last executing test programs: 3.579818961s ago: executing program 2 (id=690): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_ignore}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) socket$inet_sctp(0x2, 0x5, 0x84) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 3.504476112s ago: executing program 3 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000007887000c41000000030014"], 0x30}}, 0x0) 3.458181182s ago: executing program 3 (id=694): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.366024704s ago: executing program 3 (id=699): socket$kcm(0x29, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d030000000000000003000000000000000000000105000000080000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x89}, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) 3.273874625s ago: executing program 3 (id=702): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r2, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3.223949816s ago: executing program 3 (id=703): syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)) r0 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x3f21, &(0x7f0000000280)={0x0, 0x800000, 0x2, 0x2, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, 0x0, 0x0) 2.997156808s ago: executing program 3 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 2.935393329s ago: executing program 32 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 2.499967406s ago: executing program 2 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000e07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.359262998s ago: executing program 2 (id=723): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sync() 978.756207ms ago: executing program 5 (id=710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x8, 0x0) 976.750927ms ago: executing program 2 (id=738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) 885.195928ms ago: executing program 5 (id=726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 884.678508ms ago: executing program 2 (id=729): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) personality(0xc) 884.415308ms ago: executing program 4 (id=730): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002d0001000000000000600000010100800c0000000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x44010}, 0x0) 427.474174ms ago: executing program 5 (id=731): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_ignore}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) socket$inet_sctp(0x2, 0x5, 0x84) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 427.047714ms ago: executing program 4 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48848}, 0x20004804) 418.251274ms ago: executing program 2 (id=735): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) 400.436464ms ago: executing program 0 (id=740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x595}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 315.594106ms ago: executing program 0 (id=741): socket$caif_stream(0x25, 0x1, 0xfffffffb) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000a00)="10200003", 0x4, 0x4, &(0x7f0000000940)={0x11, 0x8100, r1, 0x1, 0x9, 0x6, @random="ec7336c86934"}, 0x14) 315.101996ms ago: executing program 1 (id=742): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}], 0x1, 0x8040) close(r2) 309.933056ms ago: executing program 1 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000077340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0xcdf) shutdown(r2, 0x0) 280.359776ms ago: executing program 1 (id=744): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r1, 0xffffffffffffffff, 0x0) 227.522287ms ago: executing program 4 (id=745): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) 227.144347ms ago: executing program 1 (id=747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = dup(r0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 223.378127ms ago: executing program 0 (id=748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) 174.511528ms ago: executing program 0 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000600)='./file0\x00', 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 111.659669ms ago: executing program 4 (id=750): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_batadv\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth1_to_bridge\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 111.364089ms ago: executing program 0 (id=751): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f00000003c0)='./file0\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) 103.195809ms ago: executing program 1 (id=752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) 88.922259ms ago: executing program 4 (id=753): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0xe0f5, 0x2, 0x2, 0xf2}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x244) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 739.51µs ago: executing program 1 (id=754): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x141341) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x40000) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) 395.14µs ago: executing program 0 (id=755): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) 0s ago: executing program 4 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) kernel console output (not intermixed with test programs): [ 21.207511][ T29] audit: type=1400 audit(1746403648.183:81): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 28.531657][ T29] audit: type=1400 audit(1746403655.503:82): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.532730][ T3294] cgroup: Unknown subsys name 'net' [ 28.554403][ T29] audit: type=1400 audit(1746403655.503:83): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.581860][ T29] audit: type=1400 audit(1746403655.543:84): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.716552][ T3294] cgroup: Unknown subsys name 'cpuset' [ 28.722834][ T3294] cgroup: Unknown subsys name 'rlimit' [ 28.834184][ T29] audit: type=1400 audit(1746403655.803:85): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.862338][ T29] audit: type=1400 audit(1746403655.803:86): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.882933][ T29] audit: type=1400 audit(1746403655.803:87): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.896973][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.903304][ T29] audit: type=1400 audit(1746403655.803:88): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.932148][ T29] audit: type=1400 audit(1746403655.833:89): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.956969][ T29] audit: type=1400 audit(1746403655.833:90): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.975231][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.980451][ T29] audit: type=1400 audit(1746403655.893:91): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.077356][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 30.131010][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.232815][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.239980][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.247282][ T3303] bridge_slave_0: entered allmulticast mode [ 30.253856][ T3303] bridge_slave_0: entered promiscuous mode [ 30.262712][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.269860][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.277093][ T3303] bridge_slave_1: entered allmulticast mode [ 30.283405][ T3303] bridge_slave_1: entered promiscuous mode [ 30.306130][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 30.319648][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.328518][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 30.338876][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.361149][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.378863][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.385987][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.393110][ T3313] bridge_slave_0: entered allmulticast mode [ 30.399508][ T3313] bridge_slave_0: entered promiscuous mode [ 30.423864][ T3303] team0: Port device team_slave_0 added [ 30.434251][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.441390][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.448623][ T3313] bridge_slave_1: entered allmulticast mode [ 30.455183][ T3313] bridge_slave_1: entered promiscuous mode [ 30.470992][ T3303] team0: Port device team_slave_1 added [ 30.513715][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.520764][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.546951][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.561149][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.581149][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.588305][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.595453][ T3311] bridge_slave_0: entered allmulticast mode [ 30.602338][ T3311] bridge_slave_0: entered promiscuous mode [ 30.609074][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.616218][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.642791][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.659721][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.678934][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.686127][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.693274][ T3311] bridge_slave_1: entered allmulticast mode [ 30.699793][ T3311] bridge_slave_1: entered promiscuous mode [ 30.718145][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.725313][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.732504][ T3305] bridge_slave_0: entered allmulticast mode [ 30.739349][ T3305] bridge_slave_0: entered promiscuous mode [ 30.745910][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.753316][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.760575][ T3309] bridge_slave_0: entered allmulticast mode [ 30.767108][ T3309] bridge_slave_0: entered promiscuous mode [ 30.774147][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.781387][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.788618][ T3309] bridge_slave_1: entered allmulticast mode [ 30.795051][ T3309] bridge_slave_1: entered promiscuous mode [ 30.810353][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.817537][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.824723][ T3305] bridge_slave_1: entered allmulticast mode [ 30.831156][ T3305] bridge_slave_1: entered promiscuous mode [ 30.854217][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.869313][ T3313] team0: Port device team_slave_0 added [ 30.880960][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.891166][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.906842][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.916724][ T3313] team0: Port device team_slave_1 added [ 30.928615][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.943350][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.960090][ T3303] hsr_slave_0: entered promiscuous mode [ 30.966343][ T3303] hsr_slave_1: entered promiscuous mode [ 30.982219][ T3311] team0: Port device team_slave_0 added [ 30.988883][ T3311] team0: Port device team_slave_1 added [ 31.008652][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.015726][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.041783][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.053303][ T3305] team0: Port device team_slave_0 added [ 31.065300][ T3309] team0: Port device team_slave_0 added [ 31.077391][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.084384][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.110405][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.121936][ T3305] team0: Port device team_slave_1 added [ 31.139858][ T3309] team0: Port device team_slave_1 added [ 31.159299][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.166319][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.192292][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.224133][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.231206][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.257439][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.271330][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.278429][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.304787][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.316267][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.323292][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.349269][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.360394][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.367462][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.393525][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.417984][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.425025][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.451515][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.486498][ T3313] hsr_slave_0: entered promiscuous mode [ 31.492532][ T3313] hsr_slave_1: entered promiscuous mode [ 31.498529][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.506112][ T3313] Cannot create hsr debugfs directory [ 31.533739][ T3305] hsr_slave_0: entered promiscuous mode [ 31.539903][ T3305] hsr_slave_1: entered promiscuous mode [ 31.545822][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.553387][ T3305] Cannot create hsr debugfs directory [ 31.560922][ T3309] hsr_slave_0: entered promiscuous mode [ 31.567271][ T3309] hsr_slave_1: entered promiscuous mode [ 31.573509][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.581112][ T3309] Cannot create hsr debugfs directory [ 31.617952][ T3311] hsr_slave_0: entered promiscuous mode [ 31.624340][ T3311] hsr_slave_1: entered promiscuous mode [ 31.630348][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.638016][ T3311] Cannot create hsr debugfs directory [ 31.763911][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.775452][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.796456][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.805511][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.861216][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.871423][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.880585][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.892018][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.924332][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.937532][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.954370][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.969015][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.999340][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.008513][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.017806][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.032861][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.042896][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.077721][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.094214][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.108038][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.115121][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.126306][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.142650][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.153374][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.162794][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.172004][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.179142][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.206022][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.222670][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.229766][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.250648][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.257925][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.279816][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.301062][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.318915][ T2124] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.326048][ T2124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.338405][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.360330][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.370193][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.377394][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.402902][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.410036][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.418956][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.426116][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.464279][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.475117][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.513643][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.533189][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.560828][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.580747][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.608332][ T2124] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.615435][ T2124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.632469][ T2124] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.639569][ T2124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.677863][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.688574][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.716783][ T3303] veth0_vlan: entered promiscuous mode [ 32.723606][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.734038][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.763134][ T3303] veth1_vlan: entered promiscuous mode [ 32.778381][ T3313] veth0_vlan: entered promiscuous mode [ 32.789139][ T3313] veth1_vlan: entered promiscuous mode [ 32.843469][ T3309] veth0_vlan: entered promiscuous mode [ 32.850333][ T3303] veth0_macvtap: entered promiscuous mode [ 32.857948][ T3303] veth1_macvtap: entered promiscuous mode [ 32.870484][ T3313] veth0_macvtap: entered promiscuous mode [ 32.882652][ T3313] veth1_macvtap: entered promiscuous mode [ 32.890305][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.899914][ T3309] veth1_vlan: entered promiscuous mode [ 32.923047][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.931168][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.941726][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.953811][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.966563][ T3305] veth0_vlan: entered promiscuous mode [ 32.974231][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.987161][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.997713][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.011515][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.024654][ T3305] veth1_vlan: entered promiscuous mode [ 33.034108][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.043009][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.051825][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.060630][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.077766][ T3309] veth0_macvtap: entered promiscuous mode [ 33.088965][ T3305] veth0_macvtap: entered promiscuous mode [ 33.097139][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.105929][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.114622][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.123409][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.139066][ T3309] veth1_macvtap: entered promiscuous mode [ 33.146720][ T3305] veth1_macvtap: entered promiscuous mode [ 33.179584][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.191651][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.201527][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.212103][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.223343][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.231829][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.242439][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.252328][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.262950][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.272848][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.283377][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.294206][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.303059][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.316969][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.328210][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.338154][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.348631][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.360145][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.375327][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.384165][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.393003][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.401819][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.419091][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.429647][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.439501][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.450046][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.459923][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.470540][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.483742][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.513700][ T3311] veth0_vlan: entered promiscuous mode [ 33.520770][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.529571][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.538465][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.547414][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.566051][ T3311] veth1_vlan: entered promiscuous mode [ 33.582300][ T3311] veth0_macvtap: entered promiscuous mode [ 33.601225][ T3311] veth1_macvtap: entered promiscuous mode [ 33.612911][ T3452] mmap: syz.0.7 (3452) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.648314][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.658908][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.668901][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.679449][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.689347][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.693199][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 33.693218][ T29] audit: type=1400 audit(1746403660.663:132): avc: denied { create } for pid=3457 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.699850][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.699863][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.746859][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.758197][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.774517][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.785315][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.795276][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.805756][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.815614][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.826091][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.836064][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.846519][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.858228][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.882936][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.891823][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.892680][ T29] audit: type=1400 audit(1746403660.863:133): avc: denied { create } for pid=3462 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 33.900688][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.929021][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.950221][ T29] audit: type=1400 audit(1746403660.913:134): avc: denied { write } for pid=3462 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 33.954946][ T3458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.969751][ T29] audit: type=1400 audit(1746403660.913:135): avc: denied { relabelfrom } for pid=3460 comm="syz.0.12" name="NETLINK" dev="sockfs" ino=4559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.002599][ T29] audit: type=1400 audit(1746403660.913:136): avc: denied { relabelto } for pid=3460 comm="syz.0.12" name="NETLINK" dev="sockfs" ino=4559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 34.030643][ T3463] Zero length message leads to an empty skb [ 34.193726][ T3482] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 34.207399][ T29] audit: type=1400 audit(1746403660.923:137): avc: denied { create } for pid=3457 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 34.227745][ T29] audit: type=1400 audit(1746403660.923:138): avc: denied { write } for pid=3457 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.248150][ T29] audit: type=1400 audit(1746403661.063:139): avc: denied { allowed } for pid=3468 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.267325][ T29] audit: type=1400 audit(1746403661.063:140): avc: denied { create } for pid=3468 comm="syz.2.15" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.288384][ T29] audit: type=1400 audit(1746403661.063:141): avc: denied { map } for pid=3468 comm="syz.2.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.361226][ T3486] uprobe: syz.3.21:3486 failed to unregister, leaking uprobe [ 34.399191][ T3467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 34.411883][ T3490] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.631250][ T3503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 34.660747][ T3503] syz.0.27 (3503) used greatest stack depth: 10272 bytes left [ 34.860032][ T3519] netlink: 96 bytes leftover after parsing attributes in process `syz.3.33'. [ 34.989576][ T3536] netem: incorrect ge model size [ 34.994569][ T3536] netem: change failed [ 35.139785][ T3490] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.220558][ T3547] loop3: detected capacity change from 0 to 512 [ 35.237400][ T3547] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.250609][ T3547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.298869][ T3547] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.45: corrupted xattr entries [ 35.343121][ T3547] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.359261][ T3547] EXT4-fs (loop3): 1 truncate cleaned up [ 35.365362][ T3547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.451307][ T3569] ALSA: seq fatal error: cannot create timer (-19) [ 35.483406][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.512202][ T3574] xt_hashlimit: max too large, truncated to 1048576 [ 35.530725][ T3490] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.930334][ T3490] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.996210][ T3490] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.013205][ T3490] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.038883][ T3490] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.074539][ T3490] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.162626][ T3621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.203114][ T3625] openvswitch: netlink: Message has 6 unknown bytes. [ 36.296456][ T3639] 9pnet_fd: Insufficient options for proto=fd [ 36.297585][ T3637] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 36.469369][ T3657] loop3: detected capacity change from 0 to 128 [ 36.599884][ T3668] tipc: Started in network mode [ 36.604835][ T3668] tipc: Node identity ac14140f, cluster identity 4711 [ 36.612019][ T3668] tipc: New replicast peer: 255.255.255.255 [ 36.618327][ T3668] tipc: Enabled bearer , priority 10 [ 37.089671][ T3702] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 37.099581][ T3702] SELinux: failed to load policy [ 37.118822][ T3700] SELinux: failed to load policy [ 37.314990][ T3720] loop1: detected capacity change from 0 to 164 [ 37.332866][ T3720] process 'syz.1.124' launched '/dev/fd/6' with NULL argv: empty string added [ 37.342663][ T3720] syz.1.124: attempt to access beyond end of device [ 37.342663][ T3720] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 37.358651][ T3720] syz.1.124: attempt to access beyond end of device [ 37.358651][ T3720] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.424661][ T3724] loop3: detected capacity change from 0 to 512 [ 37.425546][ T3723] vlan2: entered allmulticast mode [ 37.457181][ T3724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.470937][ T3724] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.548639][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.564239][ T3732] bond1: entered promiscuous mode [ 37.569513][ T3732] bond1: entered allmulticast mode [ 37.588163][ T3732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.600352][ T3732] bond1 (unregistering): Released all slaves [ 37.649284][ T3743] hsr0: entered promiscuous mode [ 37.735844][ T10] tipc: Node number set to 2886997007 [ 37.877098][ T3771] loop2: detected capacity change from 0 to 128 [ 38.036966][ T3784] loop0: detected capacity change from 0 to 8192 [ 38.058110][ T3784] vfat: Unknown parameter 'H!1`w )ea뀋-sà_uŪ][_Hqm5W)-3?b5e]C"XG \ZHPX017777777777777777777770xffffffffffffffff184467440737095516150xffffffffffffffff' [ 38.120828][ T3798] atomic_op ffff88811935bd28 conn xmit_atomic 0000000000000000 [ 38.221153][ T3808] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 38.230295][ T3807] loop3: detected capacity change from 0 to 512 [ 38.248686][ T3807] EXT4-fs: Ignoring removed nobh option [ 38.273597][ T3807] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.164: invalid indirect mapped block 256 (level 2) [ 38.328514][ T3807] EXT4-fs (loop3): 2 truncates cleaned up [ 38.351540][ T3807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.620027][ T2124] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 38.642990][ T3834] netlink: 'syz.0.176': attribute type 5 has an invalid length. [ 38.650812][ T3834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 38.689504][ T2124] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 38.702283][ T2124] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.702283][ T2124] [ 38.712030][ T2124] EXT4-fs (loop3): Total free blocks count 0 [ 38.718108][ T2124] EXT4-fs (loop3): Free/Dirty block details [ 38.724136][ T2124] EXT4-fs (loop3): free_blocks=0 [ 38.729141][ T2124] EXT4-fs (loop3): dirty_blocks=8 [ 38.734207][ T2124] EXT4-fs (loop3): Block reservation details [ 38.740250][ T2124] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 38.851161][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.897850][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 38.897920][ T29] audit: type=1400 audit(1746403665.873:300): avc: denied { write } for pid=3847 comm="syz.1.183" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.930347][ T3848] hub 9-0:1.0: USB hub found [ 38.935131][ T3848] hub 9-0:1.0: 8 ports detected [ 38.994079][ T29] audit: type=1400 audit(1746403665.943:301): avc: denied { getopt } for pid=3849 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.005642][ T3853] loop0: detected capacity change from 0 to 2048 [ 39.013594][ T29] audit: type=1400 audit(1746403665.943:302): avc: denied { name_connect } for pid=3849 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 39.094849][ T29] audit: type=1400 audit(1746403666.063:303): avc: denied { search } for pid=3044 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.126596][ T3853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.146422][ T29] audit: type=1400 audit(1746403666.063:304): avc: denied { read } for pid=3044 comm="dhcpcd" name="n25" dev="tmpfs" ino=1264 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.168173][ T29] audit: type=1400 audit(1746403666.063:305): avc: denied { open } for pid=3044 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1264 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.173814][ T3851] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 39.191087][ T29] audit: type=1400 audit(1746403666.063:306): avc: denied { getattr } for pid=3044 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1264 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.191140][ T29] audit: type=1400 audit(1746403666.143:307): avc: denied { ioctl } for pid=3851 comm="syz.0.185" path="/37/file1/cpuset.effective_cpus" dev="loop0" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.199389][ T3851] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.265811][ T29] audit: type=1400 audit(1746403666.233:308): avc: denied { read } for pid=3867 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.288909][ T29] audit: type=1400 audit(1746403666.233:309): avc: denied { open } for pid=3867 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.318397][ T3851] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 39.331065][ T3851] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.331065][ T3851] [ 39.340770][ T3851] EXT4-fs (loop0): Total free blocks count 0 [ 39.346791][ T3851] EXT4-fs (loop0): Free/Dirty block details [ 39.352714][ T3851] EXT4-fs (loop0): free_blocks=2415919104 [ 39.358519][ T3851] EXT4-fs (loop0): dirty_blocks=16 [ 39.363652][ T3851] EXT4-fs (loop0): Block reservation details [ 39.369762][ T3851] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 39.413113][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.111957][ T3949] xt_hashlimit: max too large, truncated to 1048576 [ 40.150498][ T3956] loop4: detected capacity change from 0 to 1024 [ 40.186242][ T3956] EXT4-fs: Ignoring removed orlov option [ 40.227236][ T3956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.323314][ T3971] loop1: detected capacity change from 0 to 1024 [ 40.370034][ T3971] EXT4-fs: dax option not supported [ 40.378140][ T3975] SELinux: policydb version 0 does not match my version range 15-34 [ 40.386464][ T3975] SELinux: failed to load policy [ 40.465082][ T3979] block device autoloading is deprecated and will be removed. [ 40.466215][ T3971] loop1: detected capacity change from 0 to 128 [ 40.479116][ T3979] syz.0.226: attempt to access beyond end of device [ 40.479116][ T3979] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 40.531579][ T3981] loop2: detected capacity change from 0 to 512 [ 40.588147][ T3987] SELinux: syz.0.230 (3987) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 40.692336][ T3981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.906631][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.130749][ T4003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.144344][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.217284][ T4003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.340820][ T4003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.389608][ T4031] vhci_hcd: invalid port number 23 [ 41.449477][ T4003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.476857][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 41.529257][ T4003] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.585054][ T4003] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.609819][ T4003] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.614871][ T4054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.648733][ T4003] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.737120][ T4070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.256'. [ 41.887294][ T4086] Invalid ELF header magic: != ELF [ 42.118173][ T4115] ip6gretap1: entered allmulticast mode [ 42.303735][ T4138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.275'. [ 42.321937][ T4138] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 42.369626][ T4149] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 42.369817][ T4146] IPVS: stopping master sync thread 4149 ... [ 42.449238][ T4157] ALSA: seq fatal error: cannot create timer (-22) [ 42.474156][ T4159] loop2: detected capacity change from 0 to 512 [ 42.490046][ T4159] ======================================================= [ 42.490046][ T4159] WARNING: The mand mount option has been deprecated and [ 42.490046][ T4159] and is ignored by this kernel. Remove the mand [ 42.490046][ T4159] option from the mount to silence this warning. [ 42.490046][ T4159] ======================================================= [ 42.525950][ T4159] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.555302][ T4159] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 42.563424][ T4159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 42.574496][ T4159] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 42.584180][ T4159] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 42.593596][ T4159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.615284][ T4166] openvswitch: netlink: Message has 6 unknown bytes. [ 42.630932][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.674876][ C0] hrtimer: interrupt took 60870 ns [ 42.751178][ T4174] syz.4.291 (4174) used greatest stack depth: 9888 bytes left [ 42.872091][ T4190] tipc: Failed to remove unknown binding: 66,1,1/2886997007:993456587/993456589 [ 42.881350][ T4190] tipc: Failed to remove unknown binding: 66,1,1/2886997007:993456587/993456589 [ 42.939605][ T4172] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.076035][ T4208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 43.086770][ T4208] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 43.410311][ T4246] sd 0:0:1:0: device reset [ 43.496119][ T4264] capability: warning: `syz.4.329' uses 32-bit capabilities (legacy support in use) [ 43.680317][ T4290] loop1: detected capacity change from 0 to 2048 [ 43.694379][ T4295] syzkaller0: entered allmulticast mode [ 43.736854][ T4296] netlink: 304 bytes leftover after parsing attributes in process `syz.3.336'. [ 43.759166][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 43.768511][ T4290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.852789][ T4318] loop0: detected capacity change from 0 to 2048 [ 43.871368][ T4324] random: crng reseeded on system resumption [ 43.967179][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 43.967201][ T29] audit: type=1326 audit(1746403670.943:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.3.342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d055fe969 code=0x0 [ 43.996481][ T3293] loop0: p1 < > p4 < > [ 44.025772][ T4318] loop0: p1 < > p4 < > [ 44.036732][ T29] audit: type=1400 audit(1746403671.013:647): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 44.058800][ T29] audit: type=1400 audit(1746403671.013:648): avc: denied { search } for pid=2988 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.080526][ T29] audit: type=1400 audit(1746403671.013:649): avc: denied { append } for pid=2988 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.103118][ T29] audit: type=1400 audit(1746403671.013:650): avc: denied { open } for pid=2988 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.118321][ T3006] loop0: p1 < > p4 < > [ 44.125972][ T29] audit: type=1400 audit(1746403671.013:651): avc: denied { getattr } for pid=2988 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.152808][ T29] audit: type=1400 audit(1746403671.043:652): avc: denied { read } for pid=4333 comm="syz.2.346" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.175484][ T29] audit: type=1400 audit(1746403671.043:653): avc: denied { open } for pid=4333 comm="syz.2.346" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.198789][ T29] audit: type=1400 audit(1746403671.043:654): avc: denied { ioctl } for pid=4333 comm="syz.2.346" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.223272][ T29] audit: type=1400 audit(1746403671.083:655): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.253959][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.353911][ T4350] loop4: detected capacity change from 0 to 164 [ 44.374587][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 44.396250][ T4350] syz.4.353: attempt to access beyond end of device [ 44.396250][ T4350] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 44.435371][ T4350] syz.4.353: attempt to access beyond end of device [ 44.435371][ T4350] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.435951][ T4357] netlink: 844 bytes leftover after parsing attributes in process `syz.3.357'. [ 44.791816][ T4396] hub 9-0:1.0: USB hub found [ 44.796922][ T4396] hub 9-0:1.0: 8 ports detected [ 44.853929][ T4404] ALSA: seq fatal error: cannot create timer (-22) [ 44.941369][ T4418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 44.950349][ T4419] loop0: detected capacity change from 0 to 512 [ 44.978444][ T4419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.992215][ T4419] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.039965][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.082576][ T4434] loop0: detected capacity change from 0 to 1024 [ 45.098262][ T4434] EXT4-fs: Ignoring removed orlov option [ 45.123076][ T4434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.171689][ T4444] loop2: detected capacity change from 0 to 512 [ 45.181003][ T4444] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.198989][ T4444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.211877][ T4444] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.234069][ T4444] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.395: corrupted xattr block 32: bad e_name length [ 45.256814][ T4444] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 45.266311][ T4444] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.395: corrupted xattr block 32: bad e_name length [ 45.280977][ T4444] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 45.330155][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.799697][ T4466] random: crng reseeded on system resumption [ 46.189475][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.211897][ T4484] loop4: detected capacity change from 0 to 2048 [ 46.246282][ T3297] loop4: p1 < > p4 < > [ 46.255505][ T4484] loop4: p1 < > p4 < > [ 46.327463][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.329909][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 46.348399][ T4492] loop4: detected capacity change from 0 to 2048 [ 46.380651][ T4497] loop2: detected capacity change from 0 to 164 [ 46.397292][ T4497] syz.2.416: attempt to access beyond end of device [ 46.397292][ T4497] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 46.424655][ T4492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.453222][ T4497] syz.2.416: attempt to access beyond end of device [ 46.453222][ T4497] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 46.500613][ T4505] random: crng reseeded on system resumption [ 46.629577][ T4514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 46.693547][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.751734][ T4522] loop3: detected capacity change from 0 to 2048 [ 46.796634][ T3293] loop3: p1 < > p4 < > [ 46.810272][ T4522] loop3: p1 < > p4 < > [ 46.895124][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 46.911703][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.969803][ T4538] loop0: detected capacity change from 0 to 164 [ 47.021530][ T4538] syz.0.431: attempt to access beyond end of device [ 47.021530][ T4538] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 47.035513][ T4538] syz.0.431: attempt to access beyond end of device [ 47.035513][ T4538] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 47.087482][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 47.111823][ T4545] loop2: detected capacity change from 0 to 2048 [ 47.137338][ T4545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.173457][ T4554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.451'. [ 47.185096][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 47.210204][ T4557] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 47.411386][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.424493][ T4571] loop3: detected capacity change from 0 to 512 [ 47.452804][ T4571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.484241][ T4571] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.549194][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.559915][ T4582] loop0: detected capacity change from 0 to 2048 [ 47.602671][ T4587] loop3: detected capacity change from 0 to 164 [ 47.607709][ T4582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.648811][ T4587] syz.3.450: attempt to access beyond end of device [ 47.648811][ T4587] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 47.681642][ T4587] syz.3.450: attempt to access beyond end of device [ 47.681642][ T4587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 47.816517][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.846966][ T4596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'. [ 48.830904][ T4618] loop4: detected capacity change from 0 to 512 [ 48.889427][ T4618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.927786][ T4618] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.008833][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.048867][ T4632] loop3: detected capacity change from 0 to 2048 [ 49.072021][ T4632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.128745][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 49.224938][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.921685][ T4673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 49.933015][ T4677] ALSA: seq fatal error: cannot create timer (-22) [ 49.966702][ T4679] loop3: detected capacity change from 0 to 2048 [ 50.000568][ T4679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.268865][ T4705] loop0: detected capacity change from 0 to 512 [ 50.290309][ T4705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.317627][ T4705] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 50.325606][ T4705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 50.347307][ T4710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 50.359271][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.369737][ T4705] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 50.379384][ T4705] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 50.427925][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 50.427939][ T29] audit: type=1400 audit(1746403677.403:692): avc: denied { create } for pid=4716 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.436557][ T4705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.497573][ T29] audit: type=1400 audit(1746403677.433:693): avc: denied { write } for pid=4716 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.517378][ T29] audit: type=1400 audit(1746403677.463:694): avc: denied { read write } for pid=4703 comm="syz.0.503" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.540746][ T29] audit: type=1400 audit(1746403677.463:695): avc: denied { open } for pid=4703 comm="syz.0.503" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.578797][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.588883][ T4719] ALSA: seq fatal error: cannot create timer (-22) [ 50.642877][ T29] audit: type=1326 audit(1746403677.613:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59961e969 code=0x7ffc0000 [ 50.666200][ T29] audit: type=1326 audit(1746403677.613:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc59961e969 code=0x7ffc0000 [ 50.689525][ T29] audit: type=1326 audit(1746403677.613:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59961e969 code=0x7ffc0000 [ 50.712808][ T29] audit: type=1326 audit(1746403677.613:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59961e969 code=0x7ffc0000 [ 50.736256][ T29] audit: type=1326 audit(1746403677.613:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc59961e969 code=0x7ffc0000 [ 50.760785][ T29] audit: type=1326 audit(1746403677.613:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59961e969 code=0x7ffc0000 [ 50.910100][ T4737] bridge0: entered promiscuous mode [ 50.917749][ T4737] bridge0: port 3(macvlan2) entered blocking state [ 50.924692][ T4737] bridge0: port 3(macvlan2) entered disabled state [ 50.939589][ T4739] program syz.3.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.940515][ T4737] macvlan2: entered allmulticast mode [ 50.954377][ T4737] bridge0: entered allmulticast mode [ 50.960993][ T4737] macvlan2: left allmulticast mode [ 50.966261][ T4737] bridge0: left allmulticast mode [ 50.992869][ T4741] loop2: detected capacity change from 0 to 2048 [ 51.006071][ T4737] bridge0: left promiscuous mode [ 51.033618][ T4741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.095634][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 51.314746][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.484246][ T3381] kernel write not supported for file /249/attr/exec (pid: 3381 comm: kworker/0:4) [ 51.504138][ T4794] hub 9-0:1.0: USB hub found [ 51.537935][ T4794] hub 9-0:1.0: 8 ports detected [ 52.061494][ T4836] loop1: detected capacity change from 0 to 2048 [ 52.161308][ T4836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.210559][ T4858] syz.3.552 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 52.401228][ T4900] dvmrp0: entered allmulticast mode [ 52.429221][ T4900] dvmrp0: left allmulticast mode [ 52.456969][ T4903] netlink: 'syz.4.562': attribute type 11 has an invalid length. [ 52.473458][ T4903] netlink: 448 bytes leftover after parsing attributes in process `syz.4.562'. [ 52.546215][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.570585][ T4906] syz.4.564: attempt to access beyond end of device [ 52.570585][ T4906] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 52.598150][ T4909] loop2: detected capacity change from 0 to 1024 [ 52.618693][ T4909] EXT4-fs: Ignoring removed orlov option [ 52.657901][ T4909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.489425][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.594104][ T4938] loop4: detected capacity change from 0 to 2048 [ 53.617902][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 53.659825][ T4942] netlink: 332 bytes leftover after parsing attributes in process `syz.1.578'. [ 53.681932][ T4944] syz.3.577: attempt to access beyond end of device [ 53.681932][ T4944] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 53.697781][ T4938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.797547][ T4955] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 53.980406][ T4961] loop3: detected capacity change from 0 to 1024 [ 54.003045][ T4963] netlink: 'syz.2.587': attribute type 12 has an invalid length. [ 54.011646][ T4963] netlink: 'syz.2.587': attribute type 12 has an invalid length. [ 54.020154][ T4961] EXT4-fs: Ignoring removed orlov option [ 54.027078][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.070475][ T4961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.133292][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.140865][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.148412][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.173430][ T4951] loop1: detected capacity change from 0 to 2048 [ 54.207909][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.215494][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.223094][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.230525][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.238050][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.245513][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.253051][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.260539][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.267982][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.275387][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.285530][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.293104][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.299938][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.300543][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300650][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300674][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300702][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300729][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300755][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300781][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300843][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300870][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300890][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300916][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300943][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.300978][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.304533][ T3378] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.401878][ T3293] loop1: p2 p3 p7 [ 54.454268][ T4979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4979 comm=syz.3.591 [ 54.466881][ T4979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4979 comm=syz.3.591 [ 54.479468][ T4951] loop1: p2 p3 p7 [ 54.669168][ T4990] syz.1.594: attempt to access beyond end of device [ 54.669168][ T4990] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 54.713494][ T4993] loop4: detected capacity change from 0 to 2048 [ 54.750335][ T4993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.770925][ T4996] loop1: detected capacity change from 0 to 1024 [ 54.819738][ T4996] EXT4-fs: Ignoring removed orlov option [ 54.889316][ T4996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.285246][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.316483][ T5018] SELinux: ebitmap: truncated map [ 55.324876][ T5018] SELinux: failed to load policy [ 55.432282][ T5025] loop3: detected capacity change from 0 to 2048 [ 55.478999][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.643603][ T5030] syz.2.612: attempt to access beyond end of device [ 55.643603][ T5030] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 55.663579][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 55.663597][ T29] audit: type=1326 audit(1746403682.633:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.4.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445806e969 code=0x7ffc0000 [ 55.693628][ T29] audit: type=1326 audit(1746403682.633:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.4.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f445806e969 code=0x7ffc0000 [ 55.717011][ T29] audit: type=1326 audit(1746403682.633:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.4.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445806e969 code=0x7ffc0000 [ 55.740421][ T29] audit: type=1326 audit(1746403682.633:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.4.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f445806e969 code=0x7ffc0000 [ 55.783796][ T29] audit: type=1326 audit(1746403682.733:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5033 comm="syz.4.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44580a1225 code=0x7ffc0000 [ 55.807148][ T29] audit: type=1326 audit(1746403682.733:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.4.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445806e969 code=0x7ffc0000 [ 55.830498][ T29] audit: type=1326 audit(1746403682.733:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5031 comm="syz.4.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445806e969 code=0x7ffc0000 [ 55.857666][ T5035] vhci_hcd: invalid port number 15 [ 55.862827][ T5035] vhci_hcd: invalid port number 15 [ 55.875744][ T29] audit: type=1400 audit(1746403682.833:920): avc: denied { write } for pid=5034 comm="syz.4.615" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.931989][ T29] audit: type=1326 audit(1746403682.893:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5033 comm="syz.4.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f445806e969 code=0x7ffc0000 [ 55.956209][ T29] audit: type=1400 audit(1746403682.903:922): avc: denied { mount } for pid=5036 comm="syz.2.614" name="/" dev="ramfs" ino=9029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 55.997674][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.052632][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.079027][ T5043] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.097682][ T5047] loop1: detected capacity change from 0 to 512 [ 56.104992][ T5043] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 56.120539][ T5047] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.129727][ T5047] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 56.199952][ T5047] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 56.210433][ T5047] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 56.259919][ T5060] syz.3.627: attempt to access beyond end of device [ 56.259919][ T5060] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 56.284644][ T5047] System zones: 0-2, 18-18, 34-35 [ 56.296590][ T5047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.376919][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.473348][ T5074] loop4: detected capacity change from 0 to 1024 [ 59.480772][ T5070] loop0: detected capacity change from 0 to 1024 [ 59.494566][ T5073] loop3: detected capacity change from 0 to 2048 [ 59.500425][ T5070] EXT4-fs: Ignoring removed orlov option [ 59.521095][ T5074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.533987][ T5073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.593172][ T5070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.747282][ T5091] loop1: detected capacity change from 0 to 2048 [ 59.775252][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.776174][ T5094] lo: entered promiscuous mode [ 59.794444][ T5094] lo: entered allmulticast mode [ 59.818959][ T5091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.842564][ T5094] lo: left allmulticast mode [ 59.847286][ T5094] lo: left promiscuous mode [ 59.856759][ T5091] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.637: inline data xattr refers to an external xattr inode [ 60.012655][ T5091] EXT4-fs (loop1): Remounting filesystem read-only [ 60.045618][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.057105][ T5102] loop2: detected capacity change from 0 to 1024 [ 60.064629][ T5102] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.079909][ T5102] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.103806][ T5102] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.120328][ T5102] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 60.130139][ T5102] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.641: mark_inode_dirty error [ 60.142019][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.151701][ T5102] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.641: Invalid block bitmap block 3 in block_group 0 [ 60.165799][ T5102] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.641: Invalid block bitmap block 3 in block_group 0 [ 60.180634][ T5102] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.641: Invalid block bitmap block 3 in block_group 0 [ 60.194553][ T5102] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 60.205503][ T5102] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.641: mark_inode_dirty error [ 60.218163][ T5102] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm syz.2.641: lblock 6 mapped to illegal pblock 1 (length 1) [ 60.233598][ T5102] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.641: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.489477][ T5102] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.641: Failed to acquire dquot type 0 [ 60.535946][ T5102] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 49: comm syz.2.641: lblock 1 mapped to illegal pblock 49 (length 1) [ 60.588621][ T5102] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.641: Failed to acquire dquot type 0 [ 60.618706][ T5102] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 60.681146][ T5102] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #15: comm syz.2.641: mark_inode_dirty error [ 60.712749][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 60.712767][ T29] audit: type=1400 audit(1746403687.683:941): avc: denied { mounton } for pid=5119 comm="syz.1.649" path="/proc/293/task" dev="proc" ino=9508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 60.719207][ T5102] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 60.765771][ T5102] EXT4-fs (loop2): 1 orphan inode deleted [ 60.788341][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.806881][ T5102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.829136][ T5123] loop4: detected capacity change from 0 to 2048 [ 60.839826][ T29] audit: type=1400 audit(1746403687.723:942): avc: denied { mount } for pid=5119 comm="syz.1.649" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.887640][ T5123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.914579][ T5102] syz.2.641 (5102) used greatest stack depth: 8960 bytes left [ 60.926382][ T29] audit: type=1326 audit(1746403687.903:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c0f8e969 code=0x7ffc0000 [ 60.949699][ T29] audit: type=1326 audit(1746403687.903:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f65c0f8e969 code=0x7ffc0000 [ 60.973175][ T29] audit: type=1326 audit(1746403687.903:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.0.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c0f8e969 code=0x7ffc0000 [ 61.151844][ T29] audit: type=1400 audit(1746403688.003:946): avc: denied { create } for pid=5128 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.171761][ T29] audit: type=1400 audit(1746403688.023:947): avc: denied { connect } for pid=5128 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.191418][ T29] audit: type=1400 audit(1746403688.023:948): avc: denied { write } for pid=5128 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.210778][ T29] audit: type=1400 audit(1746403688.023:949): avc: denied { read } for pid=5128 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.381062][ T29] audit: type=1400 audit(1746403688.353:950): avc: denied { write } for pid=5135 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.680486][ T5153] loop4: detected capacity change from 0 to 1024 [ 61.699539][ T5153] EXT4-fs: Ignoring removed orlov option [ 61.726755][ T5155] vhci_hcd: invalid port number 224 [ 61.732269][ T5155] vhci_hcd: default hub control req: 8017 v0f00 i00e0 l0 [ 61.826904][ T5162] loop1: detected capacity change from 0 to 2048 [ 62.187439][ T5170] netem: incorrect gi model size [ 62.192443][ T5170] netem: change failed [ 62.342164][ T5174] xt_CT: No such helper "snmp_trap" [ 62.398346][ T5179] loop3: detected capacity change from 0 to 1024 [ 62.433219][ T5179] EXT4-fs: Ignoring removed nobh option [ 62.439785][ T5179] EXT4-fs: Ignoring removed bh option [ 62.448261][ T5181] loop1: detected capacity change from 0 to 1024 [ 62.473909][ T5181] EXT4-fs: Ignoring removed oldalloc option [ 62.502425][ T5181] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 62.570615][ T5179] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.672: Allocating blocks 385-513 which overlap fs metadata [ 62.643111][ T5179] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.672: Allocating blocks 385-513 which overlap fs metadata [ 62.677911][ T5179] EXT4-fs (loop3): pa ffff88810658b150: logic 16, phys. 129, len 24 [ 62.686073][ T5179] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 62.723677][ T5193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.677'. [ 62.765589][ T5193] bridge0: port 3(batadv1) entered blocking state [ 62.772268][ T5193] bridge0: port 3(batadv1) entered disabled state [ 62.788146][ T5193] batadv1: entered allmulticast mode [ 62.794129][ T5193] batadv1: entered promiscuous mode [ 62.837987][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'. [ 62.873101][ T5201] loop4: detected capacity change from 0 to 2048 [ 62.892250][ T5206] netlink: 40 bytes leftover after parsing attributes in process `syz.3.684'. [ 63.064756][ T5221] loop2: detected capacity change from 0 to 1024 [ 63.098520][ T5227] loop1: detected capacity change from 0 to 164 [ 63.108661][ T5221] EXT4-fs: Ignoring removed orlov option [ 63.139541][ T5227] ISOFS: unable to read i-node block [ 63.144948][ T5227] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 63.156941][ T5229] pim6reg1: entered promiscuous mode [ 63.162297][ T5229] pim6reg1: entered allmulticast mode [ 63.257320][ T4881] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 63.266653][ T4881] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 63.317389][ T5246] bond0: entered promiscuous mode [ 63.322569][ T5246] bond_slave_0: entered promiscuous mode [ 63.328401][ T5246] bond_slave_1: entered promiscuous mode [ 63.342990][ T5246] batadv0: entered promiscuous mode [ 63.350023][ T5246] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 63.359830][ T5246] bond0: left promiscuous mode [ 63.364686][ T5246] bond_slave_0: left promiscuous mode [ 63.370273][ T5246] bond_slave_1: left promiscuous mode [ 63.395137][ T5246] batadv0: left promiscuous mode [ 63.522955][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 63.569558][ T5254] loop1: detected capacity change from 0 to 2048 [ 63.605246][ T4881] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.657853][ T4881] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.737635][ T4881] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.833682][ T4881] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.985336][ T4881] bridge_slave_1: left allmulticast mode [ 63.991095][ T4881] bridge_slave_1: left promiscuous mode [ 63.996799][ T4881] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.020568][ T4881] bridge_slave_0: left allmulticast mode [ 64.026333][ T4881] bridge_slave_0: left promiscuous mode [ 64.032051][ T4881] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.081378][ T5296] loop4: detected capacity change from 0 to 512 [ 64.116073][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 64.128400][ T5296] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 64.191242][ T4881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.203303][ T4881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.216452][ T4881] bond0 (unregistering): Released all slaves [ 64.332372][ T4881] hsr_slave_0: left promiscuous mode [ 64.347078][ T4881] hsr_slave_1: left promiscuous mode [ 64.353674][ T4881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.362475][ T4881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.374953][ T4881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.382538][ T4881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.415996][ T4881] veth1_macvtap: left promiscuous mode [ 64.441838][ T4881] veth0_macvtap: left promiscuous mode [ 64.453504][ T4881] veth1_vlan: left promiscuous mode [ 64.462974][ T4881] veth0_vlan: left promiscuous mode [ 64.527030][ T4881] team0 (unregistering): Port device team_slave_1 removed [ 64.538031][ T4881] team0 (unregistering): Port device team_slave_0 removed [ 64.612230][ T5262] chnl_net:caif_netlink_parms(): no params data found [ 64.657779][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.664927][ T5262] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.672971][ T5262] bridge_slave_0: entered allmulticast mode [ 64.679989][ T5262] bridge_slave_0: entered promiscuous mode [ 64.687222][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.694350][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.701699][ T5262] bridge_slave_1: entered allmulticast mode [ 64.708289][ T5262] bridge_slave_1: entered promiscuous mode [ 64.728880][ T5262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.740073][ T5262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.760620][ T5262] team0: Port device team_slave_0 added [ 64.778987][ T5262] team0: Port device team_slave_1 added [ 64.797745][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.804792][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.830852][ T5262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.842296][ T5262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.849338][ T5262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.875352][ T5262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.906737][ T5262] hsr_slave_0: entered promiscuous mode [ 64.913033][ T5262] hsr_slave_1: entered promiscuous mode [ 64.919354][ T5262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.928248][ T5262] Cannot create hsr debugfs directory [ 65.007407][ T5262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.017663][ T5262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.028530][ T5262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.037641][ T5262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.081293][ T5262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.095428][ T5262] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.107751][ T4881] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.114903][ T4881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.128523][ T4881] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.135643][ T4881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.212585][ T5262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.331637][ T5262] veth0_vlan: entered promiscuous mode [ 65.339763][ T5262] veth1_vlan: entered promiscuous mode [ 65.357357][ T5262] veth0_macvtap: entered promiscuous mode [ 65.364992][ T5262] veth1_macvtap: entered promiscuous mode [ 65.379001][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.389577][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.399527][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.410006][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.419863][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.430317][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.440263][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.450742][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.461465][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.470227][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.480720][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.490740][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.501199][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.511058][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.521554][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.531423][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.541868][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.552675][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.564340][ T5262] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.573180][ T5262] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.581959][ T5262] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.590711][ T5262] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.732006][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 65.732054][ T29] audit: type=1326 audit(1746403692.703:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5441 comm="syz.0.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c0f8e969 code=0x7ffc0000 [ 65.781931][ T29] audit: type=1326 audit(1746403692.713:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875e9ee969 code=0x7ffc0000 [ 65.805528][ T29] audit: type=1326 audit(1746403692.713:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875e9ee969 code=0x7ffc0000 [ 65.828943][ T29] audit: type=1326 audit(1746403692.713:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f875e9ee969 code=0x7ffc0000 [ 65.852299][ T29] audit: type=1326 audit(1746403692.713:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875e9ee969 code=0x7ffc0000 [ 65.875723][ T29] audit: type=1326 audit(1746403692.713:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875e9ee969 code=0x7ffc0000 [ 65.899094][ T29] audit: type=1326 audit(1746403692.713:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875e9ee969 code=0x7ffc0000 [ 65.922833][ T29] audit: type=1326 audit(1746403692.713:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875e9ee969 code=0x7ffc0000 [ 65.946257][ T29] audit: type=1326 audit(1746403692.713:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875e9ee969 code=0x7ffc0000 [ 65.967665][ T5454] loop5: detected capacity change from 0 to 2048 [ 65.969700][ T29] audit: type=1326 audit(1746403692.713:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875e9ee969 code=0x7ffc0000 [ 66.012974][ T5452] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 66.020845][ T5452] netlink: 224 bytes leftover after parsing attributes in process `syz.4.730'. [ 66.222751][ T5476] loop5: detected capacity change from 0 to 1024 [ 66.251792][ T5476] EXT4-fs: Ignoring removed orlov option [ 66.309688][ T5494] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 66.545368][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 66.625614][ T4780] ================================================================== [ 66.633760][ T4780] BUG: KCSAN: data-race in copy_page_from_iter_atomic / copy_page_from_iter_atomic [ 66.643087][ T4780] [ 66.645418][ T4780] write to 0xffff88810842d1ca of 2 bytes by task 5502 on cpu 1: [ 66.653061][ T4780] copy_page_from_iter_atomic+0x77f/0xff0 [ 66.658795][ T4780] generic_perform_write+0x2c2/0x490 [ 66.664101][ T4780] ext4_buffered_write_iter+0x1ee/0x3c0 [ 66.669670][ T4780] ext4_file_write_iter+0x383/0xf00 [ 66.674890][ T4780] iter_file_splice_write+0x5ef/0x970 [ 66.680277][ T4780] direct_splice_actor+0x153/0x2a0 [ 66.685405][ T4780] splice_direct_to_actor+0x30f/0x680 [ 66.690791][ T4780] do_splice_direct+0xda/0x150 [ 66.695566][ T4780] do_sendfile+0x380/0x640 [ 66.700010][ T4780] __x64_sys_sendfile64+0x105/0x150 [ 66.705233][ T4780] x64_sys_call+0xb39/0x2fb0 [ 66.709841][ T4780] do_syscall_64+0xd0/0x1a0 [ 66.714356][ T4780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.720262][ T4780] [ 66.722594][ T4780] read to 0xffff88810842d000 of 1024 bytes by task 4780 on cpu 0: [ 66.730404][ T4780] copy_page_from_iter_atomic+0x77f/0xff0 [ 66.736172][ T4780] generic_perform_write+0x2c2/0x490 [ 66.741555][ T4780] shmem_file_write_iter+0xc5/0xf0 [ 66.746689][ T4780] lo_rw_aio+0x5f7/0x7c0 [ 66.750958][ T4780] loop_process_work+0x52d/0xa60 [ 66.755919][ T4780] loop_workfn+0x31/0x40 [ 66.760178][ T4780] process_scheduled_works+0x4cb/0x9d0 [ 66.765658][ T4780] worker_thread+0x582/0x770 [ 66.770288][ T4780] kthread+0x486/0x510 [ 66.774366][ T4780] ret_from_fork+0x4b/0x60 [ 66.778789][ T4780] ret_from_fork_asm+0x1a/0x30 [ 66.783568][ T4780] [ 66.785899][ T4780] Reported by Kernel Concurrency Sanitizer on: [ 66.792176][ T4780] CPU: 0 UID: 0 PID: 4780 Comm: kworker/u8:10 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 66.803129][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 66.813208][ T4780] Workqueue: loop5 loop_workfn [ 66.818014][ T4780] ================================================================== [ 66.827484][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 66.846658][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'.