][ T3259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.408891][ T3264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.417545][ T3264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.430000][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.460001][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.479369][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.486468][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.495653][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.502803][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.528790][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.559891][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.578046][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.592903][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.600034][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.618907][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.628216][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.635454][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.652908][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.666227][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.675816][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.694087][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.708766][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.715859][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.724506][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.731646][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.740630][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.747834][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.756663][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.763684][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.776044][ T1676] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.783099][ T1676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.798269][ T1676] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.805423][ T1676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.848182][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.938133][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.971179][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.003298][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.012981][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.062379][ T3267] veth0_vlan: entered promiscuous mode [ 26.084469][ T3267] veth1_vlan: entered promiscuous mode [ 26.111830][ T3267] veth0_macvtap: entered promiscuous mode [ 26.123865][ T3267] veth1_macvtap: entered promiscuous mode [ 26.161942][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.173411][ T3258] veth0_vlan: entered promiscuous mode [ 26.181950][ T3259] veth0_vlan: entered promiscuous mode [ 26.198621][ T3259] veth1_vlan: entered promiscuous mode [ 26.208861][ T3258] veth1_vlan: entered promiscuous mode [ 26.216191][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.230542][ T3264] veth0_vlan: entered promiscuous mode [ 26.246455][ T3258] veth0_macvtap: entered promiscuous mode [ 26.253461][ T3258] veth1_macvtap: entered promiscuous mode [ 26.260807][ T3267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.269576][ T3267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.278293][ T3267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.287019][ T3267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.311852][ T3259] veth0_macvtap: entered promiscuous mode [ 26.327523][ T3260] veth0_vlan: entered promiscuous mode [ 26.334610][ T3264] veth1_vlan: entered promiscuous mode [ 26.345458][ T3259] veth1_macvtap: entered promiscuous mode [ 26.353842][ T3260] veth1_vlan: entered promiscuous mode [ 26.365802][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.376434][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.387847][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.398146][ T3264] veth0_macvtap: entered promiscuous mode [ 26.404535][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.415256][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.425316][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.435737][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.446618][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.460787][ T3264] veth1_macvtap: entered promiscuous mode [ 26.468213][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.478757][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.489754][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.502647][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.513133][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.523060][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.533950][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.546095][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.559252][ T3258] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.568011][ T3258] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.576854][ T3258] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.585780][ T3258] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.599202][ T3259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.608014][ T3259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.616761][ T3259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.625463][ T3259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.638211][ T3260] veth0_macvtap: entered promiscuous mode [ 26.655040][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.665496][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.675402][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.685822][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.695749][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.706333][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.718779][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.727274][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.737770][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.747592][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.758040][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.767928][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.778416][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.789729][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.798791][ T3264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.807920][ T3264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.816631][ T3264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.825367][ T3264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.839630][ T3260] veth1_macvtap: entered promiscuous mode [ 26.890628][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.901205][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.911071][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.921571][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.931477][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.941979][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.951840][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.962297][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.973602][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.989185][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.999703][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.009565][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.020061][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.029920][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.040930][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.043271][ T3410] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 27.051192][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.051210][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.057690][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.090296][ T3260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.099099][ T3260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.108258][ T3260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.117042][ T3260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.127832][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 27.127847][ T29] audit: type=1400 audit(1726028872.380:130): avc: denied { create } for pid=3411 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.220443][ T29] audit: type=1400 audit(1726028872.480:131): avc: denied { create } for pid=3418 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 27.244068][ T3414] syz.2.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 27.256228][ T3419] loop1: detected capacity change from 0 to 164 [ 27.276138][ T29] audit: type=1400 audit(1726028872.530:132): avc: denied { mount } for pid=3418 comm="syz.1.10" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 27.302559][ T29] audit: type=1400 audit(1726028872.560:133): avc: denied { mounton } for pid=3418 comm="syz.1.10" path="/1/file0/file0" dev="loop1" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 27.325686][ T29] audit: type=1400 audit(1726028872.560:134): avc: denied { mount } for pid=3418 comm="syz.1.10" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 27.389134][ T3428] loop2: detected capacity change from 0 to 2048 [ 27.402369][ T29] audit: type=1400 audit(1726028872.640:135): avc: denied { unmount } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 27.437051][ T3425] loop3: detected capacity change from 0 to 2048 [ 27.444748][ T29] audit: type=1400 audit(1726028872.700:136): avc: denied { read } for pid=3433 comm="syz.0.16" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.470515][ T3428] loop2: p1 < > p2 p3 < p5 > p4 [ 27.475589][ T3428] loop2: partition table partially beyond EOD, truncated [ 27.483103][ T3428] loop2: p1 start 4278190080 is beyond EOD, truncated [ 27.489974][ T3428] loop2: p2 start 16908800 is beyond EOD, truncated [ 27.503589][ T29] audit: type=1400 audit(1726028872.730:137): avc: denied { open } for pid=3433 comm="syz.0.16" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.528012][ T29] audit: type=1400 audit(1726028872.740:138): avc: denied { ioctl } for pid=3433 comm="syz.0.16" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.533236][ T3428] loop2: p4 start 11326 is beyond EOD, truncated [ 27.555670][ T29] audit: type=1400 audit(1726028872.790:139): avc: denied { write } for pid=3431 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.560520][ T3428] loop2: p5 start 16908800 is beyond EOD, truncated [ 27.603252][ T3425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.647760][ T3425] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.12: bg 0: block 274: padding at end of block bitmap is not set [ 27.699759][ T3425] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 27.708648][ T3445] loop1: detected capacity change from 0 to 8192 [ 27.712345][ T3425] EXT4-fs (loop3): This should not happen!! Data will be lost [ 27.712345][ T3425] [ 27.765388][ T3425] syz.3.12 (3425) used greatest stack depth: 9520 bytes left [ 27.792397][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.079866][ T3467] loop1: detected capacity change from 0 to 512 [ 28.110176][ T3467] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.123371][ T3467] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 28.148414][ T3467] EXT4-fs (loop1): 1 truncate cleaned up [ 28.155481][ T3467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.176530][ T3467] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.28: corrupted in-inode xattr: overlapping e_value [ 28.191595][ T3467] EXT4-fs (loop1): Remounting filesystem read-only [ 28.198555][ T3467] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1772: inode #15: comm syz.1.28: unable to update i_inline_off [ 28.210861][ T3467] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.251872][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.352995][ T3490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.37'. [ 28.406887][ T3337] IPVS: starting estimator thread 0... [ 28.421244][ T3505] loop1: detected capacity change from 0 to 512 [ 28.439765][ T3505] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.452763][ T3505] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 28.496584][ T3504] IPVS: using max 2736 ests per chain, 136800 per kthread [ 28.504174][ T3505] EXT4-fs (loop1): 1 truncate cleaned up [ 28.511315][ T3505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.562990][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.603780][ T3518] loop4: detected capacity change from 0 to 8192 [ 28.619690][ T3518] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.756111][ T3532] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.780056][ T3532] netlink: 332 bytes leftover after parsing attributes in process `syz.1.55'. [ 28.788969][ T3532] netlink: 652 bytes leftover after parsing attributes in process `syz.1.55'. [ 28.832405][ T3538] Zero length message leads to an empty skb [ 28.929821][ T3552] process 'syz.4.65' launched './file0' with NULL argv: empty string added [ 28.967120][ T3555] loop1: detected capacity change from 0 to 1024 [ 28.985124][ T3555] EXT4-fs: Ignoring removed nobh option [ 28.990744][ T3555] EXT4-fs: Ignoring removed orlov option [ 29.019797][ T3555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.062788][ T3564] loop3: detected capacity change from 0 to 1024 [ 29.072972][ T3564] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 29.093713][ T3564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.109958][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.142443][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.209475][ T3580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3580 comm=syz.3.73 [ 29.330865][ T3599] vlan2: entered allmulticast mode [ 29.545370][ T3630] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99'. [ 29.728266][ T3661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 29.787846][ T3670] Dead loop on virtual device ip6_vti0, fix it urgently! [ 29.933369][ T3685] dccp_invalid_packet: P.Data Offset(10) too large [ 29.959153][ T3682] hub 2-0:1.0: USB hub found [ 29.970090][ T3682] hub 2-0:1.0: 8 ports detected [ 29.984218][ T2961] udevd[2961]: worker [3435] terminated by signal 33 (Unknown signal 33) [ 30.040210][ T3698] netem: incorrect gi model size [ 30.045289][ T3698] netem: change failed [ 30.071812][ T3704] loop3: detected capacity change from 0 to 256 [ 30.113730][ T3712] loop2: detected capacity change from 0 to 2048 [ 30.139587][ T3712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.220862][ T3730] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 30.235687][ T3730] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1678 with error 28 [ 30.248208][ T3730] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.248208][ T3730] [ 30.258029][ T3730] EXT4-fs (loop2): Total free blocks count 0 [ 30.264019][ T3730] EXT4-fs (loop2): Free/Dirty block details [ 30.270044][ T3730] EXT4-fs (loop2): free_blocks=66060288 [ 30.275618][ T3730] EXT4-fs (loop2): dirty_blocks=2144 [ 30.280902][ T3730] EXT4-fs (loop2): Block reservation details [ 30.286978][ T3730] EXT4-fs (loop2): i_reserved_data_blocks=134 [ 30.359318][ T3737] syz.3.148[3737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.359472][ T3737] syz.3.148[3737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.453557][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 30.502271][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 30.548953][ T3764] loop3: detected capacity change from 0 to 512 [ 30.564094][ T3759] netlink: 'syz.0.158': attribute type 14 has an invalid length. [ 30.579009][ T3764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.604924][ T3764] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.631888][ T3773] Illegal XDP return value 542828073 on prog (id 126) dev N/A, expect packet loss! [ 30.645677][ T3764] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.161: Directory hole found for htree leaf block 0 [ 30.666355][ T3778] syz.2.159 uses obsolete (PF_INET,SOCK_PACKET) [ 30.682337][ T3764] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 30.709440][ T3764] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 30.726805][ T3764] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 30.741196][ T3786] syz.0.170[3786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.741331][ T3786] syz.0.170[3786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.752456][ T3764] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.161: Directory hole found for htree leaf block 0 [ 30.798026][ T3798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.808400][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.817450][ T3798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.852093][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 31.001420][ T3820] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 31.009752][ T3822] netlink: 80 bytes leftover after parsing attributes in process `syz.3.184'. [ 31.019554][ T3822] netlink: 80 bytes leftover after parsing attributes in process `syz.3.184'. [ 31.050420][ T3822] netlink: 80 bytes leftover after parsing attributes in process `syz.3.184'. [ 31.238890][ T3833] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.285190][ T3837] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 31.323481][ T3839] loop0: detected capacity change from 0 to 2048 [ 31.375536][ T3839] loop0: p1 p2 < > p3 p4 < p5 > [ 31.380582][ T3839] loop0: partition table partially beyond EOD, truncated [ 31.388474][ T3839] loop0: p1 start 2305 is beyond EOD, truncated [ 31.394843][ T3839] loop0: p2 start 4294902784 is beyond EOD, truncated [ 31.401618][ T3839] loop0: p3 start 4278191616 is beyond EOD, truncated [ 31.410823][ T3839] loop0: p5 start 2305 is beyond EOD, truncated [ 31.812057][ T3869] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3869 comm=syz.2.205 [ 32.068072][ T3909] loop0: detected capacity change from 0 to 128 [ 32.072551][ T3905] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.090494][ T3909] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.114120][ T3909] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.137099][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 32.137112][ T29] audit: type=1400 audit(1726028877.400:436): avc: denied { write open } for pid=3907 comm="syz.0.225" path="/66/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.190209][ T29] audit: type=1400 audit(1726028877.400:437): avc: denied { read } for pid=3907 comm="syz.0.225" path="/66/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.191321][ T3267] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.234966][ T29] audit: type=1400 audit(1726028877.400:438): avc: denied { create } for pid=3907 comm="syz.0.225" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.264148][ T29] audit: type=1400 audit(1726028877.400:439): avc: denied { unmount } for pid=3267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.288750][ T29] audit: type=1400 audit(1726028877.550:440): avc: denied { setopt } for pid=3924 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.317020][ T29] audit: type=1400 audit(1726028877.580:441): avc: denied { create } for pid=3923 comm="syz.3.232" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.338446][ T29] audit: type=1400 audit(1726028877.580:442): avc: denied { open } for pid=3927 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.357610][ T29] audit: type=1400 audit(1726028877.580:443): avc: denied { kernel } for pid=3927 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.391355][ T29] audit: type=1400 audit(1726028877.650:444): avc: denied { append } for pid=3931 comm="syz.2.235" name="001" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.573841][ T29] audit: type=1400 audit(1726028877.830:445): avc: denied { audit_write } for pid=3946 comm="syz.4.241" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 33.148360][ T3930] 9pnet_fd: p9_fd_create_tcp (3930): problem connecting socket to 127.0.0.1 [ 33.380554][ T3983] loop0: detected capacity change from 0 to 512 [ 33.388911][ T3983] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.257: bg 0: block 393: padding at end of block bitmap is not set [ 33.403535][ T3983] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 33.412656][ T3983] EXT4-fs (loop0): 2 truncates cleaned up [ 33.418816][ T3983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.448377][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.463729][ T3988] __nla_validate_parse: 7 callbacks suppressed [ 33.463739][ T3988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 33.507850][ T3992] loop4: detected capacity change from 0 to 2048 [ 33.514791][ T3992] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.527180][ T3992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.642262][ T4005] loop3: detected capacity change from 0 to 764 [ 33.686404][ T4010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 33.696269][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 33.734442][ T4006] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.260: bg 0: block 234: padding at end of block bitmap is not set [ 33.749027][ T4006] EXT4-fs (loop4): Remounting filesystem read-only [ 33.762704][ T4016] rdma_op ffff8881157d3d80 conn xmit_rdma 0000000000000000 [ 33.772179][ T3992] EXT4-fs (loop4): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 33.877838][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.884269][ T4026] loop0: detected capacity change from 0 to 2048 [ 33.896399][ T4029] SELinux: policydb version 1446001614 does not match my version range 15-33 [ 33.908308][ T4029] SELinux: failed to load policy [ 33.919581][ T4026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.946369][ T4026] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.983349][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.210801][ T4076] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.296'. [ 34.267967][ T4082] loop0: detected capacity change from 0 to 164 [ 34.286975][ T4082] ISOFS: unable to read i-node block [ 34.397252][ T4087] loop1: detected capacity change from 0 to 8192 [ 34.403920][ T4087] ======================================================= [ 34.403920][ T4087] WARNING: The mand mount option has been deprecated and [ 34.403920][ T4087] and is ignored by this kernel. Remove the mand [ 34.403920][ T4087] option from the mount to silence this warning. [ 34.403920][ T4087] ======================================================= [ 34.500997][ T4111] loop2: detected capacity change from 0 to 2048 [ 34.545577][ T4111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.560715][ T4123] loop4: detected capacity change from 0 to 128 [ 34.579595][ T4111] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 34.591863][ T4111] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.591863][ T4111] [ 34.601593][ T4111] EXT4-fs (loop2): Total free blocks count 0 [ 34.607619][ T4111] EXT4-fs (loop2): Free/Dirty block details [ 34.613513][ T4111] EXT4-fs (loop2): free_blocks=0 [ 34.618651][ T4111] EXT4-fs (loop2): dirty_blocks=0 [ 34.623739][ T4111] EXT4-fs (loop2): Block reservation details [ 34.629774][ T4111] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 34.710609][ T4129] block device autoloading is deprecated and will be removed. [ 34.719180][ T4129] syz.0.320: attempt to access beyond end of device [ 34.719180][ T4129] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 34.741518][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.769282][ T3335] kernel write not supported for file /112/attr/keycreate (pid: 3335 comm: kworker/1:3) [ 37.239111][ T29] kauditd_printk_skb: 2034 callbacks suppressed [ 37.239124][ T29] audit: type=1326 audit(1726028882.490:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f8f139869 code=0x7ffc0000 [ 37.268722][ T29] audit: type=1326 audit(1726028882.500:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f8f139869 code=0x7ffc0000 [ 37.292038][ T29] audit: type=1326 audit(1726028882.500:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f8f139869 code=0x7ffc0000 [ 37.315290][ T29] audit: type=1326 audit(1726028882.500:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f8f139869 code=0x7ffc0000 [ 37.338537][ T29] audit: type=1326 audit(1726028882.500:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f8f139869 code=0x7ffc0000 [ 37.361773][ T29] audit: type=1326 audit(1726028882.500:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f8f139869 code=0x7ffc0000 [ 37.384976][ T29] audit: type=1326 audit(1726028882.500:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f8f139869 code=0x7ffc0000 [ 37.408183][ T29] audit: type=1326 audit(1726028882.500:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f8f139869 code=0x7ffc0000 [ 37.431796][ T29] audit: type=1326 audit(1726028882.500:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f8f139869 code=0x7ffc0000 [ 37.455001][ T29] audit: type=1326 audit(1726028882.500:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f8f139869 code=0x7ffc0000 [ 38.072022][ T4192] loop0: detected capacity change from 0 to 1024 [ 38.079663][ T4192] EXT4-fs: Ignoring removed orlov option [ 38.101001][ T4192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.132772][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.193548][ T4207] loop4: detected capacity change from 0 to 512 [ 38.200117][ T4207] EXT4-fs: Ignoring removed bh option [ 38.206771][ T4207] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz.4.351: invalid block [ 38.221703][ T4207] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.351: couldn't read orphan inode 15 (err -117) [ 38.234382][ T4207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.287026][ T4214] loop0: detected capacity change from 0 to 2048 [ 38.297422][ T4214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.309812][ T4207] loop4: detected capacity change from 512 to 11 [ 38.320118][ T4207] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 38.333653][ T4207] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 38.343193][ T4207] EXT4-fs error (device loop4): ext4_evict_inode:251: inode #19: comm syz.4.351: mark_inode_dirty error [ 38.343798][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.354941][ T4207] EXT4-fs warning (device loop4): ext4_evict_inode:254: couldn't mark inode dirty (err -12) [ 38.391825][ T3260] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 38.406352][ T3260] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 38.415587][ T3260] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 38.437280][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.511362][ T4229] vlan2: entered promiscuous mode [ 38.516641][ T4229] macvtap0: entered promiscuous mode [ 38.525478][ T4229] macvtap0: left promiscuous mode [ 38.634326][ T4243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 38.643262][ T4243] netlink: 31 bytes leftover after parsing attributes in process `syz.1.368'. [ 38.652285][ T4243] netlink: 'syz.1.368': attribute type 2 has an invalid length. [ 38.659962][ T4243] netlink: 'syz.1.368': attribute type 2 has an invalid length. [ 38.667640][ T4243] netlink: 31 bytes leftover after parsing attributes in process `syz.1.368'. [ 38.718596][ T4251] loop0: detected capacity change from 0 to 128 [ 38.728214][ T4251] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.752500][ T4251] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.856202][ T3267] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.929937][ T3300] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.991281][ T3300] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.068028][ T3300] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.084817][ T4303] 9pnet_fd: Insufficient options for proto=fd [ 39.109039][ T4307] Invalid ELF header magic: != ELF [ 39.114379][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 39.136667][ T4312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 39.169978][ T4314] loop0: detected capacity change from 0 to 2048 [ 39.190965][ T4319] sch_fq: defrate 0 ignored. [ 39.203098][ T3300] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.216025][ T4314] loop0: p1 < > p4 [ 39.227405][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.227943][ T4314] loop0: p4 size 8388608 extends beyond EOD, truncated [ 39.234525][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.267023][ T4257] bridge_slave_0: entered allmulticast mode [ 39.275127][ T4257] bridge_slave_0: entered promiscuous mode [ 39.281776][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.288986][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.296318][ T4257] bridge_slave_1: entered allmulticast mode [ 39.302676][ T4257] bridge_slave_1: entered promiscuous mode [ 39.324826][ T4314] loop0: detected capacity change from 2048 to 0 [ 39.333519][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.334653][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.382251][ T4257] team0: Port device team_slave_0 added [ 39.393025][ T4257] team0: Port device team_slave_1 added [ 39.444397][ T3300] bridge_slave_1: left allmulticast mode [ 39.450143][ T3300] bridge_slave_1: left promiscuous mode [ 39.452703][ T4345] loop1: detected capacity change from 0 to 128 [ 39.455786][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.473818][ T3300] bridge_slave_0: left allmulticast mode [ 39.479581][ T3300] bridge_slave_0: left promiscuous mode [ 39.485293][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.494408][ T4347] loop0: detected capacity change from 0 to 512 [ 39.503771][ T4347] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 39.515318][ T4347] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 39.525692][ T4347] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.412: Corrupt directory, running e2fsck is recommended [ 39.539902][ T4347] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 39.549213][ T4347] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.412: corrupted in-inode xattr: invalid ea_ino [ 39.569094][ T4347] EXT4-fs (loop0): Remounting filesystem read-only [ 39.576509][ T4347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.590739][ T4347] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 39.598641][ T4347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.666863][ T4372] syz.1.425[4372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.666931][ T4372] syz.1.425[4372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.684141][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 39.735052][ T3300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.746799][ T3300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.761424][ T3300] bond0 (unregistering): Released all slaves [ 39.773505][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.780564][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.806908][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.834229][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.841228][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.867319][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.890999][ T4366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.422'. [ 39.937806][ T4257] hsr_slave_0: entered promiscuous mode [ 39.943861][ T4257] hsr_slave_1: entered promiscuous mode [ 39.949884][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.957787][ T4257] Cannot create hsr debugfs directory [ 39.971141][ T3300] hsr_slave_0: left promiscuous mode [ 39.980808][ T3300] hsr_slave_1: left promiscuous mode [ 40.001251][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.008967][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.022248][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.029887][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.042253][ T3300] veth1_macvtap: left promiscuous mode [ 40.047796][ T3300] veth0_macvtap: left promiscuous mode [ 40.053514][ T3300] veth1_vlan: left promiscuous mode [ 40.058822][ T3300] veth0_vlan: left promiscuous mode [ 40.158611][ T3300] team0 (unregistering): Port device team_slave_1 removed [ 40.170491][ T3300] team0 (unregistering): Port device team_slave_0 removed [ 40.205967][ T4395] netem: unknown loss type 8 [ 40.210664][ T4395] netem: change failed [ 40.222877][ T4397] IPv6: NLM_F_REPLACE set, but no existing node found! [ 40.274024][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 40.277275][ T4406] loop2: detected capacity change from 0 to 512 [ 40.290878][ T4406] EXT4-fs: Ignoring removed i_version option [ 40.297528][ T4406] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.309669][ T4406] EXT4-fs (loop2): 1 truncate cleaned up [ 40.315521][ T4410] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.324126][ T4406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.370639][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.413588][ T4421] loop2: detected capacity change from 0 to 512 [ 40.425866][ T4421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.438678][ T4421] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.454444][ T4421] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.446: corrupted inode contents [ 40.466467][ T4421] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.446: mark_inode_dirty error [ 40.478117][ T4421] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.446: corrupted inode contents [ 40.490789][ T4421] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.446: mark_inode_dirty error [ 40.514631][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.548156][ T3300] IPVS: stop unused estimator thread 0... [ 40.590797][ T4257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.599410][ T4257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.607911][ T4257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.620170][ T4257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.649319][ T4444] team_slave_0: entered promiscuous mode [ 40.654981][ T4444] team_slave_1: entered promiscuous mode [ 40.660695][ T4444] macvtap1: entered promiscuous mode [ 40.666182][ T4444] team0: entered promiscuous mode [ 40.672477][ T4444] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 40.681489][ T4444] team0: Device macvtap1 is already an upper device of the team interface [ 40.690828][ T4444] team0: left promiscuous mode [ 40.695846][ T4444] team_slave_0: left promiscuous mode [ 40.701245][ T4444] team_slave_1: left promiscuous mode [ 40.724231][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.737747][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.759592][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.766710][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.790506][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.797687][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.844641][ T4454] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 40.853491][ T4454] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 40.889700][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.047533][ T4257] veth0_vlan: entered promiscuous mode [ 41.063519][ T4257] veth1_vlan: entered promiscuous mode [ 41.072727][ T4496] syz_tun: entered promiscuous mode [ 41.078727][ T4496] macvtap1: entered promiscuous mode [ 41.084250][ T4496] macvtap1: entered allmulticast mode [ 41.089779][ T4496] syz_tun: entered allmulticast mode [ 41.098287][ T4496] syz_tun: left allmulticast mode [ 41.103419][ T4496] syz_tun: left promiscuous mode [ 41.131291][ T4257] veth0_macvtap: entered promiscuous mode [ 41.139759][ T4257] veth1_macvtap: entered promiscuous mode [ 41.166599][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.177121][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.187059][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.197519][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.207322][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.217880][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.227701][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.238207][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.249114][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.258958][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.269457][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.279328][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.289780][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.299644][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.310220][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.320091][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.330653][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.346338][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.358438][ T4506] bond0: entered promiscuous mode [ 41.363529][ T4506] bond_slave_0: entered promiscuous mode [ 41.369242][ T4506] bond_slave_1: entered promiscuous mode [ 41.377555][ T4506] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 41.385985][ T4506] bond0: left promiscuous mode [ 41.390805][ T4506] bond_slave_0: left promiscuous mode [ 41.396547][ T4506] bond_slave_1: left promiscuous mode [ 41.429184][ T4257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.437953][ T4257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.446770][ T4257] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.455528][ T4257] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.510051][ T4524] loop2: detected capacity change from 0 to 1024 [ 41.520118][ T4524] EXT4-fs: Ignoring removed nobh option [ 41.525793][ T4524] EXT4-fs: Ignoring removed orlov option [ 41.615955][ T4524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.170722][ T4530] loop4: detected capacity change from 0 to 2048 [ 44.177542][ T4528] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 44.198611][ T4530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.207314][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 44.207327][ T29] audit: type=1400 audit(1726028889.460:2818): avc: denied { write } for pid=4522 comm="syz.2.482" name="xfrm_stat" dev="proc" ino=4026532585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.246141][ T4541] mmap: syz.3.486 (4541) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.264313][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.318458][ T29] audit: type=1400 audit(1726028889.580:2819): avc: denied { setopt } for pid=4544 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.343776][ T29] audit: type=1400 audit(1726028889.580:2820): avc: denied { listen } for pid=4544 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.345500][ T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.391015][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 44.403253][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.403253][ T11] [ 44.405443][ T4547] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 44.412934][ T11] EXT4-fs (loop4): Total free blocks count 0 [ 44.419370][ T4547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.419434][ T4547] vhci_hcd vhci_hcd.0: Device attached [ 44.425402][ T11] EXT4-fs (loop4): Free/Dirty block details [ 44.444263][ T11] EXT4-fs (loop4): free_blocks=2415919104 [ 44.450014][ T11] EXT4-fs (loop4): dirty_blocks=16 [ 44.455228][ T11] EXT4-fs (loop4): Block reservation details [ 44.461330][ T11] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 44.487125][ T4550] vhci_hcd: connection closed [ 44.488685][ T274] vhci_hcd: stop threads [ 44.497827][ T274] vhci_hcd: release socket [ 44.502259][ T274] vhci_hcd: disconnect device [ 44.511378][ T4257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.638532][ T29] audit: type=1400 audit(1726028889.900:2821): avc: denied { mount } for pid=4560 comm="syz.3.494" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 44.648375][ T4562] loop1: detected capacity change from 0 to 2048 [ 44.660799][ T29] audit: type=1400 audit(1726028889.900:2822): avc: denied { mounton } for pid=4560 comm="syz.3.494" path="/107/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.689636][ T29] audit: type=1400 audit(1726028889.900:2823): avc: denied { mount } for pid=4560 comm="syz.3.494" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.696196][ T4562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.711941][ T29] audit: type=1400 audit(1726028889.900:2824): avc: denied { mounton } for pid=4560 comm="syz.3.494" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 44.746048][ T29] audit: type=1400 audit(1726028889.900:2825): avc: denied { unmount } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.747466][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.765981][ T29] audit: type=1400 audit(1726028890.000:2826): avc: denied { getopt } for pid=4561 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.796075][ T29] audit: type=1400 audit(1726028890.060:2827): avc: denied { unmount } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 44.909015][ T4573] loop1: detected capacity change from 0 to 4096 [ 44.917629][ T4573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.938546][ T3258] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.032792][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.068652][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.109109][ T4593] netlink: 56 bytes leftover after parsing attributes in process `syz.2.509'. [ 45.139512][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.208842][ T4586] chnl_net:caif_netlink_parms(): no params data found [ 45.220240][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.268228][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.275525][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.282939][ T4586] bridge_slave_0: entered allmulticast mode [ 45.290875][ T4586] bridge_slave_0: entered promiscuous mode [ 45.299486][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.306679][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.313881][ T4586] bridge_slave_1: entered allmulticast mode [ 45.320486][ T4586] bridge_slave_1: entered promiscuous mode [ 45.347527][ T4586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.374140][ T4586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.383470][ T11] bridge_slave_1: left allmulticast mode [ 45.389317][ T11] bridge_slave_1: left promiscuous mode [ 45.395297][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.411395][ T11] bridge_slave_0: left allmulticast mode [ 45.417429][ T11] bridge_slave_0: left promiscuous mode [ 45.423238][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.486120][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.508453][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.518270][ T4636] loop2: detected capacity change from 0 to 128 [ 45.538466][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.550079][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.560516][ T11] bond0 (unregistering): Released all slaves [ 45.602938][ T4586] team0: Port device team_slave_0 added [ 45.610033][ T4586] team0: Port device team_slave_1 added [ 45.627338][ T4586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.634369][ T4586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.660617][ T4586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.673971][ T4586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.681039][ T4586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.707169][ T4586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.723555][ T11] hsr_slave_0: left promiscuous mode [ 45.729742][ T11] hsr_slave_1: left promiscuous mode [ 45.735887][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.743312][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.751049][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.758480][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.768526][ T11] veth1_macvtap: left promiscuous mode [ 45.774052][ T11] veth0_macvtap: left promiscuous mode [ 45.779609][ T11] veth1_vlan: left promiscuous mode [ 45.784862][ T11] veth0_vlan: left promiscuous mode [ 45.880340][ T11] team0 (unregistering): Port device team_slave_1 removed [ 45.892852][ T11] team0 (unregistering): Port device team_slave_0 removed [ 45.952298][ T4586] hsr_slave_0: entered promiscuous mode [ 45.960344][ T4586] hsr_slave_1: entered promiscuous mode [ 45.966340][ T4586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.974001][ T4586] Cannot create hsr debugfs directory [ 46.009948][ T4653] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 46.079103][ T4663] raw_sendmsg: syz.2.535 forgot to set AF_INET. Fix it! [ 46.267170][ T4683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.544'. [ 46.276107][ T4683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.544'. [ 46.319424][ T4586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.329576][ T4586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.338383][ T4586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.352357][ T4586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.397002][ T4586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.424287][ T4586] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.436125][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.443208][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.458381][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.465481][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.484587][ T4701] loop2: detected capacity change from 0 to 512 [ 46.491889][ T4703] loop4: detected capacity change from 0 to 256 [ 46.497942][ T4701] ext4: Unknown parameter 'nouser_xattr' [ 46.518774][ T4703] FAT-fs (loop4): Directory bread(block 64) failed [ 46.536152][ T4586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.546696][ T4703] FAT-fs (loop4): Directory bread(block 65) failed [ 46.553255][ T4703] FAT-fs (loop4): Directory bread(block 66) failed [ 46.575618][ T4703] FAT-fs (loop4): Directory bread(block 67) failed [ 46.582198][ T4703] FAT-fs (loop4): Directory bread(block 68) failed [ 46.598935][ T4703] FAT-fs (loop4): Directory bread(block 69) failed [ 46.613272][ T4703] FAT-fs (loop4): Directory bread(block 70) failed [ 46.629741][ T4703] FAT-fs (loop4): Directory bread(block 71) failed [ 46.637768][ T4703] FAT-fs (loop4): Directory bread(block 72) failed [ 46.644670][ T4586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.644849][ T4703] FAT-fs (loop4): Directory bread(block 73) failed [ 46.666823][ T4715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.558'. [ 46.736717][ T3300] kworker/u8:6: attempt to access beyond end of device [ 46.736717][ T3300] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 46.750218][ T3300] Buffer I/O error on dev loop4, logical block 306, lost async page write [ 46.781691][ T4725] Cannot find set identified by id 0 to match [ 46.806914][ T4586] veth0_vlan: entered promiscuous mode [ 46.814230][ T28] kworker/u8:1: attempt to access beyond end of device [ 46.814230][ T28] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 46.827943][ T28] Buffer I/O error on dev loop4, logical block 306, lost async page write [ 46.846530][ T4586] veth1_vlan: entered promiscuous mode [ 46.857608][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 46.878887][ T4586] veth0_macvtap: entered promiscuous mode [ 46.886516][ T4586] veth1_macvtap: entered promiscuous mode [ 46.903416][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.913981][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.923915][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.934421][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.944285][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.954967][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.964987][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.975543][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.987503][ T4586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.995848][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.006295][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.016184][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.026872][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.036824][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.047276][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.057157][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.067762][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.079174][ T4586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.097079][ T4586] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.106103][ T4586] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.114865][ T4586] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.123775][ T4586] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.257049][ T4760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.265966][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.277445][ T4760] loop0: detected capacity change from 0 to 128 [ 47.800346][ T4803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.594'. [ 48.177694][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.185317][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.192681][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.200815][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.208253][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.215891][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.223376][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.230882][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.238323][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.245804][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.253165][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.260733][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.268118][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.275545][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.282899][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.290298][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.297707][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.305187][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.312720][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.320107][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.328731][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.336145][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.343572][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.350952][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.358344][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.365715][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.373084][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.380633][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.388025][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.395458][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.402844][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.410263][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.417645][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.425055][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.432590][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.440087][ T3338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.448434][ T3338] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 48.493671][ T4840] loop3: detected capacity change from 0 to 512 [ 48.500269][ T4840] EXT4-fs: Ignoring removed i_version option [ 48.506775][ T4840] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.517762][ T4840] EXT4-fs (loop3): 1 truncate cleaned up [ 48.523739][ T4840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.606427][ T4844] vxcan1: tx drop: invalid da for name 0xfffffffffffffffe [ 48.616576][ T4586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.748160][ T4860] netlink: 272 bytes leftover after parsing attributes in process `syz.2.619'. [ 49.014421][ T4878] loop4: detected capacity change from 0 to 512 [ 49.021094][ T4878] EXT4-fs: Ignoring removed i_version option [ 49.030000][ T4878] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.042101][ T4880] vxcan1: tx drop: invalid da for name 0xfffffffffffffffe [ 49.051046][ T4878] EXT4-fs (loop4): 1 truncate cleaned up [ 49.061377][ T4878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.142763][ T4886] loop3: detected capacity change from 0 to 256 [ 49.159332][ T4257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.176632][ T4886] FAT-fs (loop3): Directory bread(block 64) failed [ 49.183451][ T4886] FAT-fs (loop3): Directory bread(block 65) failed [ 49.190109][ T4886] FAT-fs (loop3): Directory bread(block 66) failed [ 49.196840][ T4886] FAT-fs (loop3): Directory bread(block 67) failed [ 49.203456][ T4886] FAT-fs (loop3): Directory bread(block 68) failed [ 49.210429][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 49.210442][ T29] audit: type=1326 audit(1726028894.460:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.2.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f271a07def9 code=0x7ffc0000 [ 49.240307][ T29] audit: type=1326 audit(1726028894.460:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.2.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271a07def9 code=0x7ffc0000 [ 49.263700][ T29] audit: type=1326 audit(1726028894.460:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.2.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f271a07def9 code=0x7ffc0000 [ 49.286985][ T29] audit: type=1326 audit(1726028894.460:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.2.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271a07def9 code=0x7ffc0000 [ 49.310371][ T29] audit: type=1326 audit(1726028894.460:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.2.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f271a07def9 code=0x7ffc0000 [ 49.315736][ T4886] FAT-fs (loop3): Directory bread(block 69) failed [ 49.333679][ T29] audit: type=1326 audit(1726028894.460:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.2.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271a07def9 code=0x7ffc0000 [ 49.362946][ T4886] FAT-fs (loop3): Directory bread(block 70) failed [ 49.372698][ T4886] FAT-fs (loop3): Directory bread(block 71) failed [ 49.379620][ T4886] FAT-fs (loop3): Directory bread(block 72) failed [ 49.388256][ T4886] FAT-fs (loop3): Directory bread(block 73) failed [ 49.399496][ T4895] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.404826][ T29] audit: type=1400 audit(1726028894.660:2990): avc: denied { write } for pid=4894 comm="syz.4.632" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.437941][ T29] audit: type=1326 audit(1726028894.670:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4894 comm="syz.4.632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd58eadef9 code=0x0 [ 49.466534][ T4886] syz.3.629: attempt to access beyond end of device [ 49.466534][ T4886] loop3: rw=2049, sector=1224, nr_sectors = 68 limit=256 [ 49.587444][ T4908] loop3: detected capacity change from 0 to 128 [ 49.615723][ T29] audit: type=1400 audit(1726028894.880:2992): avc: denied { write } for pid=4909 comm="syz.2.639" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.638492][ T29] audit: type=1400 audit(1726028894.880:2993): avc: denied { open } for pid=4909 comm="syz.2.639" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.759622][ T4916] loop0: detected capacity change from 0 to 512 [ 49.766229][ T4916] EXT4-fs: Ignoring removed i_version option [ 49.772903][ T4916] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.786925][ T4916] EXT4-fs (loop0): 1 truncate cleaned up [ 49.794488][ T4916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.873813][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.919021][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.926483][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.933949][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.953704][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.961255][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.968682][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.976170][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.983644][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.991064][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.998579][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.005996][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.013463][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.020950][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.028428][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.035827][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.043351][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.050751][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.058238][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.065649][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.073071][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.097415][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.104964][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.112351][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.119811][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.127287][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.134849][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.142316][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.149741][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.157145][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.164525][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.172028][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.179425][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.186850][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.194235][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.201760][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.209267][ T3335] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.217840][ T3335] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 50.382528][ T5014] loop0: detected capacity change from 0 to 1024 [ 50.390996][ T5014] EXT4-fs: Ignoring removed nobh option [ 50.426723][ T5014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.459428][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.599950][ T5060] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.829127][ T28] nci: nci_rx_work: unknown MT 0x1 [ 51.845474][ T5138] loop0: detected capacity change from 0 to 2048 [ 51.853176][ T5139] ================================================================== [ 51.856457][ T5138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.861253][ T5139] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 51.879730][ T5139] [ 51.882063][ T5139] read to 0xffffc90000f23c10 of 4 bytes by task 5132 on cpu 0: [ 51.889603][ T5139] do_sys_poll+0x9b4/0xc10 [ 51.894040][ T5139] __se_sys_poll+0xe1/0x200 [ 51.898556][ T5139] __x64_sys_poll+0x43/0x50 [ 51.903065][ T5139] x64_sys_call+0x29db/0x2d60 [ 51.907776][ T5139] do_syscall_64+0xc9/0x1c0 [ 51.912296][ T5139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.918225][ T5139] [ 51.920550][ T5139] write to 0xffffc90000f23c10 of 4 bytes by task 5139 on cpu 1: [ 51.928196][ T5139] pollwake+0xbe/0x110 [ 51.932288][ T5139] __wake_up+0x65/0xb0 [ 51.936363][ T5139] snd_seq_cell_free+0x1e7/0x210 [ 51.941306][ T5139] snd_seq_dispatch_event+0x210/0x240 [ 51.946692][ T5139] snd_seq_check_queue+0x17b/0x300 [ 51.951812][ T5139] snd_seq_enqueue_event+0x26e/0x2a0 [ 51.957074][ T5139] snd_seq_client_enqueue_event+0x21a/0x2b0 [ 51.962947][ T5139] snd_seq_write+0x3f9/0x510 [ 51.967508][ T5139] vfs_write+0x28b/0x900 [ 51.971728][ T5139] ksys_write+0xeb/0x1b0 [ 51.975948][ T5139] __x64_sys_write+0x42/0x50 [ 51.980529][ T5139] x64_sys_call+0x27dd/0x2d60 [ 51.985192][ T5139] do_syscall_64+0xc9/0x1c0 [ 51.989688][ T5139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.995568][ T5139] [ 51.997871][ T5139] value changed: 0x00000001 -> 0x00000000 [ 52.003561][ T5139] [ 52.005858][ T5139] Reported by Kernel Concurrency Sanitizer on: [ 52.011989][ T5139] CPU: 1 UID: 0 PID: 5139 Comm: syz.2.678 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 52.022576][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 52.032610][ T5139] ================================================================== [ 52.045292][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.