last executing test programs: 8.361155396s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x9, 0x4, 0xdffc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.291586898s ago: executing program 4 (id=15): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7.494411113s ago: executing program 4 (id=50): unshare(0x2040400) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a8, &(0x7f0000000980)="$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") mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x50, 0x6e}) 7.494249433s ago: executing program 32 (id=50): unshare(0x2040400) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a8, &(0x7f0000000980)="$eJzs3M1vFOUfAPDvbGl5b/vjhygIuopG4ktLCyoHD2o08aCJiR7wWNuCyEINrYmQRosxeCQY78ajiX+BNy9GORgTr5p4NCREGxOKp5qZnYHtdlu2dcvW7ueTbPd5dt6e7zzz7D4zT2cC6Fjl9E8SsSMifomIvmp24Qzl6tvc7PTozdnp0STm59/4I8nmuzE7PVrMWiy3Pc8cKkWUPkni+WTxdifPXzg9UqmMn8vzg1Nn3hucPH/hqVNnRk6Onxw/O3zs2NEjQ88+M/x0S+JM47qx78OJ/XtfeevKa6PHr7z9w9dpsfYcqE6vjWNZlyPiZoOAGiine+3P+Uz9tEdXWP71bmdNOtnUxoKwIl0RkVZXd9b++6IrbldeX7z8cVsLB6yp9Ldp89KTZ+aBDSyJdpcAaI/ihz49/y1ed6nrsS5cvxrRk6fnZqdH527F/9mtebrXcPvliDg+8/cX6StWch0CAGCVsr7Nk436f6XYk71Xxzp68zGU/oj4X0Tsioj/R8TuiLgnIpv33uiJ+6oLz/c1uf1yXX5x/6d0rWGZW+T6CxHP1fT95mriz9/6u/Lcziz+7uTEqcr44XyfHIruzWl+aJltfPvSz5eXmlbb/0tf6faLvmBegGub6i7QjY1MjbRqJ1y/GLFvU6P4k1sjAekRsDci9q1s1b1F4tTjX+1faqY7x7+MFowzzX8Z8Vi1/meiLv5Csvz45OCWqIwfHiyOisWu/nTp9TzZUz/tX8XfAmn9b1t4/OdTLubvfX8l1fHa7qhUxs9Nrnwbl379dMlzmtUe/z3Jm9mY9Y/vVD/7YGRq6txQRE/yapYvdnT2+fDtZYt8MX8a/6GDjdv/rnyZNP77IyI9iA9ExAMR8WBe9oci4uGIOLhM/N+/+Mi7y8SfRBJtrf+xht9/ScSWLNGf1I7XryLRdfq7b5KtS8bfRP0fjZnsu7Yq+/67g2YL2IJdCAAAAOteKSJ2RFIaqKbLO6JUGhio/g//7thWqkxMTj1xYuL9s2PVewT6o7uUX+nq7au5HjqUzORrrOaH82vFxfQj+XXjz7u2ZvmB0YnKWJtjh063fWH7j6L9p37vanfpgDXnfi3oXPXtv9SmcgB3XzO//84FYGNq0P6X+HcdYKNx/g+dq1H7/6huiv4/bEyL2/9vDR5ZB2xE+v/QubR/6FzaP3SkZu/iL56nsOqHACxIFDcLrH49W5q+w3/9Jcprsuaihtay8Fvj9idRatmaZ9ZBpazzRNpiVrN49Db/LIyFiQYPqwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgP+icAAP//AHDj5A==") mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x50, 0x6e}) 2.02389365s ago: executing program 0 (id=235): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) fchmod(r1, 0xca) 1.972800281s ago: executing program 0 (id=237): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001780)='%', 0x1, 0x24000015, 0x0, 0x0) 1.394260202s ago: executing program 1 (id=262): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x100) write$cgroup_int(r0, &(0x7f0000000340)=0xffffffffffffffff, 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) 1.093488948s ago: executing program 1 (id=274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.085801399s ago: executing program 0 (id=277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 1.00636714s ago: executing program 0 (id=280): syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x225e, 0x2, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x6]}, 0x8) 871.661853ms ago: executing program 1 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 830.877123ms ago: executing program 1 (id=292): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000004c0)=0x5e, 0x4) 732.628425ms ago: executing program 5 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x6}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x74) 558.478049ms ago: executing program 5 (id=298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 463.874441ms ago: executing program 3 (id=300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6d656d6f72795f6465617c81ab5f743a73302073797374656d5f753a6f626a6563745f723a64686370645f657865635f743a7330203030303030303030303030303030303030303634202f"], 0x6b) 437.801911ms ago: executing program 3 (id=301): r0 = socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) 362.249752ms ago: executing program 5 (id=303): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000001540)="028988a8", 0x4, 0x8000050, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0xfb}, 0x14) 345.679433ms ago: executing program 2 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 316.005864ms ago: executing program 2 (id=305): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 285.577414ms ago: executing program 3 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 215.547676ms ago: executing program 2 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) 207.641816ms ago: executing program 3 (id=308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffea5, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) 171.471516ms ago: executing program 3 (id=309): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 135.508777ms ago: executing program 0 (id=310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488"], 0x9e) 111.681477ms ago: executing program 2 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081) 111.210628ms ago: executing program 5 (id=312): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000300)=0x1) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000100)=0x7fffffff) 102.352838ms ago: executing program 3 (id=313): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeff0001, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r1}, 0x18) sync() 81.703908ms ago: executing program 1 (id=314): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000002000)=ANY=[@ANYRESOCT, @ANYBLOB="9ddf3eee0e5f0bb7c1f1403ba29cc9f6b466a5c86c"], 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 72.612948ms ago: executing program 2 (id=315): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) 54.628168ms ago: executing program 5 (id=316): rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={[0x5]}, 0x8}) 20.622279ms ago: executing program 0 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000980), &(0x7f0000000a00)='%pS \x00'}, 0x20) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) 19.958459ms ago: executing program 2 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x0) 13.840729ms ago: executing program 5 (id=319): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) sync_file_range(0xffffffffffffffff, 0x7, 0xfffffffffffffc00, 0xb) 0s ago: executing program 1 (id=320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x79) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 20.544083][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 20.544101][ T29] audit: type=1400 audit(1759145024.179:57): avc: denied { transition } for pid=3176 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.573108][ T29] audit: type=1400 audit(1759145024.179:58): avc: denied { noatsecure } for pid=3176 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.593162][ T29] audit: type=1400 audit(1759145024.189:59): avc: denied { write } for pid=3176 comm="sh" path="pipe:[1577]" dev="pipefs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 20.615872][ T29] audit: type=1400 audit(1759145024.189:60): avc: denied { rlimitinh } for pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.634728][ T29] audit: type=1400 audit(1759145024.189:61): avc: denied { siginh } for pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.215' (ED25519) to the list of known hosts. [ 29.322111][ T29] audit: type=1400 audit(1759145032.959:62): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.323576][ T3288] cgroup: Unknown subsys name 'net' [ 29.352076][ T29] audit: type=1400 audit(1759145032.959:63): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.386972][ T29] audit: type=1400 audit(1759145033.009:64): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.526277][ T3288] cgroup: Unknown subsys name 'cpuset' [ 29.534795][ T3288] cgroup: Unknown subsys name 'rlimit' [ 29.656160][ T29] audit: type=1400 audit(1759145033.299:65): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.684742][ T29] audit: type=1400 audit(1759145033.299:66): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.706939][ T29] audit: type=1400 audit(1759145033.299:67): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.717295][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.730504][ T29] audit: type=1400 audit(1759145033.299:68): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.762418][ T29] audit: type=1400 audit(1759145033.319:69): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.782349][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.791009][ T29] audit: type=1400 audit(1759145033.319:70): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.827132][ T29] audit: type=1400 audit(1759145033.389:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.985524][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 31.051875][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.059596][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.067325][ T3300] bridge_slave_0: entered allmulticast mode [ 31.075293][ T3300] bridge_slave_0: entered promiscuous mode [ 31.096250][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.104786][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.113235][ T3300] bridge_slave_1: entered allmulticast mode [ 31.120979][ T3300] bridge_slave_1: entered promiscuous mode [ 31.182797][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.225564][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.250229][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 31.261164][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 31.278229][ T3300] team0: Port device team_slave_0 added [ 31.288748][ T3300] team0: Port device team_slave_1 added [ 31.307670][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 31.350943][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.362003][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.369335][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.396315][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.408015][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.415707][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.445899][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.537362][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.545103][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.552762][ T3301] bridge_slave_0: entered allmulticast mode [ 31.560070][ T3301] bridge_slave_0: entered promiscuous mode [ 31.582541][ T3300] hsr_slave_0: entered promiscuous mode [ 31.589830][ T3300] hsr_slave_1: entered promiscuous mode [ 31.597213][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.605712][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.613699][ T3301] bridge_slave_1: entered allmulticast mode [ 31.620826][ T3301] bridge_slave_1: entered promiscuous mode [ 31.636771][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.644046][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.652006][ T3298] bridge_slave_0: entered allmulticast mode [ 31.659018][ T3298] bridge_slave_0: entered promiscuous mode [ 31.666320][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.674199][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.682046][ T3298] bridge_slave_1: entered allmulticast mode [ 31.690610][ T3298] bridge_slave_1: entered promiscuous mode [ 31.726251][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.735485][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.743787][ T3305] bridge_slave_0: entered allmulticast mode [ 31.751417][ T3305] bridge_slave_0: entered promiscuous mode [ 31.769040][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.781401][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.803972][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.812610][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.820604][ T3305] bridge_slave_1: entered allmulticast mode [ 31.827576][ T3305] bridge_slave_1: entered promiscuous mode [ 31.851649][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.869164][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.877496][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.887427][ T3313] bridge_slave_0: entered allmulticast mode [ 31.895265][ T3313] bridge_slave_0: entered promiscuous mode [ 31.919668][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.931875][ T3298] team0: Port device team_slave_0 added [ 31.939395][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.946995][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.955516][ T3313] bridge_slave_1: entered allmulticast mode [ 31.962305][ T3313] bridge_slave_1: entered promiscuous mode [ 31.976411][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.991663][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.008595][ T3298] team0: Port device team_slave_1 added [ 32.047732][ T3301] team0: Port device team_slave_0 added [ 32.069742][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.085639][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.108935][ T3301] team0: Port device team_slave_1 added [ 32.134002][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.142105][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.172419][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.190738][ T3305] team0: Port device team_slave_0 added [ 32.206368][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.213529][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.241350][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.266588][ T3305] team0: Port device team_slave_1 added [ 32.274345][ T3313] team0: Port device team_slave_0 added [ 32.281198][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.288460][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.316605][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.346970][ T3313] team0: Port device team_slave_1 added [ 32.363922][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.371956][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.402452][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.460820][ T3298] hsr_slave_0: entered promiscuous mode [ 32.467927][ T3298] hsr_slave_1: entered promiscuous mode [ 32.475970][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 32.483978][ T3298] Cannot create hsr debugfs directory [ 32.501493][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.510065][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.539640][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.552873][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.562440][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.594409][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.608027][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.615460][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.643239][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.660934][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.669057][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.696465][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.732804][ T3301] hsr_slave_0: entered promiscuous mode [ 32.740329][ T3301] hsr_slave_1: entered promiscuous mode [ 32.746344][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.753725][ T3301] Cannot create hsr debugfs directory [ 32.791108][ T3313] hsr_slave_0: entered promiscuous mode [ 32.798266][ T3313] hsr_slave_1: entered promiscuous mode [ 32.804926][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 32.812161][ T3313] Cannot create hsr debugfs directory [ 32.836071][ T3305] hsr_slave_0: entered promiscuous mode [ 32.843338][ T3305] hsr_slave_1: entered promiscuous mode [ 32.849565][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 32.855714][ T3305] Cannot create hsr debugfs directory [ 32.865414][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.897354][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.926819][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.939160][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.086259][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.096953][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.108933][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.129748][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.165012][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.179763][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.190442][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.222440][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.254792][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.270581][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.285792][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.299473][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.317293][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.363794][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.394489][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.404867][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.430460][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.442858][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.454301][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.468342][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.481292][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.490005][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.498548][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.546415][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.577767][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.587837][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.598264][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.605778][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.622490][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.657870][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.694423][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.713118][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.740111][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.753326][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.762328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.778751][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.790320][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.797674][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.828298][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.836795][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.847630][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.856309][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.870109][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.886688][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.909477][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.917693][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.928938][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.939506][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.953386][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.112173][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.154250][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.181930][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.209090][ T3300] veth0_vlan: entered promiscuous mode [ 34.241242][ T3300] veth1_vlan: entered promiscuous mode [ 34.268823][ T3298] veth0_vlan: entered promiscuous mode [ 34.286760][ T3300] veth0_macvtap: entered promiscuous mode [ 34.295567][ T3300] veth1_macvtap: entered promiscuous mode [ 34.309141][ T3298] veth1_vlan: entered promiscuous mode [ 34.346516][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.381388][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.394500][ T3298] veth0_macvtap: entered promiscuous mode [ 34.419632][ T3298] veth1_macvtap: entered promiscuous mode [ 34.429953][ T3313] veth0_vlan: entered promiscuous mode [ 34.442444][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.461278][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.480841][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.491923][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 34.491943][ T29] audit: type=1400 audit(1759145038.139:81): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.GHYKcU/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.539397][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.547850][ T29] audit: type=1400 audit(1759145038.139:82): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.551724][ T3313] veth1_vlan: entered promiscuous mode [ 34.584586][ T29] audit: type=1400 audit(1759145038.139:83): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.GHYKcU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.623560][ T29] audit: type=1400 audit(1759145038.139:84): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.630265][ T3313] veth0_macvtap: entered promiscuous mode [ 34.654808][ T29] audit: type=1400 audit(1759145038.139:85): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.GHYKcU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.668006][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.692664][ T29] audit: type=1400 audit(1759145038.139:86): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.GHYKcU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.702093][ T3301] veth0_vlan: entered promiscuous mode [ 34.734483][ T29] audit: type=1400 audit(1759145038.149:87): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.747647][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.770186][ T29] audit: type=1400 audit(1759145038.179:88): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.770225][ T29] audit: type=1400 audit(1759145038.179:89): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=4551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.791076][ T3313] veth1_macvtap: entered promiscuous mode [ 34.857974][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.868749][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.876480][ T3301] veth1_vlan: entered promiscuous mode [ 34.900984][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.911450][ T3305] veth0_vlan: entered promiscuous mode [ 34.919639][ T29] audit: type=1400 audit(1759145038.549:90): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.962363][ T292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.994166][ T292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.007484][ T3305] veth1_vlan: entered promiscuous mode [ 35.018788][ T3469] loop3: detected capacity change from 0 to 2048 [ 35.041415][ T292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.061827][ T3469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.063960][ T3305] veth0_macvtap: entered promiscuous mode [ 35.101106][ T3305] veth1_macvtap: entered promiscuous mode [ 35.107374][ T3469] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.128825][ T3301] veth0_macvtap: entered promiscuous mode [ 35.142027][ T3301] veth1_macvtap: entered promiscuous mode [ 35.167067][ T292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.200477][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.219862][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.236989][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.252748][ T292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.277573][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.290921][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.345427][ T292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.391665][ T292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.438044][ T292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.499854][ T292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.528287][ T292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.564914][ T292] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.596362][ T292] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.633894][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.667549][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.691684][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.723457][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.970571][ T3530] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 35.986558][ T3532] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.114395][ T3546] netlink: 104 bytes leftover after parsing attributes in process `syz.2.36'. [ 36.136065][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 36.263197][ T3563] loop2: detected capacity change from 0 to 164 [ 36.290131][ T3563] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.299888][ T3567] loop1: detected capacity change from 0 to 512 [ 36.307245][ T3305] syz-executor (3305) used greatest stack depth: 10720 bytes left [ 36.309721][ T3563] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.325648][ T3563] Symlink component flag not implemented [ 36.331968][ T3563] Symlink component flag not implemented [ 36.344194][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.364337][ T3563] Symlink component flag not implemented (7) [ 36.371275][ T3563] Symlink component flag not implemented (116) [ 36.425884][ T3567] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 36.441691][ T3567] System zones: 0-2, 18-18, 34-35 [ 36.454115][ T3567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.483158][ T3567] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.526565][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.609080][ T3597] batadv_slave_1: entered promiscuous mode [ 36.639651][ T3596] batadv_slave_1: left promiscuous mode [ 36.726502][ T3578] chnl_net:caif_netlink_parms(): no params data found [ 36.787140][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.794666][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.803293][ T3578] bridge_slave_0: entered allmulticast mode [ 36.813839][ T3578] bridge_slave_0: entered promiscuous mode [ 36.825867][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.833890][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.841541][ T3578] bridge_slave_1: entered allmulticast mode [ 36.849802][ T3578] bridge_slave_1: entered promiscuous mode [ 36.878894][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.895132][ T3578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.907283][ T3578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.933473][ T3578] team0: Port device team_slave_0 added [ 36.941279][ T3578] team0: Port device team_slave_1 added [ 36.963359][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.970697][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.999528][ T3578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.012611][ T3578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.020113][ T3578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.048141][ T3578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.089414][ T3578] hsr_slave_0: entered promiscuous mode [ 37.096167][ T3578] hsr_slave_1: entered promiscuous mode [ 37.102888][ T3578] debugfs: 'hsr0' already exists in 'hsr' [ 37.109037][ T3578] Cannot create hsr debugfs directory [ 37.209626][ T3578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.222352][ T3578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.233825][ T3578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.245936][ T3578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.295975][ T3647] loop3: detected capacity change from 0 to 1024 [ 37.330511][ T3578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.344937][ T3578] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.365880][ T3647] EXT4-fs: Ignoring removed orlov option [ 37.373074][ T3647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.393638][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.401508][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.415255][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.422975][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.460330][ T3647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.477527][ T3659] loop0: detected capacity change from 0 to 512 [ 37.485077][ T3578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.485261][ T3659] ======================================================= [ 37.485261][ T3659] WARNING: The mand mount option has been deprecated and [ 37.485261][ T3659] and is ignored by this kernel. Remove the mand [ 37.485261][ T3659] option from the mount to silence this warning. [ 37.485261][ T3659] ======================================================= [ 37.496410][ T3578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.556702][ T3659] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.73: bg 0: block 5: invalid block bitmap [ 37.579370][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.579691][ T3665] SELinux: policydb version 280 does not match my version range 15-35 [ 37.606995][ T3659] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 37.619877][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.620182][ T3659] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.73: invalid indirect mapped block 3 (level 2) [ 37.645873][ T3665] SELinux: failed to load policy [ 37.651387][ T3659] EXT4-fs (loop0): 2 truncates cleaned up [ 37.661968][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.675708][ T3659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.711346][ T3578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.754851][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.830442][ T12] bridge_slave_1: left allmulticast mode [ 37.837468][ T12] bridge_slave_1: left promiscuous mode [ 37.844445][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.856551][ T12] bridge_slave_0: left allmulticast mode [ 37.864395][ T12] bridge_slave_0: left promiscuous mode [ 37.870801][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.924773][ T3692] loop3: detected capacity change from 0 to 512 [ 37.951440][ T3692] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.967558][ T3696] loop0: detected capacity change from 0 to 512 [ 37.975028][ T3696] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 37.980457][ T3692] EXT4-fs (loop3): mount failed [ 38.008524][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.027636][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.047553][ T12] bond0 (unregistering): Released all slaves [ 38.122903][ T12] hsr_slave_0: left promiscuous mode [ 38.138866][ T12] hsr_slave_1: left promiscuous mode [ 38.164469][ T3722] loop0: detected capacity change from 0 to 164 [ 38.168564][ T3724] loop1: detected capacity change from 0 to 512 [ 38.173903][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.189928][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.199568][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.208332][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.218167][ T3724] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.232589][ T3724] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.243277][ T12] veth1_macvtap: left promiscuous mode [ 38.249437][ T12] veth0_macvtap: left promiscuous mode [ 38.249678][ T3722] Unable to read rock-ridge attributes [ 38.255831][ T12] veth1_vlan: left promiscuous mode [ 38.267197][ T12] veth0_vlan: left promiscuous mode [ 38.275088][ T3724] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.293064][ T3722] Unable to read rock-ridge attributes [ 38.299339][ T3724] EXT4-fs (loop1): 1 truncate cleaned up [ 38.308047][ T3722] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 38.311400][ T3727] mmap: syz.2.97 (3727): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 38.331605][ T3724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.357915][ T3729] loop3: detected capacity change from 0 to 1024 [ 38.405067][ T3729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.419720][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.425818][ T3729] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.478187][ T3741] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 38.487479][ T3741] SELinux: failed to load policy [ 38.499872][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.98: lblock 3 mapped to illegal pblock 3 (length 3) [ 38.519880][ T3743] sd 0:0:1:0: device reset [ 38.530774][ T3747] ./file0: Can't lookup blockdev [ 38.547878][ T3729] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 38.549085][ T12] team0 (unregistering): Port device team_slave_1 removed [ 38.560418][ T3729] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.560418][ T3729] [ 38.583886][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.98: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.598837][ T12] team0 (unregistering): Port device team_slave_0 removed [ 38.598933][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.98: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.638030][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.98: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.657538][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.98: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.688308][ T3757] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 38.691786][ T3752] IPVS: stopping master sync thread 3757 ... [ 38.703665][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.98: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.721535][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.98: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.741304][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.98: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.762583][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.98: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.795126][ T3762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3762 comm=syz.2.111 [ 38.808047][ T3762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3762 comm=syz.2.111 [ 38.822977][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.98: lblock 3 mapped to illegal pblock 3 (length 1) [ 38.853246][ T3765] loop0: detected capacity change from 0 to 512 [ 38.910095][ T3578] veth0_vlan: entered promiscuous mode [ 38.920026][ T3765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.922104][ T3578] veth1_vlan: entered promiscuous mode [ 38.953359][ T3578] veth0_macvtap: entered promiscuous mode [ 38.964740][ T3578] veth1_macvtap: entered promiscuous mode [ 38.979342][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.988868][ T3765] EXT4-fs (loop0): 1 truncate cleaned up [ 38.989771][ T3578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.007488][ T3765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.027341][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.046599][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.067367][ T2931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.103333][ T3783] process 'syz.2.117' launched '/dev/fd/5' with NULL argv: empty string added [ 39.103561][ T2931] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.139246][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.272958][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 39.285901][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.285901][ T52] [ 39.308767][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.327292][ T3805] geneve2: entered promiscuous mode [ 39.365575][ T2931] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 41407 - 0 [ 39.382928][ T2931] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 41407 - 0 [ 39.395804][ T2931] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 41407 - 0 [ 39.407152][ T2931] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 41407 - 0 [ 39.502491][ T3820] loop2: detected capacity change from 0 to 1024 [ 39.510038][ T3820] EXT4-fs: inline encryption not supported [ 39.527684][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 39.527705][ T29] audit: type=1326 audit(1759145043.169:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e8c8eec9 code=0x7ffc0000 [ 39.563822][ T29] audit: type=1326 audit(1759145043.169:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4e8c8eec9 code=0x7ffc0000 [ 39.590132][ T29] audit: type=1326 audit(1759145043.169:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e8c8eec9 code=0x7ffc0000 [ 39.592301][ T3820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.616576][ T29] audit: type=1326 audit(1759145043.169:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e8c8eec9 code=0x7ffc0000 [ 39.632051][ T3820] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.657444][ T29] audit: type=1326 audit(1759145043.169:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4e8c8eec9 code=0x7ffc0000 [ 39.696030][ T29] audit: type=1326 audit(1759145043.169:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e8c8eec9 code=0x7ffc0000 [ 39.721623][ T29] audit: type=1326 audit(1759145043.169:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e8c8eec9 code=0x7ffc0000 [ 39.750881][ T29] audit: type=1326 audit(1759145043.169:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4e8c8eec9 code=0x7ffc0000 [ 39.778606][ T29] audit: type=1400 audit(1759145043.199:361): avc: denied { write } for pid=3817 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.797863][ T3820] EXT4-fs (loop2): shut down requested (0) [ 39.810910][ T29] audit: type=1326 audit(1759145043.199:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e8c8eec9 code=0x7ffc0000 [ 39.862984][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.944555][ T3847] serio: Serial port ptm0 [ 40.021089][ T3856] loop5: detected capacity change from 0 to 512 [ 40.039538][ T3856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.059521][ T3856] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.098366][ T3578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.279168][ T3892] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.329765][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.165'. [ 40.543053][ T3909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'. [ 40.778468][ T3925] sd 0:0:1:0: device reset [ 40.822774][ T3929] netlink: 'syz.3.181': attribute type 3 has an invalid length. [ 40.989975][ T3944] loop0: detected capacity change from 0 to 512 [ 41.037135][ T3944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.075362][ T3944] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.160078][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.245689][ T3978] openvswitch: netlink: Message has 6 unknown bytes. [ 41.333229][ T3985] loop5: detected capacity change from 0 to 512 [ 41.553955][ T4006] netlink: 'syz.1.217': attribute type 39 has an invalid length. [ 41.793157][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 41.913076][ T4047] dummy0: entered promiscuous mode [ 41.921197][ T4047] bond_slave_0: entered promiscuous mode [ 41.932482][ T4047] bond_slave_0: left promiscuous mode [ 41.938919][ T4047] dummy0: left promiscuous mode [ 42.273814][ T4077] loop3: detected capacity change from 0 to 2048 [ 42.288192][ T4077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.301507][ T4077] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.350802][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.559372][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 42.824247][ T4138] serio: Serial port ttyS3 [ 42.908740][ T4155] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.274'. [ 42.932693][ T4145] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.274'. [ 42.966471][ T4162] netlink: 7 bytes leftover after parsing attributes in process `syz.2.286'. [ 42.978308][ T4162] netlink: 7 bytes leftover after parsing attributes in process `syz.2.286'. [ 42.987910][ T4161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.287'. [ 43.212972][ T4183] loop3: detected capacity change from 0 to 512 [ 43.242870][ T4183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.262637][ T4183] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.278456][ T4183] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.296: iget: bad i_size value: 2533274857506816 [ 43.328954][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.335467][ T4187] netlink: 3 bytes leftover after parsing attributes in process `syz.5.298'. [ 43.352341][ T4187] batadv1: entered promiscuous mode [ 43.357869][ T4187] batadv1: entered allmulticast mode [ 43.545531][ T148] tipc: Subscription rejected, illegal request [ 43.638419][ T4201] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 43.679016][ T4211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.308'. [ 43.731686][ T4209] netlink: zone id is out of range [ 43.899562][ T4221] ================================================================== [ 43.908765][ T4221] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 43.917438][ T4221] [ 43.920408][ T4221] read-write to 0xffff888106da1d90 of 8 bytes by task 52 on cpu 1: [ 43.930942][ T4221] __xa_clear_mark+0xf5/0x1e0 [ 43.936397][ T4221] __folio_end_writeback+0x177/0x470 [ 43.942858][ T4221] folio_end_writeback+0x71/0x3d0 [ 43.948732][ T4221] ext4_finish_bio+0x459/0x8c0 [ 43.954935][ T4221] ext4_release_io_end+0x9f/0x1f0 [ 43.961467][ T4221] ext4_end_io_end+0x18d/0x240 [ 43.967555][ T4221] ext4_end_io_rsv_work+0x151/0x1e0 [ 43.973156][ T4221] process_scheduled_works+0x4ce/0x9d0 [ 43.979109][ T4221] worker_thread+0x582/0x770 [ 43.984438][ T4221] kthread+0x486/0x510 [ 43.989286][ T4221] ret_from_fork+0x11f/0x1b0 [ 43.994865][ T4221] ret_from_fork_asm+0x1a/0x30 [ 44.001592][ T4221] [ 44.004209][ T4221] read to 0xffff888106da1d90 of 8 bytes by task 4221 on cpu 0: [ 44.013049][ T4221] xas_find_marked+0x218/0x620 [ 44.018490][ T4221] find_get_entry+0x5d/0x380 [ 44.024796][ T4221] filemap_get_folios_tag+0x13b/0x210 [ 44.031706][ T4221] filemap_fdatawait_keep_errors+0x6c/0x180 [ 44.038770][ T4221] sync_inodes_sb+0x39c/0x440 [ 44.044331][ T4221] sync_inodes_one_sb+0x3d/0x50 [ 44.050696][ T4221] __iterate_supers+0x10d/0x220 [ 44.057197][ T4221] iterate_supers+0x1f/0x30 [ 44.062841][ T4221] ksys_sync+0x5c/0xe0 [ 44.067483][ T4221] __ia32_sys_sync+0xe/0x20 [ 44.072729][ T4221] x64_sys_call+0x2d10/0x2ff0 [ 44.080065][ T4221] do_syscall_64+0xd2/0x200 [ 44.084888][ T4221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.092041][ T4221] [ 44.094498][ T4221] value changed: 0xffffffffffffff00 -> 0xffffffffff800000 [ 44.101844][ T4221] [ 44.104491][ T4221] Reported by Kernel Concurrency Sanitizer on: [ 44.111456][ T4221] CPU: 0 UID: 0 PID: 4221 Comm: syz.3.313 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.122738][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 44.134567][ T4221] ==================================================================