last executing test programs: 38.21265051s ago: executing program 4 (id=24): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000640)="980bcfe393059bae3f648ed47a483be27024e4dd506130bdfbcd2df1d38ec7fa1c341ccb083d3ff79d5bc4d28e2a61cc95e5c91b2b508136985bd117c1dff44ccbd4ab6f", 0x44}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 38.1623223s ago: executing program 4 (id=25): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) 37.233324632s ago: executing program 4 (id=39): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 36.794911747s ago: executing program 4 (id=45): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 36.754681047s ago: executing program 4 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 36.055059805s ago: executing program 4 (id=63): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 36.035965015s ago: executing program 32 (id=63): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.032945232s ago: executing program 3 (id=631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000b800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4.088763803s ago: executing program 3 (id=640): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000005c0)={0x0}) syz_open_dev$usbfs(&(0x7f0000000580), 0x205, 0x8401) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910950000000000730ae8ff00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000200)=""/172, 0xac}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f00000005c0)=""/59, 0x3b}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f00000007c0)=""/206, 0xce}], 0x6}}], 0x2, 0x40000020, 0x0) 3.987794444s ago: executing program 2 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x2, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x32, 0x20, 0x0, @in6={0xa, 0x4e22, 0x973, @mcast1, 0x4}}]}, 0x38}}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x8441, 0x104) fallocate(r3, 0x8, 0x4000, 0x4000) 3.987505874s ago: executing program 2 (id=643): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\x00\x00', 0x2, 0x0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 3.973759444s ago: executing program 0 (id=644): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 3.913778945s ago: executing program 0 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r3, r2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 3.871458126s ago: executing program 2 (id=647): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.870370635s ago: executing program 2 (id=649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000025c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x238, 0x190, 0xffffffff, 0xd8, 0x238, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, &(0x7f0000001080), {[{{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id=0x65, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ip6erspan0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @loopback, @multicast2, @gre_key=0x1, @port=0x4e22}}}}, {{@ip={@local, @multicast2, 0xff, 0x0, 'veth1_to_team\x00', 'dvmrp0\x00', {}, {}, 0x32, 0x1, 0x10}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "d835", 0x1}}, @common=@ah={{0x30}, {[0x8, 0x100], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @rand_addr=0x64010102, @icmp_id=0x66, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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") 3.147803784s ago: executing program 3 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00') ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 2.961430316s ago: executing program 1 (id=654): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.916155496s ago: executing program 3 (id=655): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 2.817233418s ago: executing program 3 (id=656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b0000000000"], 0x48) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r1, &(0x7f0000001100)=""/204, 0xcc, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x3, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x18}}, 0x4) 2.817033748s ago: executing program 5 (id=658): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7bfff000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 1.943533868s ago: executing program 5 (id=659): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x500, 0x0, 0x0, 0xfffffffffffffffc) 1.932784768s ago: executing program 0 (id=669): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000025c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d0, 0x238, 0x190, 0xffffffff, 0xd8, 0x238, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, &(0x7f0000001080), {[{{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x3, @ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id=0x65, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ip6erspan0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @loopback, @multicast2, @gre_key=0x1, @port=0x4e22}}}}, {{@ip={@local, @multicast2, 0xff, 0x0, 'veth1_to_team\x00', 'dvmrp0\x00', {}, {}, 0x32, 0x1, 0x10}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "d835", 0x1}}, @common=@ah={{0x30}, {[0x8, 0x100], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @rand_addr=0x64010102, @icmp_id=0x66, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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") 1.932423838s ago: executing program 2 (id=660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000b800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.314315815s ago: executing program 5 (id=661): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280)}, 0x121, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, 0x2000000008}, 0x0, 0xa, 0xffffffffffffffff, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x198) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.220267196s ago: executing program 5 (id=662): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRES32, @ANYRESDEC=r2, @ANYRES8], 0x119) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pwritev(r4, &(0x7f0000000780)=[{&(0x7f00000001c0)="8b7b0aec79948004bb372b0227fdbd55f6f2402b396957fcdf7791e956bea518d131d3b4f5b2ad5202cecaa6dd14a7055be801b28dc3667777fae21bc49b48e9e755debda8d69c1adf4c80e2acfe21ee668f31134a9f1fd07bbdd69f1e25c4760420d31a2d", 0xffda}, {0x0}], 0x2, 0x0, 0x9) 859.81157ms ago: executing program 1 (id=663): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 859.33153ms ago: executing program 1 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x1, 0x0, 0x0) 839.29612ms ago: executing program 1 (id=665): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x82, 0x100000, 0x4800013, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r1, 0x2d3e, 0x0, 0x4, 0x0, 0x0) 522.575984ms ago: executing program 2 (id=666): syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 521.998304ms ago: executing program 1 (id=667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 451.826515ms ago: executing program 1 (id=668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x7fff, 0x0) 376.218256ms ago: executing program 0 (id=670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000017c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x300, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x4e, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df4"}}}}, 0xfdef) 297.018837ms ago: executing program 5 (id=671): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$l2tp(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x1c, r4, 0x9c3fa077fa966179, 0x4, 0x25dfdbfb, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 211.685208ms ago: executing program 0 (id=672): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, 0x0, 0x0) 210.988848ms ago: executing program 0 (id=673): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x500, 0x0, 0x0, 0xfffffffffffffffc) 327.3µs ago: executing program 3 (id=674): mknod$loop(0x0, 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 0s ago: executing program 5 (id=675): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x1d, 0xa}, @md5sig={0x13, 0x12, "41e35911e54143e31e41c0b652d0feea"}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 34.340409][ T29] audit: type=1400 audit(1749920006.776:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.341574][ T3298] cgroup: Unknown subsys name 'net' [ 34.363154][ T29] audit: type=1400 audit(1749920006.776:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.390554][ T29] audit: type=1400 audit(1749920006.806:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.545072][ T3298] cgroup: Unknown subsys name 'cpuset' [ 34.551344][ T3298] cgroup: Unknown subsys name 'rlimit' [ 34.722721][ T29] audit: type=1400 audit(1749920007.156:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.750387][ T29] audit: type=1400 audit(1749920007.156:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.771016][ T29] audit: type=1400 audit(1749920007.156:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.776402][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.791388][ T29] audit: type=1400 audit(1749920007.156:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.820471][ T29] audit: type=1400 audit(1749920007.156:69): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.831277][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.845282][ T29] audit: type=1400 audit(1749920007.156:70): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.877474][ T29] audit: type=1400 audit(1749920007.246:71): avc: denied { relabelto } for pid=3302 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.011363][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 36.053399][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 36.085710][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 36.096544][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 36.166904][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.174086][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.181244][ T3310] bridge_slave_0: entered allmulticast mode [ 36.187773][ T3310] bridge_slave_0: entered promiscuous mode [ 36.196580][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.203709][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.210890][ T3310] bridge_slave_1: entered allmulticast mode [ 36.217255][ T3310] bridge_slave_1: entered promiscuous mode [ 36.242360][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.270577][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.279767][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.286860][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.294100][ T3313] bridge_slave_0: entered allmulticast mode [ 36.300519][ T3313] bridge_slave_0: entered promiscuous mode [ 36.318472][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.327770][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.335181][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.342396][ T3308] bridge_slave_0: entered allmulticast mode [ 36.348911][ T3308] bridge_slave_0: entered promiscuous mode [ 36.358385][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.365516][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.372660][ T3308] bridge_slave_1: entered allmulticast mode [ 36.379290][ T3308] bridge_slave_1: entered promiscuous mode [ 36.385540][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.392646][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.399850][ T3313] bridge_slave_1: entered allmulticast mode [ 36.406335][ T3313] bridge_slave_1: entered promiscuous mode [ 36.436515][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.443685][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.450959][ T3309] bridge_slave_0: entered allmulticast mode [ 36.457586][ T3309] bridge_slave_0: entered promiscuous mode [ 36.480591][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.487704][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.494875][ T3309] bridge_slave_1: entered allmulticast mode [ 36.501285][ T3309] bridge_slave_1: entered promiscuous mode [ 36.508148][ T3310] team0: Port device team_slave_0 added [ 36.521804][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.532124][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.542031][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.556435][ T3310] team0: Port device team_slave_1 added [ 36.570921][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.591905][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.611679][ T3308] team0: Port device team_slave_0 added [ 36.623505][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.643040][ T3308] team0: Port device team_slave_1 added [ 36.653789][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.660882][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.686983][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.702875][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.710426][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.717677][ T3314] bridge_slave_0: entered allmulticast mode [ 36.724276][ T3314] bridge_slave_0: entered promiscuous mode [ 36.731215][ T3313] team0: Port device team_slave_0 added [ 36.742041][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.749079][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.775102][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.790900][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.798009][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.805188][ T3314] bridge_slave_1: entered allmulticast mode [ 36.811591][ T3314] bridge_slave_1: entered promiscuous mode [ 36.818558][ T3313] team0: Port device team_slave_1 added [ 36.829919][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.836913][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.862954][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.876611][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.883648][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.909794][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.921654][ T3309] team0: Port device team_slave_0 added [ 36.938693][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.945802][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.971781][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.983114][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.990163][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.016174][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.034204][ T3309] team0: Port device team_slave_1 added [ 37.069436][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.096960][ T3310] hsr_slave_0: entered promiscuous mode [ 37.103205][ T3310] hsr_slave_1: entered promiscuous mode [ 37.115152][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.122220][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.148307][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.160250][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.171925][ T3313] hsr_slave_0: entered promiscuous mode [ 37.178056][ T3313] hsr_slave_1: entered promiscuous mode [ 37.184227][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.191785][ T3313] Cannot create hsr debugfs directory [ 37.205359][ T3308] hsr_slave_0: entered promiscuous mode [ 37.211381][ T3308] hsr_slave_1: entered promiscuous mode [ 37.217285][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.224929][ T3308] Cannot create hsr debugfs directory [ 37.230856][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.237865][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.263826][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.307836][ T3314] team0: Port device team_slave_0 added [ 37.324872][ T3314] team0: Port device team_slave_1 added [ 37.332405][ T3309] hsr_slave_0: entered promiscuous mode [ 37.338582][ T3309] hsr_slave_1: entered promiscuous mode [ 37.344372][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.351934][ T3309] Cannot create hsr debugfs directory [ 37.419966][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.427006][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.452961][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.478750][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.485821][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.511962][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.617205][ T3314] hsr_slave_0: entered promiscuous mode [ 37.623102][ T3314] hsr_slave_1: entered promiscuous mode [ 37.629083][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.636717][ T3314] Cannot create hsr debugfs directory [ 37.659312][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.677226][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.689106][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.699802][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.742564][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.751562][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.761302][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.772278][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.803836][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.813042][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.821822][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.830848][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.871252][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.882754][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.892285][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.911026][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.942508][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.960202][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.968546][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.985598][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.999000][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.013389][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.021021][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.035489][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.044079][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.065734][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.072843][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.082024][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.089105][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.098035][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.105275][ T552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.113818][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.120907][ T552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.131169][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.149797][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.157061][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.186237][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.193364][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.209012][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.219567][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.259266][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.274074][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.284585][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.334351][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.346264][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.362205][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.369422][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.380428][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.418624][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.425737][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.443326][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.455493][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.473659][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.488189][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.495291][ T552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.525148][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.532318][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.607327][ T3313] veth0_vlan: entered promiscuous mode [ 38.619524][ T3313] veth1_vlan: entered promiscuous mode [ 38.647896][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.671986][ T3308] veth0_vlan: entered promiscuous mode [ 38.696201][ T3310] veth0_vlan: entered promiscuous mode [ 38.706881][ T3308] veth1_vlan: entered promiscuous mode [ 38.717411][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.735076][ T3310] veth1_vlan: entered promiscuous mode [ 38.741543][ T3313] veth0_macvtap: entered promiscuous mode [ 38.761787][ T3310] veth0_macvtap: entered promiscuous mode [ 38.770013][ T3313] veth1_macvtap: entered promiscuous mode [ 38.791963][ T3310] veth1_macvtap: entered promiscuous mode [ 38.808198][ T3308] veth0_macvtap: entered promiscuous mode [ 38.819663][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.828215][ T3308] veth1_macvtap: entered promiscuous mode [ 38.838495][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.850246][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.864167][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.876283][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.888845][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.897793][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.906628][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.915385][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.927202][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.936081][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.944846][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.953718][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.967508][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.983375][ T3314] veth0_vlan: entered promiscuous mode [ 38.996698][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.005582][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.014417][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.023337][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.049792][ T3314] veth1_vlan: entered promiscuous mode [ 39.061893][ T3309] veth0_vlan: entered promiscuous mode [ 39.073162][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.086555][ T3314] veth0_macvtap: entered promiscuous mode [ 39.109261][ T3314] veth1_macvtap: entered promiscuous mode [ 39.126318][ T3309] veth1_vlan: entered promiscuous mode [ 39.141657][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.179757][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.188469][ T3309] veth0_macvtap: entered promiscuous mode [ 39.198287][ T3309] veth1_macvtap: entered promiscuous mode [ 39.209464][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.218304][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.227073][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.235857][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.288562][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.289768][ C0] hrtimer: interrupt took 46198 ns [ 39.306737][ T3486] loop3: detected capacity change from 0 to 8192 [ 39.317841][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.346629][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 39.346647][ T29] audit: type=1326 audit(1749920011.756:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff600aad58a code=0x7ffc0000 [ 39.375915][ T29] audit: type=1326 audit(1749920011.786:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff600aad58a code=0x7ffc0000 [ 39.398986][ T29] audit: type=1326 audit(1749920011.786:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff600aad197 code=0x7ffc0000 [ 39.422083][ T29] audit: type=1326 audit(1749920011.786:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff600ab00ca code=0x7ffc0000 [ 39.425462][ T3309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.454095][ T3309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.457179][ T29] audit: type=1400 audit(1749920011.786:122): avc: denied { mount } for pid=3485 comm="syz.3.4" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.462797][ T3309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.484422][ T29] audit: type=1326 audit(1749920011.786:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff600aad290 code=0x7ffc0000 [ 39.493201][ T3309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.516221][ T29] audit: type=1326 audit(1749920011.786:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff600aad677 code=0x7ffc0000 [ 39.516250][ T29] audit: type=1326 audit(1749920011.786:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff600aad290 code=0x7ffc0000 [ 39.571626][ T29] audit: type=1326 audit(1749920011.786:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff600aae929 code=0x7ffc0000 [ 39.595050][ T29] audit: type=1326 audit(1749920011.786:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff600aae929 code=0x7ffc0000 [ 39.807359][ T3509] pimreg: entered allmulticast mode [ 39.822904][ T3509] pimreg: left allmulticast mode [ 39.850863][ T3511] ref_ctr increment failed for inode: 0x1c offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005bf40 [ 39.873220][ T3510] uprobe: syz.4.13:3510 failed to unregister, leaking uprobe [ 39.906465][ T3514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.119876][ T3527] loop0: detected capacity change from 0 to 8192 [ 40.161533][ T3531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22'. [ 40.283434][ T3539] loop0: detected capacity change from 0 to 512 [ 40.292176][ T3539] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.305334][ T3539] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.328141][ T3539] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.351259][ T3539] EXT4-fs (loop0): 1 truncate cleaned up [ 40.358141][ T3539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.377153][ T3539] EXT4-fs error (device loop0): ext4_lookup:1787: inode #16: comm syz.0.26: iget: bad i_size value: 5497558147880 [ 40.482205][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.557438][ T3548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.921376][ T3568] xt_hashlimit: size too large, truncated to 1048576 [ 41.270701][ T3579] netlink: 100 bytes leftover after parsing attributes in process `syz.3.40'. [ 41.386312][ T3581] syz.3.41 (3581) used greatest stack depth: 10504 bytes left [ 41.627616][ T3548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.838286][ T3604] tipc: Started in network mode [ 41.843292][ T3604] tipc: Node identity 4, cluster identity 4711 [ 41.849636][ T3604] tipc: Node number set to 4 [ 42.062685][ T3631] sit0: entered allmulticast mode [ 42.076045][ T3631] sit0: entered promiscuous mode [ 42.137731][ T3548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.239443][ T3548] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.309012][ T3548] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.320924][ T3659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.349001][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.382999][ T3548] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.392918][ T3663] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 42.400822][ T3663] netlink: 'syz.2.64': attribute type 19 has an invalid length. [ 42.408650][ T3663] netlink: 156 bytes leftover after parsing attributes in process `syz.2.64'. [ 42.426315][ T3659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.456148][ T3548] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.471991][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.510842][ T3659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.532767][ T3548] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.554423][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.605342][ T3659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.648060][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.706203][ T3659] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.743661][ T3659] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.826714][ T3659] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.899060][ T3659] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.984791][ T31] bridge_slave_1: left allmulticast mode [ 42.990500][ T31] bridge_slave_1: left promiscuous mode [ 42.996231][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.045016][ T31] bridge_slave_0: left allmulticast mode [ 43.050722][ T31] bridge_slave_0: left promiscuous mode [ 43.056666][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.100665][ T3696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.74'. [ 43.205161][ T3703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 43.247169][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.267684][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.277945][ T31] bond0 (unregistering): Released all slaves [ 43.280218][ T3705] loop3: detected capacity change from 0 to 128 [ 43.304709][ T3705] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.373531][ T31] hsr_slave_0: left promiscuous mode [ 43.382413][ T3705] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.443435][ T31] hsr_slave_1: left promiscuous mode [ 43.457909][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.465477][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.505993][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.513464][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.539057][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.558264][ T31] veth1_macvtap: left promiscuous mode [ 43.590481][ T31] veth0_macvtap: left promiscuous mode [ 43.603053][ T31] veth1_vlan: left promiscuous mode [ 43.623502][ T31] veth0_vlan: left promiscuous mode [ 43.684495][ T3673] syz.2.68 (3673) used greatest stack depth: 7160 bytes left [ 43.734744][ T3732] ======================================================= [ 43.734744][ T3732] WARNING: The mand mount option has been deprecated and [ 43.734744][ T3732] and is ignored by this kernel. Remove the mand [ 43.734744][ T3732] option from the mount to silence this warning. [ 43.734744][ T3732] ======================================================= [ 43.769927][ T31] team0 (unregistering): Port device team_slave_1 removed [ 43.784639][ T31] team0 (unregistering): Port device team_slave_0 removed [ 43.816031][ T3735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 43.875335][ T3728] wg2: entered promiscuous mode [ 43.880360][ T3728] wg2: entered allmulticast mode [ 44.119338][ T3669] chnl_net:caif_netlink_parms(): no params data found [ 44.247681][ T3746] syz.3.86 uses obsolete (PF_INET,SOCK_PACKET) [ 44.265194][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.272353][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.296797][ T3773] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 44.304475][ T3773] netlink: 'syz.0.91': attribute type 2 has an invalid length. [ 44.312501][ T3773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 44.330529][ T3669] bridge_slave_0: entered allmulticast mode [ 44.366670][ T3669] bridge_slave_0: entered promiscuous mode [ 44.410737][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.418832][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.428757][ T3669] bridge_slave_1: entered allmulticast mode [ 44.442889][ T3669] bridge_slave_1: entered promiscuous mode [ 44.515778][ T3669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.607136][ T3669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.662743][ T3669] team0: Port device team_slave_0 added [ 44.677584][ T3669] team0: Port device team_slave_1 added [ 44.746493][ T3669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.753550][ T3669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.779652][ T3669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.824704][ T3669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.831735][ T3669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.857956][ T3669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.938654][ T3669] hsr_slave_0: entered promiscuous mode [ 44.954526][ T3669] hsr_slave_1: entered promiscuous mode [ 44.960629][ T3669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.972324][ T3669] Cannot create hsr debugfs directory [ 44.998162][ T29] kauditd_printk_skb: 740 callbacks suppressed [ 44.998178][ T29] audit: type=1400 audit(1749920017.436:868): avc: denied { write } for pid=3857 comm="syz.1.99" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.062020][ T29] audit: type=1400 audit(1749920017.496:869): avc: denied { map } for pid=3857 comm="syz.1.99" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.187972][ T3868] loop0: detected capacity change from 0 to 128 [ 45.208778][ T3669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.222147][ T3669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.238214][ T3669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.263106][ T3669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.297235][ T29] audit: type=1400 audit(1749920017.736:870): avc: denied { create } for pid=3874 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.320025][ T3868] syz.0.104: attempt to access beyond end of device [ 45.320025][ T3868] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 45.357558][ T29] audit: type=1400 audit(1749920017.756:871): avc: denied { write } for pid=3874 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.382536][ T3669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.399408][ T29] audit: type=1400 audit(1749920017.836:872): avc: denied { read } for pid=3888 comm="syz.3.108" path="socket:[6329]" dev="sockfs" ino=6329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.428047][ T3669] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.444839][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.452041][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.477576][ T3808] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.484722][ T3808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.610314][ T3669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.768313][ T3932] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.835976][ T3932] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.861569][ T3669] veth0_vlan: entered promiscuous mode [ 45.870178][ T3669] veth1_vlan: entered promiscuous mode [ 45.878503][ T3932] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.903455][ T3669] veth0_macvtap: entered promiscuous mode [ 45.913726][ T3669] veth1_macvtap: entered promiscuous mode [ 45.928985][ T3932] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.942523][ T3669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.956266][ T3669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.967496][ T3669] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.976639][ T3669] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.985487][ T3669] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.994293][ T3669] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.019951][ T29] audit: type=1400 audit(1749920018.456:873): avc: denied { mounton } for pid=3669 comm="syz-executor" path="/root/syzkaller.4rrqRH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 46.071641][ T29] audit: type=1400 audit(1749920018.506:874): avc: denied { write } for pid=3970 comm="syz.5.65" name="udplite" dev="proc" ino=4026533364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 46.113374][ T29] audit: type=1400 audit(1749920018.536:875): avc: denied { read write } for pid=3970 comm="syz.5.65" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 46.137467][ T29] audit: type=1400 audit(1749920018.536:876): avc: denied { open } for pid=3970 comm="syz.5.65" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 46.291377][ T3976] loop5: detected capacity change from 0 to 1024 [ 46.330226][ T29] audit: type=1400 audit(1749920018.766:877): avc: denied { setopt } for pid=4008 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.361078][ T3976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.457650][ T4026] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 46.472919][ T4026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.518833][ T4026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.527739][ T4026] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 46.540032][ T4026] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 46.550666][ T4034] loop3: detected capacity change from 0 to 1024 [ 46.559236][ T4034] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.584792][ T4034] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 46.602741][ T4034] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.608322][ T4035] ip6erspan0: entered promiscuous mode [ 46.612974][ T4034] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.121: Invalid inode table block 0 in block_group 0 [ 46.628316][ T4034] EXT4-fs (loop3): Remounting filesystem read-only [ 46.635211][ T4034] EXT4-fs (loop3): 1 truncate cleaned up [ 46.641659][ T4034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.661912][ T4035] bond1: (slave ip6erspan0): making interface the new active one [ 46.670624][ T4035] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 46.725774][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.801371][ T3932] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.819001][ T3932] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.851403][ T3932] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.878026][ T3932] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.940308][ T4049] loop0: detected capacity change from 0 to 1024 [ 46.974484][ T4048] process '+}[@' launched './file0' with NULL argv: empty string added [ 47.008013][ T4049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.039789][ T4049] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.122158][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.198240][ T4062] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.210710][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.408161][ T4088] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 47.416102][ T4088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 47.462084][ T4088] dummy0: entered promiscuous mode [ 47.506256][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 47.655774][ T4101] netlink: 'syz.0.145': attribute type 10 has an invalid length. [ 47.674142][ T4101] dummy0: left promiscuous mode [ 47.682198][ T4101] team0: Port device dummy0 added [ 47.695708][ T4101] netlink: 'syz.0.145': attribute type 10 has an invalid length. [ 47.716635][ T4101] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.730492][ T4101] team0: Failed to send options change via netlink (err -105) [ 47.755842][ T4101] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.756217][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.147'. [ 47.774226][ T4101] team0: Port device dummy0 removed [ 47.785375][ T4101] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.808636][ T4106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.827301][ T4106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.863337][ T4111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.883237][ T4111] netlink: 96 bytes leftover after parsing attributes in process `syz.3.149'. [ 48.077630][ T4123] Driver unsupported XDP return value 0 on prog (id 120) dev N/A, expect packet loss! [ 48.149538][ T4128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4128 comm=syz.0.157 [ 48.166029][ T4131] wg2: left promiscuous mode [ 48.170682][ T4131] wg2: left allmulticast mode [ 48.208554][ T4131] wg2: entered promiscuous mode [ 48.213521][ T4131] wg2: entered allmulticast mode [ 48.261591][ T4137] loop3: detected capacity change from 0 to 1024 [ 48.274963][ T4137] EXT4-fs: inline encryption not supported [ 48.298241][ T4137] EXT4-fs: Ignoring removed bh option [ 48.326218][ T4137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.383035][ T4149] netlink: 'syz.2.165': attribute type 4 has an invalid length. [ 48.390898][ T4149] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.165'. [ 48.410180][ T4137] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.161: Allocating blocks 497-513 which overlap fs metadata [ 48.464408][ T4137] EXT4-fs (loop3): Remounting filesystem read-only [ 48.565234][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.696855][ T4176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.177'. [ 48.746734][ T4176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 48.941264][ T4183] mmap: syz.3.179 (4183) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.090904][ T4190] hub 9-0:1.0: USB hub found [ 49.096076][ T4190] hub 9-0:1.0: 8 ports detected [ 49.219757][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.187'. [ 49.270906][ T4206] loop1: detected capacity change from 0 to 2048 [ 49.300247][ T4206] EXT4-fs: Ignoring removed bh option [ 49.361593][ T4206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.384065][ T4206] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.400088][ T4206] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.412332][ T4206] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.412332][ T4206] [ 49.422140][ T4206] EXT4-fs (loop1): Total free blocks count 0 [ 49.428283][ T4206] EXT4-fs (loop1): Free/Dirty block details [ 49.434288][ T4206] EXT4-fs (loop1): free_blocks=2415919104 [ 49.440041][ T4206] EXT4-fs (loop1): dirty_blocks=16 [ 49.445205][ T4206] EXT4-fs (loop1): Block reservation details [ 49.451221][ T4206] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 49.459377][ T4221] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 49.467202][ T4221] netlink: 152 bytes leftover after parsing attributes in process `syz.1.189'. [ 49.569109][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.792640][ T4236] ip6gretap0: entered promiscuous mode [ 49.811830][ T4236] vlan2: entered promiscuous mode [ 49.828148][ T4238] loop1: detected capacity change from 0 to 1024 [ 49.853205][ T4238] EXT4-fs: Ignoring removed nobh option [ 49.858962][ T4238] EXT4-fs: Ignoring removed nobh option [ 49.935669][ T4249] loop2: detected capacity change from 0 to 512 [ 49.937823][ T4247] wg2: entered promiscuous mode [ 49.946992][ T4247] wg2: entered allmulticast mode [ 49.953465][ T4238] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 49.990208][ T4249] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.005132][ T4238] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.196: inode #4294967295: comm syz.1.196: iget: illegal inode # [ 50.072692][ T4238] EXT4-fs (loop1): no journal found [ 50.078023][ T4238] EXT4-fs (loop1): can't get journal size [ 50.092014][ T3310] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 50.148296][ T4238] EXT4-fs (loop1): failed to initialize system zone (-22) [ 50.177158][ T4238] EXT4-fs (loop1): mount failed [ 50.223317][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 50.223333][ T29] audit: type=1400 audit(1749920022.656:1018): avc: denied { read open } for pid=4257 comm="syz.2.207" path="/" dev="configfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 50.225423][ T4258] loop2: detected capacity change from 0 to 256 [ 50.284372][ T4261] tipc: Can't bind to reserved service type 1 [ 50.454713][ T29] audit: type=1400 audit(1749920022.896:1019): avc: denied { name_bind } for pid=4271 comm="syz.0.214" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.496435][ T29] audit: type=1326 audit(1749920022.926:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54d6be929 code=0x7ffc0000 [ 50.520279][ T29] audit: type=1326 audit(1749920022.926:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff54d6be929 code=0x7ffc0000 [ 50.543962][ T29] audit: type=1326 audit(1749920022.926:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff54d6be963 code=0x7ffc0000 [ 50.567206][ T29] audit: type=1326 audit(1749920022.926:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff54d6be963 code=0x7ffc0000 [ 50.590589][ T29] audit: type=1326 audit(1749920022.926:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54d6be929 code=0x7ffc0000 [ 50.613940][ T29] audit: type=1326 audit(1749920022.926:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54d6be929 code=0x7ffc0000 [ 50.637816][ T29] audit: type=1326 audit(1749920022.926:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54d6be929 code=0x7ffc0000 [ 50.661179][ T29] audit: type=1326 audit(1749920022.926:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54d6be929 code=0x7ffc0000 [ 51.088904][ T4291] IPv6: Can't replace route, no match found [ 51.244438][ T4304] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 51.244438][ T4304] The task syz.3.226 (4304) triggered the difference, watch for misbehavior. [ 51.340225][ T4304] loop3: detected capacity change from 0 to 256 [ 51.347366][ T4304] vfat: Unknown parameter 'shortname' [ 51.403758][ T4318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.445276][ T4323] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.236'. [ 51.482198][ T4318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.533445][ T4329] bridge0: entered promiscuous mode [ 51.539398][ T4329] macvlan2: entered promiscuous mode [ 51.549228][ T4329] bridge0: port 3(macvlan2) entered blocking state [ 51.555923][ T4329] bridge0: port 3(macvlan2) entered disabled state [ 51.563072][ T4329] macvlan2: entered allmulticast mode [ 51.568602][ T4329] bridge0: entered allmulticast mode [ 51.576733][ T4329] macvlan2: left allmulticast mode [ 51.581983][ T4329] bridge0: left allmulticast mode [ 51.603603][ T4329] bridge0: left promiscuous mode [ 51.619873][ T4318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.700049][ T4318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.764181][ T4318] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.789434][ T4318] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.810065][ T4318] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.822424][ T4318] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.429733][ T4370] __nla_validate_parse: 1 callbacks suppressed [ 52.429748][ T4370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 52.517783][ T4377] netlink: 96 bytes leftover after parsing attributes in process `syz.3.257'. [ 52.552023][ T4381] syz.3.258 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.615966][ T4380] loop2: detected capacity change from 0 to 2048 [ 52.644761][ T4380] EXT4-fs (loop2): failed to initialize system zone (-117) [ 52.660529][ T4380] EXT4-fs (loop2): mount failed [ 52.781621][ T4390] syzkaller1: entered promiscuous mode [ 52.787370][ T4390] syzkaller1: entered allmulticast mode [ 52.862523][ T4395] loop5: detected capacity change from 0 to 256 [ 53.045893][ T4401] veth1_to_bond: entered allmulticast mode [ 53.058858][ T4401] veth1_to_bond: left allmulticast mode [ 53.106640][ T4409] syzkaller0: entered allmulticast mode [ 53.114776][ T4409] syzkaller0 (unregistering): left allmulticast mode [ 53.186954][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 53.369444][ T4428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.379427][ T4428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.388131][ T4451] Zero length message leads to an empty skb [ 54.434380][ T4453] netlink: 'syz.3.287': attribute type 10 has an invalid length. [ 54.442204][ T4453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.287'. [ 54.486521][ T4453] dummy0: entered promiscuous mode [ 54.509082][ T4453] bridge0: port 3(dummy0) entered blocking state [ 54.515616][ T4453] bridge0: port 3(dummy0) entered disabled state [ 54.542171][ T4453] dummy0: entered allmulticast mode [ 54.551949][ T4453] bridge0: port 3(dummy0) entered blocking state [ 54.558456][ T4453] bridge0: port 3(dummy0) entered forwarding state [ 54.600143][ T4461] loop0: detected capacity change from 0 to 128 [ 54.615993][ T4464] loop5: detected capacity change from 0 to 128 [ 54.635530][ T4464] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 54.692653][ T4461] syz.0.282: attempt to access beyond end of device [ 54.692653][ T4461] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 54.753615][ T4474] loop2: detected capacity change from 0 to 736 [ 54.769499][ T4464] syz.5.291: attempt to access beyond end of device [ 54.769499][ T4464] loop5: rw=0, sector=97, nr_sectors = 944 limit=128 [ 54.780607][ T4474] iso9660: Unknown parameter 'Q{UaND?sM00000000000000000000' [ 54.793159][ T3815] kworker/u8:42: attempt to access beyond end of device [ 54.793159][ T3815] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 54.800551][ T4476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.297'. [ 54.908207][ T3808] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 54.976925][ T4488] netlink: 'syz.5.300': attribute type 12 has an invalid length. [ 55.132920][ T4501] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 55.215782][ T4507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 55.236118][ T4505] bridge: RTM_NEWNEIGH with invalid ether address [ 55.331354][ T4512] netlink: 180 bytes leftover after parsing attributes in process `syz.1.313'. [ 55.388009][ T4513] ref_ctr increment failed for inode: 0xa0 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888109ac33c0 [ 55.399531][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 55.399546][ T29] audit: type=1400 audit(1749920027.826:1208): avc: denied { execute } for pid=4508 comm="syz.5.311" path="/27/memory.events" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.436722][ T4508] uprobe: syz.5.311:4508 failed to unregister, leaking uprobe [ 55.466195][ T29] audit: type=1400 audit(1749920027.886:1209): avc: denied { create } for pid=4518 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.486368][ T29] audit: type=1326 audit(1749920027.896:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff600aae929 code=0x7ffc0000 [ 55.510473][ T29] audit: type=1326 audit(1749920027.896:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff600aae929 code=0x7ffc0000 [ 55.533916][ T29] audit: type=1326 audit(1749920027.896:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff600aae929 code=0x7ffc0000 [ 55.557979][ T29] audit: type=1326 audit(1749920027.896:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff600aae929 code=0x7ffc0000 [ 55.581419][ T29] audit: type=1326 audit(1749920027.896:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff600aae929 code=0x7ffc0000 [ 55.605434][ T29] audit: type=1326 audit(1749920027.896:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff600aae929 code=0x7ffc0000 [ 55.628793][ T29] audit: type=1326 audit(1749920027.896:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff600aae929 code=0x7ffc0000 [ 55.652876][ T29] audit: type=1326 audit(1749920027.896:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.3.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff600aae929 code=0x7ffc0000 [ 55.703372][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 55.776854][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 55.893741][ T4545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'. [ 55.942707][ T4549] loop2: detected capacity change from 0 to 512 [ 55.981602][ T4551] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 55.988354][ T4551] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.996582][ T4551] vhci_hcd vhci_hcd.0: Device attached [ 56.003273][ T4549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.018316][ T4549] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.033136][ T4562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4562 comm=syz.1.331 [ 56.059296][ T4551] netlink: 'syz.3.329': attribute type 4 has an invalid length. [ 56.094922][ T4554] vhci_hcd: connection closed [ 56.096564][ T4562] vlan2: entered allmulticast mode [ 56.097787][ T3817] vhci_hcd: stop threads [ 56.101308][ T4562] bond1: entered allmulticast mode [ 56.107510][ T3817] vhci_hcd: release socket [ 56.120378][ T3817] vhci_hcd: disconnect device [ 56.254489][ T4586] ALSA: seq fatal error: cannot create timer (-22) [ 56.738404][ T4659] random: crng reseeded on system resumption [ 56.809386][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.835310][ T4670] loop0: detected capacity change from 0 to 512 [ 56.852643][ T4670] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.879754][ T4670] EXT4-fs (loop0): 1 truncate cleaned up [ 56.890374][ T4676] loop3: detected capacity change from 0 to 2048 [ 56.894983][ T4677] netlink: 'syz.2.349': attribute type 2 has an invalid length. [ 56.898974][ T4670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.904508][ T4677] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 56.920074][ T4670] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.955108][ T3299] loop3: p1 < > p4 [ 56.961279][ T3299] loop3: p4 size 8388608 extends beyond EOD, truncated [ 56.979775][ T4676] loop3: p1 < > p4 [ 56.986025][ T4676] loop3: p4 size 8388608 extends beyond EOD, truncated [ 57.001167][ T2998] loop3: p1 < > p4 [ 57.014767][ T2998] loop3: p4 size 8388608 extends beyond EOD, truncated [ 57.058184][ T4692] loop0: detected capacity change from 0 to 128 [ 57.094159][ T4692] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 57.121896][ T4479] udevd[4479]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 57.125798][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.165791][ T4479] udevd[4479]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 57.166943][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.202831][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 57.217428][ T4479] udevd[4479]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 57.235317][ T4692] syz.0.353: attempt to access beyond end of device [ 57.235317][ T4692] loop0: rw=0, sector=97, nr_sectors = 944 limit=128 [ 57.346299][ T3822] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 57.372255][ T4727] bridge0: entered promiscuous mode [ 57.382271][ T4727] macvlan2: entered promiscuous mode [ 57.390300][ T4727] bridge0: port 4(macvlan2) entered blocking state [ 57.397052][ T4727] bridge0: port 4(macvlan2) entered disabled state [ 57.404462][ T4727] macvlan2: entered allmulticast mode [ 57.409996][ T4727] bridge0: entered allmulticast mode [ 57.416273][ T4727] macvlan2: left allmulticast mode [ 57.421493][ T4727] bridge0: left allmulticast mode [ 57.427932][ T4727] bridge0: left promiscuous mode [ 57.532409][ T4749] __nla_validate_parse: 4 callbacks suppressed [ 57.532426][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 57.911688][ T4767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'. [ 57.958158][ T4769] loop1: detected capacity change from 0 to 1024 [ 57.966109][ T4769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.976001][ T4769] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.987034][ T4769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 57.995964][ T4769] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.361: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.010743][ T4769] EXT4-fs (loop1): Remounting filesystem read-only [ 58.017578][ T4769] EXT4-fs (loop1): 1 orphan inode deleted [ 58.024154][ T4769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.037515][ T4769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.079778][ T4772] loop1: detected capacity change from 0 to 512 [ 58.086913][ T4772] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.099563][ T4772] EXT4-fs (loop1): 1 truncate cleaned up [ 58.106056][ T4772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.119665][ T4772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.181661][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'. [ 58.192245][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'. [ 58.202949][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'. [ 58.212456][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'. [ 58.245869][ T4779] loop1: detected capacity change from 0 to 8192 [ 58.368924][ T4790] loop2: detected capacity change from 0 to 512 [ 58.394881][ T4789] netlink: 'syz.5.371': attribute type 10 has an invalid length. [ 58.402829][ T4789] netlink: 40 bytes leftover after parsing attributes in process `syz.5.371'. [ 58.406458][ T4790] EXT4-fs: Ignoring removed bh option [ 58.458757][ T4790] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.467903][ T4790] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 58.480291][ T4789] team0: Port device geneve1 added [ 58.497830][ T4790] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 58.529878][ T4790] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 58.547615][ T4790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.578065][ T4802] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.620875][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.658399][ T4802] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.728609][ T4802] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.767835][ T4802] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.837696][ T4802] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.873446][ T4802] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.907006][ T4802] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.919389][ T4831] ref_ctr increment failed for inode: 0x1f6 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888109ac1140 [ 58.928766][ T4802] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.939094][ T4830] uprobe: syz.1.380:4830 failed to unregister, leaking uprobe [ 58.995562][ T4842] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.035981][ T4847] bridge: RTM_NEWNEIGH with invalid ether address [ 59.056156][ T4842] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.107480][ T4842] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.155601][ T4842] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.168604][ T4865] loop1: detected capacity change from 0 to 2048 [ 59.189242][ T4865] EXT4-fs (loop1): failed to initialize system zone (-117) [ 59.203520][ T4865] EXT4-fs (loop1): mount failed [ 59.488267][ T4935] netlink: 'syz.3.386': attribute type 10 has an invalid length. [ 59.496210][ T4935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.386'. [ 59.537167][ T4935] team0: Port device geneve1 added [ 59.774954][ T4967] loop0: detected capacity change from 0 to 128 [ 59.791740][ T4967] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.851932][ T4967] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.976452][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.084433][ T5005] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.137069][ T5005] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.160978][ T5010] SELinux: Context system_u:object_r:mount_exec_t:s0 is not valid (left unmapped). [ 60.195929][ T5005] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.251113][ T5005] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.328842][ T5023] loop0: detected capacity change from 0 to 2048 [ 60.343598][ T5005] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.357684][ T5005] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.358727][ T5023] EXT4-fs (loop0): failed to initialize system zone (-117) [ 60.370494][ T5005] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.385488][ T5005] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.394484][ T5023] EXT4-fs (loop0): mount failed [ 60.471105][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 60.471124][ T29] audit: type=1400 audit(1749920032.896:1639): avc: granted { setsecparam } for pid=5028 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 60.497268][ T29] audit: type=1326 audit(1749920032.896:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 60.520994][ T29] audit: type=1326 audit(1749920032.896:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 60.545058][ T29] audit: type=1326 audit(1749920032.896:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 60.568515][ T29] audit: type=1326 audit(1749920032.896:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 60.592946][ T29] audit: type=1326 audit(1749920032.896:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 60.616499][ T29] audit: type=1326 audit(1749920032.896:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 60.640734][ T29] audit: type=1326 audit(1749920032.906:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93df8658e7 code=0x7ffc0000 [ 60.664761][ T29] audit: type=1326 audit(1749920032.906:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93df80ab19 code=0x7ffc0000 [ 60.688034][ T29] audit: type=1326 audit(1749920032.906:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.1.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 61.110512][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 61.120988][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 61.413298][ T5056] loop0: detected capacity change from 0 to 2048 [ 61.455531][ T4479] loop0: p1 < > p4 [ 61.464634][ T4479] loop0: p4 size 8388608 extends beyond EOD, truncated [ 61.498191][ T5056] loop0: p1 < > p4 [ 61.505734][ T5056] loop0: p4 size 8388608 extends beyond EOD, truncated [ 61.590871][ T4479] udevd[4479]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.601944][ T3684] udevd[3684]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 61.636729][ T4479] udevd[4479]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.701656][ T5076] loop3: detected capacity change from 0 to 2048 [ 61.720645][ T5076] EXT4-fs (loop3): failed to initialize system zone (-117) [ 61.732417][ T5076] EXT4-fs (loop3): mount failed [ 61.918096][ T5084] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 61.925939][ T5084] netlink: 'syz.1.421': attribute type 2 has an invalid length. [ 62.229508][ T4842] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.241770][ T4842] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.253256][ T4842] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.265168][ T4842] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.679199][ T5124] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 62.687032][ T5124] netlink: 'syz.2.435': attribute type 2 has an invalid length. [ 62.695124][ T5124] __nla_validate_parse: 7 callbacks suppressed [ 62.695138][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 62.876333][ T5130] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.947146][ T5130] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.035899][ T5130] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.095792][ T5130] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.172021][ T5130] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.187524][ T5130] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.200255][ T5130] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.213070][ T5130] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.367613][ T5149] loop5: detected capacity change from 0 to 2048 [ 63.430927][ T5149] EXT4-fs (loop5): failed to initialize system zone (-117) [ 63.448416][ T5149] EXT4-fs (loop5): mount failed [ 63.470635][ T5158] netlink: 'syz.1.447': attribute type 1 has an invalid length. [ 63.500779][ T5158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.531022][ T5158] bond2: (slave gretap1): making interface the new active one [ 63.541708][ T5158] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 63.591185][ T5158] vlan2: entered allmulticast mode [ 63.596454][ T5158] bond2: entered allmulticast mode [ 63.601595][ T5158] gretap1: entered allmulticast mode [ 63.613481][ T5158] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 63.792201][ T5174] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.812660][ T5176] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 63.831286][ T5176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.847262][ T5176] bond2 (unregistering): Released all slaves [ 63.866474][ T5174] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.907975][ T5174] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.972249][ T5174] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.137014][ T5187] loop5: detected capacity change from 0 to 164 [ 64.142015][ T5174] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.155687][ T5187] syz.5.461: attempt to access beyond end of device [ 64.155687][ T5187] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 64.176357][ T5187] syz.5.461: attempt to access beyond end of device [ 64.176357][ T5187] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 64.186211][ T5174] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.228398][ T5174] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.259401][ T5174] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.419430][ T5197] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 64.437117][ T5136] syz.3.443 (5136) used greatest stack depth: 6952 bytes left [ 64.457022][ T5197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.517870][ T5197] bond2: (slave gretap1): making interface the new active one [ 64.539576][ T5197] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 64.581292][ T5197] vlan2: entered allmulticast mode [ 64.586493][ T5197] bond2: entered allmulticast mode [ 64.591655][ T5197] gretap1: entered allmulticast mode [ 64.598524][ T5197] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 64.716358][ T5214] xt_connbytes: Forcing CT accounting to be enabled [ 64.723129][ T5214] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 64.740472][ T5214] xt_bpf: check failed: parse error [ 65.043705][ T5244] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.060294][ T5255] netlink: 'syz.5.487': attribute type 1 has an invalid length. [ 65.084073][ T5255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.131384][ T5255] bond1: (slave gretap1): making interface the new active one [ 65.181386][ T5255] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 65.198277][ T5244] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.285137][ T5261] vlan2: entered allmulticast mode [ 65.290378][ T5261] bond1: entered allmulticast mode [ 65.295618][ T5261] gretap1: entered allmulticast mode [ 65.364524][ T5261] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 65.429343][ T5244] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.518234][ T5288] loop1: detected capacity change from 0 to 512 [ 65.528440][ T5244] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.538867][ T29] kauditd_printk_skb: 937 callbacks suppressed [ 65.538882][ T29] audit: type=1400 audit(1749920037.966:2586): avc: denied { getopt } for pid=5290 comm="syz.5.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.604188][ T5288] EXT4-fs (loop1): 1 orphan inode deleted [ 65.622582][ T5288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.630737][ T37] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 65.641544][ T5244] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.645060][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 65.666957][ T5288] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.680839][ T5244] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.692911][ T5244] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.717149][ T5244] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.916737][ T29] audit: type=1400 audit(1749920038.346:2587): avc: denied { shutdown } for pid=5335 comm="syz.5.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.070765][ T5345] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.156054][ T5345] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.226775][ T5353] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 66.245505][ T5345] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.256659][ T29] audit: type=1400 audit(1749920038.686:2588): avc: denied { map } for pid=5287 comm="syz.1.500" path="/128/file1/hugetlb.1GB.usage_in_bytes" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.315617][ T5353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.345582][ T5345] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.372261][ T5359] bond1: (slave gretap1): making interface the new active one [ 66.381418][ T5359] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 66.404703][ T5353] vlan2: entered allmulticast mode [ 66.409910][ T5353] bond1: entered allmulticast mode [ 66.415169][ T5353] gretap1: entered allmulticast mode [ 66.426522][ T5353] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 66.443690][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.492038][ T5345] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.520998][ T5345] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.545224][ T5345] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.560041][ T5366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.517'. [ 66.579816][ T5345] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.634854][ T5374] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.507'. [ 66.824307][ T29] audit: type=1326 audit(1749920039.266:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 66.909441][ T29] audit: type=1326 audit(1749920039.306:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 67.045766][ T29] audit: type=1326 audit(1749920039.486:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 67.069189][ T29] audit: type=1326 audit(1749920039.486:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 67.092669][ T29] audit: type=1326 audit(1749920039.486:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5363 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 67.715235][ T5466] netlink: 404 bytes leftover after parsing attributes in process `syz.1.532'. [ 67.823966][ T29] audit: type=1326 audit(1749920040.256:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5464 comm="syz.5.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741306e929 code=0x7ffc0000 [ 67.885070][ T5454] loop3: detected capacity change from 0 to 512 [ 67.892704][ T5454] EXT4-fs: inline encryption not supported [ 67.937498][ T5454] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.099664][ T5475] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 68.136736][ T5475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.166836][ T5475] bond1: (slave gretap1): making interface the new active one [ 68.187346][ T5475] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 68.208814][ T5475] vlan2: entered allmulticast mode [ 68.214058][ T5475] bond1: entered allmulticast mode [ 68.219203][ T5475] gretap1: entered allmulticast mode [ 68.226965][ T5475] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 68.515372][ T5480] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 68.562005][ T5480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.577985][ T5485] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.590151][ T5482] netlink: 96 bytes leftover after parsing attributes in process `syz.2.527'. [ 68.615932][ T5485] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.648277][ T5480] vlan2: entered allmulticast mode [ 68.653467][ T5480] bond2: entered allmulticast mode [ 68.708888][ T5485] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.745380][ T5505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'. [ 68.786257][ T5485] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.955395][ T5525] loop5: detected capacity change from 0 to 2048 [ 68.976781][ T5525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.992780][ T5525] Invalid ELF header magic: != ELF [ 69.035781][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.083095][ T5547] sd 0:0:1:0: device reset [ 69.116499][ T5555] loop2: detected capacity change from 0 to 512 [ 69.126232][ T5555] EXT4-fs: Ignoring removed bh option [ 69.134199][ T5555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.159146][ T5555] EXT4-fs (loop2): 1 truncate cleaned up [ 69.169638][ T5555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.270471][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.310573][ T5578] vhci_hcd: invalid port number 236 [ 69.315917][ T5578] vhci_hcd: invalid port number 236 [ 69.377446][ T5586] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 69.393246][ T5586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.404478][ T5485] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.421817][ T5485] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.433098][ T5586] vlan2: entered allmulticast mode [ 69.438458][ T5586] bond3: entered allmulticast mode [ 69.486694][ T5485] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.593371][ T5485] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.685887][ T5631] loop3: detected capacity change from 0 to 1024 [ 69.698669][ T5632] pim6reg1: entered promiscuous mode [ 69.704095][ T5632] pim6reg1: entered allmulticast mode [ 69.704508][ T5631] EXT4-fs: Ignoring removed bh option [ 69.715094][ T5631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.735740][ T5631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.124756][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.179570][ T5653] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.445598][ T5653] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.525619][ T5653] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.558035][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 70.558055][ T29] audit: type=1326 audit(1749920042.996:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 70.623848][ T29] audit: type=1326 audit(1749920042.996:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 70.647731][ T29] audit: type=1326 audit(1749920043.006:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 70.671140][ T29] audit: type=1326 audit(1749920043.006:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 70.694589][ T29] audit: type=1326 audit(1749920043.006:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 70.718114][ T29] audit: type=1326 audit(1749920043.006:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 70.741565][ T29] audit: type=1326 audit(1749920043.006:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 70.764975][ T29] audit: type=1326 audit(1749920043.006:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 70.788353][ T29] audit: type=1326 audit(1749920043.006:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 70.811972][ T29] audit: type=1326 audit(1749920043.006:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93df86e929 code=0x7ffc0000 [ 70.910413][ T5653] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.925503][ T5679] loop0: detected capacity change from 0 to 512 [ 70.932237][ T5679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.984866][ T5679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.005176][ T5653] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.018201][ T5679] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.032080][ T5653] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.063917][ T5653] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.093691][ T5653] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.144918][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.233393][ T5717] netlink: 96 bytes leftover after parsing attributes in process `syz.1.581'. [ 71.526953][ T5765] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.605901][ T5765] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.679955][ T5772] loop3: detected capacity change from 0 to 8192 [ 71.705750][ T5765] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.738759][ T5775] loop5: detected capacity change from 0 to 128 [ 71.765846][ T5775] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.778185][ T5775] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.812111][ T5765] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.890118][ T5765] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.902006][ T5765] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.916111][ T5765] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.948825][ T5765] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.983307][ T3669] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.071009][ T5787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5787 comm=syz.2.598 [ 72.129461][ T5796] loop0: detected capacity change from 0 to 164 [ 72.137920][ T5796] syz.0.602: attempt to access beyond end of device [ 72.137920][ T5796] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 72.176023][ T5796] syz.0.602: attempt to access beyond end of device [ 72.176023][ T5796] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.390676][ T5826] netlink: 112 bytes leftover after parsing attributes in process `syz.3.607'. [ 72.719698][ T5865] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.796521][ T5865] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.872886][ T5865] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.935090][ T5865] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.109661][ T5865] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.142872][ T5917] loop2: detected capacity change from 0 to 1024 [ 73.154295][ T5865] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.163448][ T5917] EXT4-fs: Ignoring removed bh option [ 73.168955][ T5917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.191776][ T5865] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.213536][ T5865] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.254940][ T5917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.998804][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.197413][ T6011] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.265989][ T6011] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.385562][ T6011] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.427101][ T6011] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.453494][ T6054] netlink: 'syz.2.643': attribute type 12 has an invalid length. [ 74.466746][ T6057] ip6gre1: entered allmulticast mode [ 74.608286][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.646'. [ 74.738928][ T6074] loop2: detected capacity change from 0 to 1024 [ 74.749027][ T6074] EXT4-fs: Ignoring removed nobh option [ 74.754676][ T6074] EXT4-fs: Ignoring removed nobh option [ 74.772516][ T6074] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 74.783489][ T6074] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.649: inode #4294967295: comm syz.2.649: iget: illegal inode # [ 74.799382][ T6074] EXT4-fs (loop2): no journal found [ 74.804735][ T6074] EXT4-fs (loop2): can't get journal size [ 74.812423][ T6074] EXT4-fs (loop2): failed to initialize system zone (-22) [ 74.820803][ T6074] EXT4-fs (loop2): mount failed [ 75.101469][ T6011] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.115246][ T6011] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.127939][ T6011] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.141926][ T6011] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.255772][ T6082] loop3: detected capacity change from 0 to 512 [ 75.296598][ T6082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.325801][ T6082] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 75.339678][ T6082] System zones: 0-2, 18-18, 34-34 [ 75.375611][ T6082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.389683][ T6082] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.484823][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.609755][ T6097] loop5: detected capacity change from 0 to 128 [ 75.625798][ T6097] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.674340][ T6097] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.468353][ T31] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.715632][ T6160] loop0: detected capacity change from 0 to 1024 [ 76.759260][ T6160] EXT4-fs: Ignoring removed nobh option [ 76.765067][ T6160] EXT4-fs: Ignoring removed nobh option [ 76.829196][ T6160] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 76.893235][ T6160] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.669: inode #4294967295: comm syz.0.669: iget: illegal inode # [ 76.962617][ T6160] EXT4-fs (loop0): no journal found [ 76.967950][ T6160] EXT4-fs (loop0): can't get journal size [ 77.034972][ T6160] EXT4-fs (loop0): failed to initialize system zone (-22) [ 77.113591][ T6160] EXT4-fs (loop0): mount failed [ 77.209081][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 77.209100][ T29] audit: type=1400 audit(1749920049.646:2776): avc: denied { read write } for pid=6191 comm="syz.5.662" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 77.210341][ T5054] hid-generic 0000:0000:30303000.0001: unknown main item tag 0x3 [ 77.216235][ T29] audit: type=1400 audit(1749920049.646:2777): avc: denied { open } for pid=6191 comm="syz.5.662" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 77.333976][ T5054] hid-generic 0000:0000:30303000.0001: hidraw0: HID v303030.30 Device [syz1] on syz0 [ 77.430406][ T29] audit: type=1400 audit(1749920049.676:2778): avc: denied { mount } for pid=6191 comm="syz.5.662" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 77.530368][ T6194] hid-generic 0000:0000:30303000.0001: pid 6194 passed too large report [ 78.055851][ T6256] syzkaller1: entered promiscuous mode [ 78.061354][ T6256] syzkaller1: entered allmulticast mode [ 78.163363][ T29] audit: type=1400 audit(1749920050.596:2779): avc: denied { append } for pid=6260 comm="syz.0.672" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.419013][ T29] audit: type=1326 audit(1749920050.856:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741306e929 code=0x7ffc0000 [ 78.452813][ T29] audit: type=1326 audit(1749920050.856:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741306e929 code=0x7ffc0000 [ 78.477028][ T29] audit: type=1326 audit(1749920050.886:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f741306e929 code=0x7ffc0000 [ 78.500639][ T29] audit: type=1326 audit(1749920050.886:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741306e929 code=0x7ffc0000 [ 78.525125][ T29] audit: type=1326 audit(1749920050.886:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f741306e929 code=0x7ffc0000 [ 78.527704][ T6268] loop3: detected capacity change from 0 to 1024 [ 78.548528][ T29] audit: type=1326 audit(1749920050.886:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.5.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f741306e929 code=0x7ffc0000 [ 78.582629][ T6268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.703929][ T6268] ================================================================== [ 78.712078][ T6268] BUG: KCSAN: data-race in __filemap_remove_folio / filemap_write_and_wait_range [ 78.721269][ T6268] [ 78.723645][ T6268] read-write to 0xffff888106b2a9f0 of 8 bytes by task 6272 on cpu 0: [ 78.731828][ T6268] __filemap_remove_folio+0x1bc/0x2a0 [ 78.737242][ T6268] __remove_mapping+0x338/0x460 [ 78.742158][ T6268] remove_mapping+0x22/0x90 [ 78.746745][ T6268] mapping_try_invalidate+0x26a/0x3f0 [ 78.752157][ T6268] invalidate_mapping_pages+0x27/0x40 [ 78.757555][ T6268] ext4_file_write_iter+0xe70/0xf00 [ 78.762792][ T6268] iter_file_splice_write+0x5ef/0x970 [ 78.768223][ T6268] direct_splice_actor+0x156/0x2a0 [ 78.773387][ T6268] splice_direct_to_actor+0x312/0x680 [ 78.778809][ T6268] do_splice_direct+0xda/0x150 [ 78.783641][ T6268] do_sendfile+0x380/0x650 [ 78.788097][ T6268] __x64_sys_sendfile64+0x105/0x150 [ 78.793325][ T6268] x64_sys_call+0xb39/0x2fb0 [ 78.797962][ T6268] do_syscall_64+0xd2/0x200 [ 78.802507][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.808447][ T6268] [ 78.810795][ T6268] read to 0xffff888106b2a9f0 of 8 bytes by task 6268 on cpu 1: [ 78.818384][ T6268] filemap_write_and_wait_range+0x59/0x340 [ 78.824250][ T6268] ext4_file_write_iter+0xe04/0xf00 [ 78.829485][ T6268] iter_file_splice_write+0x5ef/0x970 [ 78.835019][ T6268] direct_splice_actor+0x156/0x2a0 [ 78.840210][ T6268] splice_direct_to_actor+0x312/0x680 [ 78.845737][ T6268] do_splice_direct+0xda/0x150 [ 78.850544][ T6268] do_sendfile+0x380/0x650 [ 78.855002][ T6268] __x64_sys_sendfile64+0x105/0x150 [ 78.860253][ T6268] x64_sys_call+0xb39/0x2fb0 [ 78.864874][ T6268] do_syscall_64+0xd2/0x200 [ 78.869424][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.875346][ T6268] [ 78.877692][ T6268] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 78.884834][ T6268] [ 78.887182][ T6268] Reported by Kernel Concurrency Sanitizer on: [ 78.893369][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.3.674 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 78.905749][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.915839][ T6268] ================================================================== [ 79.222896][ T6268] ================================================================== [ 79.231043][ T6268] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 79.238218][ T6268] [ 79.240567][ T6268] write to 0xffff888106b2a9a4 of 4 bytes by task 6272 on cpu 0: [ 79.248228][ T6268] xas_set_mark+0x12b/0x140 [ 79.252791][ T6268] __folio_start_writeback+0x1dd/0x440 [ 79.258310][ T6268] ext4_bio_write_folio+0x5ad/0x9f0 [ 79.263531][ T6268] mpage_submit_folio+0xe4/0x170 [ 79.268498][ T6268] mpage_process_page_bufs+0x39b/0x4a0 [ 79.274001][ T6268] mpage_prepare_extent_to_map+0x741/0xaa0 [ 79.279858][ T6268] ext4_do_writepages+0xa1a/0x21c0 [ 79.285017][ T6268] ext4_writepages+0x176/0x300 [ 79.289833][ T6268] do_writepages+0x1c6/0x310 [ 79.294470][ T6268] file_write_and_wait_range+0x156/0x2c0 [ 79.300138][ T6268] generic_buffers_fsync_noflush+0x45/0x120 [ 79.306071][ T6268] ext4_sync_file+0x1ab/0x690 [ 79.310796][ T6268] vfs_fsync_range+0x10a/0x130 [ 79.315644][ T6268] ext4_buffered_write_iter+0x34f/0x3c0 [ 79.321229][ T6268] ext4_file_write_iter+0xdbf/0xf00 [ 79.326448][ T6268] iter_file_splice_write+0x5ef/0x970 [ 79.331866][ T6268] direct_splice_actor+0x156/0x2a0 [ 79.337340][ T6268] splice_direct_to_actor+0x312/0x680 [ 79.342774][ T6268] do_splice_direct+0xda/0x150 [ 79.347600][ T6268] do_sendfile+0x380/0x650 [ 79.352056][ T6268] __x64_sys_sendfile64+0x105/0x150 [ 79.357290][ T6268] x64_sys_call+0xb39/0x2fb0 [ 79.361931][ T6268] do_syscall_64+0xd2/0x200 [ 79.366464][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.372386][ T6268] [ 79.374757][ T6268] read to 0xffff888106b2a9a4 of 4 bytes by task 6268 on cpu 1: [ 79.382330][ T6268] xas_find_marked+0x5dc/0x620 [ 79.387127][ T6268] find_get_entry+0x5d/0x380 [ 79.391778][ T6268] filemap_get_folios_tag+0x92/0x210 [ 79.397117][ T6268] mpage_prepare_extent_to_map+0x320/0xaa0 [ 79.402968][ T6268] ext4_do_writepages+0x6ea/0x21c0 [ 79.408112][ T6268] ext4_writepages+0x176/0x300 [ 79.412910][ T6268] do_writepages+0x1c6/0x310 [ 79.417536][ T6268] file_write_and_wait_range+0x156/0x2c0 [ 79.423208][ T6268] generic_buffers_fsync_noflush+0x45/0x120 [ 79.429161][ T6268] ext4_sync_file+0x1ab/0x690 [ 79.433884][ T6268] vfs_fsync_range+0x10a/0x130 [ 79.438693][ T6268] ext4_buffered_write_iter+0x34f/0x3c0 [ 79.444281][ T6268] ext4_file_write_iter+0xdbf/0xf00 [ 79.449521][ T6268] iter_file_splice_write+0x5ef/0x970 [ 79.454946][ T6268] direct_splice_actor+0x156/0x2a0 [ 79.460094][ T6268] splice_direct_to_actor+0x312/0x680 [ 79.465516][ T6268] do_splice_direct+0xda/0x150 [ 79.470341][ T6268] do_sendfile+0x380/0x650 [ 79.474801][ T6268] __x64_sys_sendfile64+0x105/0x150 [ 79.480040][ T6268] x64_sys_call+0xb39/0x2fb0 [ 79.484655][ T6268] do_syscall_64+0xd2/0x200 [ 79.489189][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.495119][ T6268] [ 79.497477][ T6268] value changed: 0x0a000021 -> 0x04000021 [ 79.503223][ T6268] [ 79.505575][ T6268] Reported by Kernel Concurrency Sanitizer on: [ 79.511763][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.3.674 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(voluntary) [ 79.524118][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.534199][ T6268] ================================================================== [ 79.646725][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.