last executing test programs: 3.384401268s ago: executing program 4 (id=221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 3.30752998s ago: executing program 4 (id=223): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r0) close(r3) 3.153013752s ago: executing program 4 (id=225): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.978377165s ago: executing program 4 (id=226): r0 = open(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380), 0x1, 0x553, &(0x7f0000000a40)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x4004662b, 0x0) ioperm(0x3, 0x7, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000000)={0x0}) 2.873693296s ago: executing program 4 (id=227): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 2.576135871s ago: executing program 4 (id=233): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9046, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf371, 0x10100, 0xfffffffe, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 2.562744061s ago: executing program 32 (id=233): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9046, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf371, 0x10100, 0xfffffffe, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 1.440810418s ago: executing program 0 (id=257): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 907.349306ms ago: executing program 3 (id=270): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x4007, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x4, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x44}}, 0x0) 812.416547ms ago: executing program 2 (id=272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 787.050088ms ago: executing program 3 (id=274): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) close(0x4) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) 716.9531ms ago: executing program 1 (id=275): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 704.84334ms ago: executing program 1 (id=276): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 693.45125ms ago: executing program 2 (id=277): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x4, 0x6, 0x203, 0x40, 0x4]}, &(0x7f0000000000)=0x54) 640.97163ms ago: executing program 3 (id=278): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r0) 640.39794ms ago: executing program 3 (id=279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "23f07385df12bc41", "23bb616f2ab7762dfc30f004a821fcc4", "efcf5233", "5b46e1b8569ebe7d"}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 639.72574ms ago: executing program 1 (id=280): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 609.550261ms ago: executing program 3 (id=281): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 567.741991ms ago: executing program 0 (id=282): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f0100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x4, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 516.800072ms ago: executing program 1 (id=283): syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$eJzs3U9vI2cZAPBnHDu76QYSoIeC1D+ilbIV1N50aRtxaIuEuFUClfsSZb1RtE68ip2yiVaw+wFQJYSg4tYTFyQ+ABLqjStCqgQXThwQqMAuHCoEHTTjyQZnx43Tje3F/v2kN/N/nue1PePxzJuZAGbWMxHxekTMRcTzEbFUjK8UJW73Sjbfvbu3NrKSRJq++bckkmJcNltSlMyFYrHzvU6pzv7B9fVWq7lbDDe62zcanf2DF7a21zebm82dy5dXX157Ze2ltUslS1eHqNmdvqGsXq9+/U8/fvtn33j1V1/+7h+v/OXi97J8F4vph/UodXGIcAP0XpNa9lrcl2W/+8lX+UiZK+pTO3HOhbHkAwDAx8uO8T8bEV/Mj/+XYm6oY+ueZKSZAQAAAGclfW0x/p1EpAAAAMDUquRtYJNKvWgLsBiVSr3ea8P7eDxWabU73S9da+/tXO21lV2OWuXaVqt5ab7XpnY5akk2vJr3Hw2/eH846WsD/KOlhXx6faPdujq50x4AAAAwUy4c+/3/z6Xe7/+PcSdN03RsCQIAAABnY3nSCQAAAAAj9+Dv/3cnkgcAAAAwOq7/AwAAwFT75htvZCW9d/fWxlxEXH1rf+96+61fR7Nzvb69t1HfaO/eqG+225ut9FzE9knra7XbN74SO3s3G91mp9vo7B9c2W7v7XSvbPU9AhsAAAAYo888/d7vk4i4/dWFvGTmsz9zAxbotRWojC9DYFSG35Bt8jBtBn3NP6g60jyA8bNVw+yq9TrJyXP+yz3/YUqdtAMY2HjnNw8V1oNEAABgjFY+X379v3p0bgCYUq7qw+wqvf5vpwAzwfV/mF21U7QABKbPwhDznO9vAnDUXGDo6/+Hl/rn3QgEAAAmZDEvSaVenPZfjMqHaU8sRy25ttVqXoqIT0fE75Zq57Lh1XzJZJh/GgAAAAAAAAAAAAAAAAAAAAAAAAAA8rtyJ5ECAAAAUy2i8uekeKDXytJzi8fPD8wnHy7l3fzpAG/+5OZ6t7u7mo3/ezE+ovtOMf7F05x58JBhAAAAGJX8d/oPiu7qpLMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNrcu3tr47CMM+4HX4uI5bL41Tifd89HLSIe+0cS1cOFno5IImLuDOLfvhMRT5TFT7K0YrnIoi9+RFQiYiHPYuTxn0zTtDT+hYeODrPtvWz/83rZ9leJZ/Ju+fZfLcrDGrz/q9zf/82VxM/2PJ8aMsYX3v9Fo3zKud70avn+5zB+MiD+s2WrLHlRvvPtg4NBuaXvRqyUfv8kfbEa3e0bjc7+wQtb2+ubzc3mzuXLqy+vvbL20tqlxrWtVrP4Wxrjh0/+8qNB8fPvlgHxl/vrv368/s8druAE/3n/5t3PHYX731XEB3ciLj4bH6Xpg+//E/3x+17aufh+MVdvRSsRb/+1mLZyLP5TP//tU4Nyy+JfHVD/k97/iydXPff8t+73pkMuAgCMUGf/4Pp6q9XcPX3PwumWeidN008c65Q92RHzgEl/+Gmv4mcQKzs+OoOcHx+U6qPc89ppZk7PlX3YzuIt+P/sqT78x6Yy+BN+Rj0T3S0BAAAjcHTQP+lMAAAAAAAAAAAAAAAAAAAAYHaN44Znx2Pe7nXmJ1BdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICB/hsAAP//Nj3bgA==") r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40002ff, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee00}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x4}, {0x0, 0x4000000000009, 0x40000000000000, 0x800}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x6c}, 0xa, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x5, 0x6}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x200, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x20004001) 516.063832ms ago: executing program 3 (id=284): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003040)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) 436.966573ms ago: executing program 0 (id=285): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) 390.839084ms ago: executing program 0 (id=286): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 337.822285ms ago: executing program 1 (id=287): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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") statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/127) 268.940516ms ago: executing program 0 (id=288): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 268.240386ms ago: executing program 0 (id=289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x800000000000}, 0x18) openat$nvram(0xffffffffffffff9c, 0x0, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 178.560538ms ago: executing program 2 (id=290): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_type(r2, &(0x7f0000000080), 0x9) 170.576838ms ago: executing program 1 (id=291): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 61.018889ms ago: executing program 2 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0xa0000004}) 60.517749ms ago: executing program 2 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 2 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): [ 24.313558][ T29] audit: type=1400 audit(1751631539.087:60): avc: denied { rlimitinh } for pid=3270 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.332391][ T29] audit: type=1400 audit(1751631539.087:61): avc: denied { siginh } for pid=3270 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 32.579052][ T29] audit: type=1400 audit(1751631547.427:62): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.580170][ T3297] cgroup: Unknown subsys name 'net' [ 32.601807][ T29] audit: type=1400 audit(1751631547.427:63): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.629285][ T29] audit: type=1400 audit(1751631547.457:64): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.758198][ T3297] cgroup: Unknown subsys name 'cpuset' [ 32.764534][ T3297] cgroup: Unknown subsys name 'rlimit' [ 32.905380][ T29] audit: type=1400 audit(1751631547.747:65): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.928942][ T29] audit: type=1400 audit(1751631547.747:66): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.949494][ T29] audit: type=1400 audit(1751631547.747:67): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.965825][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.970002][ T29] audit: type=1400 audit(1751631547.747:68): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.999162][ T29] audit: type=1400 audit(1751631547.747:69): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.024005][ T29] audit: type=1400 audit(1751631547.747:70): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.029214][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.047241][ T29] audit: type=1400 audit(1751631547.827:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.846211][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 34.899046][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 34.960287][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.967409][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.974756][ T3306] bridge_slave_0: entered allmulticast mode [ 34.981253][ T3306] bridge_slave_0: entered promiscuous mode [ 34.988137][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.995280][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.002478][ T3306] bridge_slave_1: entered allmulticast mode [ 35.009025][ T3306] bridge_slave_1: entered promiscuous mode [ 35.037527][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 35.047601][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.074927][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.084111][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.091280][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.098623][ T3315] bridge_slave_0: entered allmulticast mode [ 35.105090][ T3315] bridge_slave_0: entered promiscuous mode [ 35.126432][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.133625][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.140877][ T3315] bridge_slave_1: entered allmulticast mode [ 35.147320][ T3315] bridge_slave_1: entered promiscuous mode [ 35.186229][ T3306] team0: Port device team_slave_0 added [ 35.192893][ T3306] team0: Port device team_slave_1 added [ 35.221233][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.230448][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.255634][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.265054][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.272046][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.298052][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.311694][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.320181][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.327276][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.334644][ T3307] bridge_slave_0: entered allmulticast mode [ 35.341170][ T3307] bridge_slave_0: entered promiscuous mode [ 35.353082][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.360111][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.386088][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.402292][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.409389][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.416565][ T3307] bridge_slave_1: entered allmulticast mode [ 35.423146][ T3307] bridge_slave_1: entered promiscuous mode [ 35.458255][ T3315] team0: Port device team_slave_0 added [ 35.476797][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.489240][ T3315] team0: Port device team_slave_1 added [ 35.504936][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.522360][ T3306] hsr_slave_0: entered promiscuous mode [ 35.528543][ T3306] hsr_slave_1: entered promiscuous mode [ 35.566851][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.573959][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.599947][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.611223][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.618400][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.625584][ T3312] bridge_slave_0: entered allmulticast mode [ 35.632610][ T3312] bridge_slave_0: entered promiscuous mode [ 35.644644][ T3307] team0: Port device team_slave_0 added [ 35.651291][ T3307] team0: Port device team_slave_1 added [ 35.657286][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.664286][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.690252][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.708374][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.715512][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.722771][ T3312] bridge_slave_1: entered allmulticast mode [ 35.729248][ T3312] bridge_slave_1: entered promiscuous mode [ 35.735513][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.742661][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.749885][ T3314] bridge_slave_0: entered allmulticast mode [ 35.756230][ T3314] bridge_slave_0: entered promiscuous mode [ 35.763073][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.770192][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.777433][ T3314] bridge_slave_1: entered allmulticast mode [ 35.783974][ T3314] bridge_slave_1: entered promiscuous mode [ 35.800931][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.807934][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.834046][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.870827][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.877842][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.903805][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.936570][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.956868][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.972691][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.983948][ T3315] hsr_slave_0: entered promiscuous mode [ 35.990023][ T3315] hsr_slave_1: entered promiscuous mode [ 35.995911][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.003513][ T3315] Cannot create hsr debugfs directory [ 36.013107][ T3307] hsr_slave_0: entered promiscuous mode [ 36.019191][ T3307] hsr_slave_1: entered promiscuous mode [ 36.025086][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.032699][ T3307] Cannot create hsr debugfs directory [ 36.039335][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.092854][ T3312] team0: Port device team_slave_0 added [ 36.099933][ T3312] team0: Port device team_slave_1 added [ 36.106249][ T3314] team0: Port device team_slave_0 added [ 36.132219][ T3314] team0: Port device team_slave_1 added [ 36.158799][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.165840][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.192066][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.208441][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.215455][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.241442][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.258940][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.265907][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.292044][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.303135][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.310134][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.336084][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.421838][ T3312] hsr_slave_0: entered promiscuous mode [ 36.428018][ T3312] hsr_slave_1: entered promiscuous mode [ 36.434216][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.441859][ T3312] Cannot create hsr debugfs directory [ 36.458495][ T3314] hsr_slave_0: entered promiscuous mode [ 36.464670][ T3314] hsr_slave_1: entered promiscuous mode [ 36.470760][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.478450][ T3314] Cannot create hsr debugfs directory [ 36.489923][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.509031][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.517929][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.538072][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.571313][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.592806][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.611012][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.629828][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.668862][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.693789][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.702679][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.711976][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.731869][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.741036][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.753611][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.763207][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.808767][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.825879][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.835483][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.853634][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.861464][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.870285][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.901992][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.913090][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.927482][ T2668] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.934561][ T2668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.950010][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.958238][ T2668] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.965327][ T2668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.974775][ T2668] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.981925][ T2668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.994338][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.001518][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.015829][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.043739][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.062106][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.069301][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.079046][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.091573][ T2668] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.098746][ T2668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.116696][ T2668] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.123780][ T2668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.137891][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.157725][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.164815][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.194483][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.221404][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.231999][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.261686][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.276527][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.289502][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.296705][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.316008][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.323122][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.353979][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.365671][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.376257][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.412363][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.445172][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.526357][ T3307] veth0_vlan: entered promiscuous mode [ 37.534043][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.548932][ T3307] veth1_vlan: entered promiscuous mode [ 37.573614][ T3307] veth0_macvtap: entered promiscuous mode [ 37.619085][ T3307] veth1_macvtap: entered promiscuous mode [ 37.630382][ T3306] veth0_vlan: entered promiscuous mode [ 37.652394][ T3306] veth1_vlan: entered promiscuous mode [ 37.662686][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.684498][ T3306] veth0_macvtap: entered promiscuous mode [ 37.693205][ T3306] veth1_macvtap: entered promiscuous mode [ 37.701836][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.712137][ T3315] veth0_vlan: entered promiscuous mode [ 37.733402][ T3314] veth0_vlan: entered promiscuous mode [ 37.747226][ T3314] veth1_vlan: entered promiscuous mode [ 37.754248][ T3315] veth1_vlan: entered promiscuous mode [ 37.760924][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.775190][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.784005][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.792851][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.801660][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.814837][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.829608][ T3312] veth0_vlan: entered promiscuous mode [ 37.835650][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.844411][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.853189][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.862044][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.892101][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 37.892117][ T29] audit: type=1400 audit(1751631552.737:81): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.LDCX5f/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.894879][ T3315] veth0_macvtap: entered promiscuous mode [ 37.912220][ T29] audit: type=1400 audit(1751631552.757:82): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.928540][ T3312] veth1_vlan: entered promiscuous mode [ 37.950081][ T29] audit: type=1400 audit(1751631552.757:83): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.LDCX5f/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.971106][ T3312] veth0_macvtap: entered promiscuous mode [ 37.980669][ T29] audit: type=1400 audit(1751631552.757:84): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.993815][ T3312] veth1_macvtap: entered promiscuous mode [ 38.008121][ T29] audit: type=1400 audit(1751631552.757:85): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.LDCX5f/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.021990][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.040839][ T29] audit: type=1400 audit(1751631552.757:86): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/root/syzkaller.LDCX5f/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.053036][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.075421][ T29] audit: type=1400 audit(1751631552.757:87): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.105201][ T29] audit: type=1400 audit(1751631552.947:88): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.133904][ T29] audit: type=1400 audit(1751631552.947:89): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="gadgetfs" ino=3825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.140807][ T3314] veth0_macvtap: entered promiscuous mode [ 38.164825][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.169449][ T3312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.188226][ T3312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.196948][ T3312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.205791][ T3312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.218363][ T3315] veth1_macvtap: entered promiscuous mode [ 38.226438][ T3314] veth1_macvtap: entered promiscuous mode [ 38.243483][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.254354][ T29] audit: type=1400 audit(1751631553.097:90): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.297409][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.307158][ T3315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.316026][ T3315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.324808][ T3315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.333641][ T3315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.345113][ T3476] netlink: 'syz.0.1': attribute type 6 has an invalid length. [ 38.346889][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.405208][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.443919][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 38.449811][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.461514][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.470472][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.479368][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.498944][ T3486] process 'syz.0.6' launched './file0' with NULL argv: empty string added [ 38.651420][ T3501] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.670448][ T3501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 38.677777][ T3501] IPv6: NLM_F_CREATE should be set when creating new route [ 38.703535][ T3506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'. [ 38.726956][ T3506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 38.873259][ T3517] loop1: detected capacity change from 0 to 128 [ 39.300790][ T3535] pimreg: entered allmulticast mode [ 39.469119][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 39.604458][ T3541] netlink: 'syz.4.21': attribute type 5 has an invalid length. [ 39.764154][ T3558] wg2: entered promiscuous mode [ 39.764171][ T3558] wg2: entered allmulticast mode [ 39.898793][ T3564] syzkaller0: entered promiscuous mode [ 39.904359][ T3564] syzkaller0: entered allmulticast mode [ 40.062641][ T3570] loop4: detected capacity change from 0 to 256 [ 40.063089][ T3570] ======================================================= [ 40.063089][ T3570] WARNING: The mand mount option has been deprecated and [ 40.063089][ T3570] and is ignored by this kernel. Remove the mand [ 40.063089][ T3570] option from the mount to silence this warning. [ 40.063089][ T3570] ======================================================= [ 40.064874][ T3570] vfat: Bad value for 'dmask' [ 40.213170][ T3574] can0: slcan on ttyS3. [ 40.297515][ T3574] can0 (unregistered): slcan off ttyS3. [ 40.303219][ T3574] Falling back ldisc for ttyS3. [ 40.339494][ T3576] netlink: 'syz.4.36': attribute type 10 has an invalid length. [ 40.347249][ T3576] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36'. [ 40.381008][ T3576] team0: Port device geneve1 added [ 40.407130][ T3576] syz.4.36 (3576) used greatest stack depth: 10488 bytes left [ 40.441177][ T3583] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.37'. [ 40.450242][ T3583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 40.605914][ T3591] x_tables: unsorted underflow at hook 2 [ 40.619291][ T3591] loop3: detected capacity change from 0 to 512 [ 40.629898][ T3591] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.643011][ T3591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.655996][ T3591] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.670285][ T3591] EXT4-fs (loop3): 1 truncate cleaned up [ 40.676325][ T3591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.705209][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.731563][ T3595] syzkaller0: entered promiscuous mode [ 40.737095][ T3595] syzkaller0: entered allmulticast mode [ 40.775799][ T3597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 40.816520][ T3599] pimreg: entered allmulticast mode [ 41.245880][ T3636] loop1: detected capacity change from 0 to 512 [ 41.250059][ T3636] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.252587][ T3636] EXT4-fs (loop1): 1 truncate cleaned up [ 41.252928][ T3636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.260269][ T3632] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 41.260305][ T3632] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 41.260339][ T3632] vhci_hcd vhci_hcd.0: Device attached [ 41.287132][ T3632] pim6reg: entered allmulticast mode [ 41.350768][ T3640] pim6reg: left allmulticast mode [ 41.351759][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.378925][ T3642] can0: slcan on ttyS3. [ 41.421595][ T3645] veth0: entered promiscuous mode [ 41.421817][ T3645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 41.428863][ T3637] vhci_hcd: connection closed [ 41.447042][ T3645] veth0 (unregistering): left promiscuous mode [ 41.449041][ T12] vhci_hcd: stop threads [ 41.449052][ T12] vhci_hcd: release socket [ 41.449075][ T12] vhci_hcd: disconnect device [ 41.478385][ T3642] can0 (unregistered): slcan off ttyS3. [ 41.478502][ T3642] Falling back ldisc for ttyS3. [ 41.819512][ T3686] syzkaller0: entered promiscuous mode [ 41.825103][ T3686] syzkaller0: entered allmulticast mode [ 41.884922][ T3695] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.64'. [ 42.006069][ T3701] can0: slcan on ttyS3. [ 42.060648][ T3701] can0 (unregistered): slcan off ttyS3. [ 42.070841][ T3701] Falling back ldisc for ttyS3. [ 42.174597][ C1] hrtimer: interrupt took 44463 ns [ 42.547345][ T3744] pimreg: entered allmulticast mode [ 42.915240][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 42.915255][ T29] audit: type=1400 audit(2000000002.470:345): avc: denied { sys_module } for pid=3757 comm="syz.4.79" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 42.960104][ T3758] tipc: Started in network mode [ 42.965061][ T3758] tipc: Node identity 9288eaac66e9, cluster identity 4711 [ 42.965169][ T3758] tipc: Enabled bearer , priority 0 [ 43.051756][ T3761] tipc: Resetting bearer [ 43.063657][ T3757] tipc: Resetting bearer [ 43.085219][ T3757] tipc: Disabling bearer [ 43.150721][ T29] audit: type=1400 audit(2000000002.710:346): avc: denied { create } for pid=3768 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.181710][ T29] audit: type=1400 audit(2000000002.740:347): avc: denied { write } for pid=3768 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.378048][ T3777] pim6reg1: entered promiscuous mode [ 43.378082][ T3777] pim6reg1: entered allmulticast mode [ 43.418482][ T29] audit: type=1400 audit(2000000002.970:348): avc: denied { mount } for pid=3779 comm="syz.2.86" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.485126][ T3784] __nla_validate_parse: 1 callbacks suppressed [ 43.485140][ T3784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 43.527973][ T29] audit: type=1326 audit(2000000003.090:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3787 comm="syz.4.88" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecf38be929 code=0x0 [ 43.576525][ T3791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 43.589822][ T3792] loop4: detected capacity change from 0 to 512 [ 43.597152][ T3792] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.603940][ T29] audit: type=1400 audit(2000000003.150:350): avc: denied { mounton } for pid=3787 comm="syz.4.88" path="/20/file1" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.645126][ T3792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.661787][ T29] audit: type=1400 audit(2000000003.220:351): avc: denied { mount } for pid=3787 comm="syz.4.88" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.827028][ T29] audit: type=1400 audit(2000000003.380:352): avc: denied { read } for pid=3803 comm="syz.2.93" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 43.849820][ T29] audit: type=1400 audit(2000000003.380:353): avc: denied { open } for pid=3803 comm="syz.2.93" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 43.853370][ T3805] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 43.891640][ T29] audit: type=1400 audit(2000000003.440:354): avc: denied { write } for pid=3803 comm="syz.2.93" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.916731][ T3806] hub 6-0:1.0: USB hub found [ 43.920672][ T3805] vlan2: entered allmulticast mode [ 43.922763][ T3806] hub 6-0:1.0: 8 ports detected [ 43.926608][ T3805] geneve1: entered allmulticast mode [ 43.968800][ T3812] loop2: detected capacity change from 0 to 1024 [ 43.976066][ T3812] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 43.985965][ T3812] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.997063][ T3810] netlink: 'syz.0.95': attribute type 7 has an invalid length. [ 43.997678][ T3812] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.004779][ T3810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 44.021895][ T3812] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.029284][ T3812] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.96: Inode bitmap for bg 0 marked uninitialized [ 44.049184][ T3812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.064028][ T3812] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 44.083604][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.102779][ T3819] netlink: 'syz.3.101': attribute type 4 has an invalid length. [ 44.116810][ T3819] netlink: 'syz.3.101': attribute type 4 has an invalid length. [ 44.126376][ T3818] netlink: 'syz.0.99': attribute type 4 has an invalid length. [ 44.132384][ T3821] loop1: detected capacity change from 0 to 512 [ 44.172587][ T3821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.174781][ T3829] loop0: detected capacity change from 0 to 128 [ 44.191877][ T3821] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.254742][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.271301][ T3837] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 44.284976][ T3835] tipc: Started in network mode [ 44.290075][ T3835] tipc: Node identity eee22e1973b1, cluster identity 4711 [ 44.297266][ T3835] tipc: Enabled bearer , priority 0 [ 44.305716][ T3840] netlink: 44 bytes leftover after parsing attributes in process `syz.3.106'. [ 44.315245][ T3834] netlink: 44 bytes leftover after parsing attributes in process `syz.3.106'. [ 44.325143][ T3833] tipc: Resetting bearer [ 44.348629][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.354585][ T3833] tipc: Disabling bearer [ 44.392092][ T3842] loop2: detected capacity change from 0 to 128 [ 44.545306][ T3859] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 44.553846][ T3859] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 44.562347][ T3859] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 44.570868][ T3859] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 44.579446][ T3859] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 44.721707][ T3875] ipvlan2: entered promiscuous mode [ 44.731892][ T3877] loop0: detected capacity change from 0 to 128 [ 44.748171][ T3877] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.805983][ T3880] syzkaller0: entered promiscuous mode [ 44.811533][ T3880] syzkaller0: entered allmulticast mode [ 44.819752][ T3877] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.891464][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.948238][ T3897] netlink: 'syz.2.135': attribute type 10 has an invalid length. [ 44.964759][ T3900] netlink: 'syz.3.136': attribute type 1 has an invalid length. [ 44.968842][ T3897] team0: Port device dummy0 added [ 44.985889][ T3897] netlink: 'syz.2.135': attribute type 10 has an invalid length. [ 44.986422][ T3900] geneve2: entered allmulticast mode [ 45.002174][ T3897] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.013235][ T3897] team0: Failed to send options change via netlink (err -105) [ 45.021461][ T3897] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.034185][ T3897] team0: Port device dummy0 removed [ 45.055163][ T3897] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.153403][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.162699][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.190919][ T3915] loop4: detected capacity change from 0 to 164 [ 45.203994][ T3917] tipc: Started in network mode [ 45.209027][ T3917] tipc: Node identity 5a0ed6e72b52, cluster identity 4711 [ 45.216288][ T3917] tipc: Enabled bearer , priority 0 [ 45.224646][ T3915] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.235524][ T3917] tipc: Disabling bearer [ 45.304676][ T3925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.318638][ T3925] vlan0: entered allmulticast mode [ 45.323847][ T3925] bond1: entered allmulticast mode [ 45.411442][ T3936] netlink: 'syz.3.152': attribute type 4 has an invalid length. [ 45.490651][ T3944] loop4: detected capacity change from 0 to 2048 [ 45.497521][ T3944] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.519664][ T3944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.581055][ T3955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.595568][ T3955] batadv_slave_0: entered promiscuous mode [ 45.602335][ T3955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.602454][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.620119][ T3955] batadv_slave_0 (unregistering): left promiscuous mode [ 45.627193][ T3955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.643064][ T3957] bridge: RTM_NEWNEIGH with invalid ether address [ 45.662880][ T3960] netlink: 'syz.1.161': attribute type 10 has an invalid length. [ 45.671964][ T3960] dummy0: entered promiscuous mode [ 45.679659][ T3960] bridge0: port 3(dummy0) entered blocking state [ 45.686140][ T3960] bridge0: port 3(dummy0) entered disabled state [ 45.693837][ T3960] dummy0: entered allmulticast mode [ 45.700050][ T3960] bridge0: port 3(dummy0) entered blocking state [ 45.706538][ T3960] bridge0: port 3(dummy0) entered forwarding state [ 45.862067][ T3992] loop4: detected capacity change from 0 to 512 [ 45.869270][ T3992] EXT4-fs: test_dummy_encryption option not supported [ 45.969116][ T4004] syz.0.178 uses obsolete (PF_INET,SOCK_PACKET) [ 46.072897][ T4012] loop1: detected capacity change from 0 to 1024 [ 46.080226][ T4012] EXT4-fs: Ignoring removed orlov option [ 46.085990][ T4012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.095657][ T4008] bridge_slave_1: left allmulticast mode [ 46.101644][ T4008] bridge_slave_1: left promiscuous mode [ 46.108036][ T4008] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.119501][ T4008] bridge_slave_0: left allmulticast mode [ 46.119883][ T4016] loop0: detected capacity change from 0 to 512 [ 46.125170][ T4008] bridge_slave_0: left promiscuous mode [ 46.125373][ T4008] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.138676][ T4012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.166687][ T4016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.189915][ T4016] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.202898][ T4024] loop3: detected capacity change from 0 to 128 [ 46.203039][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.209632][ T4024] EXT4-fs: Ignoring removed nobh option [ 46.229490][ T4024] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.242323][ T4024] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.243491][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.335281][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.448340][ T4041] loop1: detected capacity change from 0 to 1024 [ 46.459201][ T4041] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.605907][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 46.673035][ T4052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4052 comm=syz.1.195 [ 46.719033][ T4056] capability: warning: `syz.1.197' uses deprecated v2 capabilities in a way that may be insecure [ 46.782405][ T4060] x_tables: ip_tables: udp match: only valid for protocol 17 [ 46.895703][ T4065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.904400][ T4065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.147756][ T4067] loop0: detected capacity change from 0 to 128 [ 47.154476][ T4067] vfat: Unknown parameter 'ÿÿ0xffffffffffffffffœ°1+' [ 47.180123][ T4067] loop0: detected capacity change from 0 to 2048 [ 47.211285][ T4067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.262434][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.294382][ T4076] loop0: detected capacity change from 0 to 2048 [ 47.301438][ T4076] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.319783][ T4076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.409927][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.486202][ T4087] tipc: Enabled bearer , priority 0 [ 47.494968][ T4086] tipc: Resetting bearer [ 47.525801][ T4086] tipc: Disabling bearer [ 47.909920][ T4121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.979766][ T4124] team0: Port device dummy0 added [ 48.003992][ T4121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.023527][ T4124] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 48.067430][ T4124] team0: Failed to send options change via netlink (err -105) [ 48.089237][ T4124] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 48.105010][ T4124] team0: Port device dummy0 removed [ 48.113458][ T4124] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.136286][ T4121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.172524][ T4127] loop4: detected capacity change from 0 to 1024 [ 48.190717][ T4127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.206092][ T4121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.259618][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 48.259689][ T29] audit: type=1400 audit(2000000007.820:547): avc: denied { rmdir } for pid=3312 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.325925][ T4121] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.340889][ T4121] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.352654][ T4121] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.373336][ T4121] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.435106][ T4136] sch_fq: defrate 4294967295 ignored. [ 48.442476][ T29] audit: type=1400 audit(2000000008.000:548): avc: denied { bind } for pid=4131 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.482628][ T4130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.519846][ T29] audit: type=1400 audit(2000000008.080:549): avc: denied { getopt } for pid=4142 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.586414][ T29] audit: type=1326 audit(2000000008.140:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f679e8358e7 code=0x7ffc0000 [ 48.609720][ T29] audit: type=1326 audit(2000000008.140:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f679e7dab19 code=0x7ffc0000 [ 48.633057][ T29] audit: type=1326 audit(2000000008.140:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f679e8358e7 code=0x7ffc0000 [ 48.656297][ T29] audit: type=1326 audit(2000000008.140:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f679e7dab19 code=0x7ffc0000 [ 48.679681][ T29] audit: type=1326 audit(2000000008.140:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f679e8358e7 code=0x7ffc0000 [ 48.702901][ T29] audit: type=1326 audit(2000000008.140:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f679e7dab19 code=0x7ffc0000 [ 48.706787][ T4138] __nla_validate_parse: 11 callbacks suppressed [ 48.706806][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 48.726172][ T29] audit: type=1326 audit(2000000008.140:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4145 comm="syz.1.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f679e8358e7 code=0x7ffc0000 [ 48.793216][ T383] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.854265][ T4162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'. [ 48.864241][ T383] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.924905][ T4162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 48.937883][ T383] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.966287][ T4176] loop3: detected capacity change from 0 to 1024 [ 48.975551][ T4149] chnl_net:caif_netlink_parms(): no params data found [ 48.983259][ T4176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.009777][ T383] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.022286][ T4176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.045323][ T4187] loop2: detected capacity change from 0 to 164 [ 49.052624][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.062909][ T4187] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.076362][ T4187] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.085232][ T4187] Symlink component flag not implemented [ 49.091018][ T4187] Symlink component flag not implemented [ 49.098258][ T4187] Symlink component flag not implemented (7) [ 49.104284][ T4187] Symlink component flag not implemented (116) [ 49.119653][ T4149] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.126961][ T4149] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.127753][ T4193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 49.134690][ T4149] bridge_slave_0: entered allmulticast mode [ 49.150547][ T4149] bridge_slave_0: entered promiscuous mode [ 49.167738][ T4193] hsr_slave_0 (unregistering): left promiscuous mode [ 49.175844][ T4149] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.182996][ T4149] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.190268][ T4149] bridge_slave_1: entered allmulticast mode [ 49.196864][ T4149] bridge_slave_1: entered promiscuous mode [ 49.218633][ T4149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.221499][ T4181] syz.1.245 (4181) used greatest stack depth: 10192 bytes left [ 49.239766][ T4149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.270362][ T4149] team0: Port device team_slave_0 added [ 49.277044][ T4149] team0: Port device team_slave_1 added [ 49.284896][ T383] bridge_slave_1: left allmulticast mode [ 49.290683][ T383] bridge_slave_1: left promiscuous mode [ 49.296380][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.309432][ T383] bridge_slave_0: left allmulticast mode [ 49.315200][ T383] bridge_slave_0: left promiscuous mode [ 49.321330][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.395245][ T383] team0: Port device geneve1 removed [ 49.429758][ T383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.448804][ T383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.469212][ T383] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 49.488683][ T383] bond0 (unregistering): Released all slaves [ 49.552539][ T4149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.559784][ T4149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.570727][ T4211] loop3: detected capacity change from 0 to 1024 [ 49.585812][ T4149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.594720][ T4211] EXT4-fs: Ignoring removed bh option [ 49.608375][ T4211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.619667][ T4211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.622905][ T383] tipc: Left network mode [ 49.643786][ T4149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.650856][ T4149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.676933][ T4149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.694354][ T383] hsr_slave_0: left promiscuous mode [ 49.700114][ T383] hsr_slave_1: left promiscuous mode [ 49.708776][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.716324][ T383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.724700][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.732174][ T383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.744250][ T383] veth1_macvtap: left promiscuous mode [ 49.749919][ T383] veth0_macvtap: left promiscuous mode [ 49.755484][ T383] veth1_vlan: left promiscuous mode [ 49.760919][ T383] veth0_vlan: left promiscuous mode [ 49.799200][ T4220] validate_nla: 2 callbacks suppressed [ 49.799215][ T4220] netlink: 'syz.1.258': attribute type 3 has an invalid length. [ 49.812438][ T4220] netlink: 224 bytes leftover after parsing attributes in process `syz.1.258'. [ 49.822943][ T383] pimreg (unregistering): left allmulticast mode [ 49.832478][ T4220] syz.1.258 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.887870][ T383] team0 (unregistering): Port device team_slave_1 removed [ 49.909883][ T383] team0 (unregistering): Port device team_slave_0 removed [ 49.985590][ T4149] hsr_slave_0: entered promiscuous mode [ 50.009268][ T4149] hsr_slave_1: entered promiscuous mode [ 50.030114][ T4149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.052923][ T4149] Cannot create hsr debugfs directory [ 50.074081][ T4230] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 50.091862][ T4233] netlink: 96 bytes leftover after parsing attributes in process `syz.2.264'. [ 50.109641][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.152179][ T4239] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 50.159981][ T4239] netlink: 'syz.1.267': attribute type 4 has an invalid length. [ 50.167821][ T4239] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.267'. [ 50.179165][ T4239] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 50.186856][ T4239] netlink: 'syz.1.267': attribute type 4 has an invalid length. [ 50.194577][ T4239] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.267'. [ 50.237048][ T4245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.269'. [ 50.250917][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 50.264357][ T4149] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.275043][ T4149] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.286859][ T4149] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.296885][ T4149] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.305110][ T4245] program syz.1.269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.351152][ T4259] netlink: 'syz.3.274': attribute type 4 has an invalid length. [ 50.366087][ T4259] netlink: 'syz.3.274': attribute type 4 has an invalid length. [ 50.378955][ T4261] veth0_vlan: entered allmulticast mode [ 50.403826][ T4261] ªªªªªª: renamed from vlan0 [ 50.450746][ T4149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.488509][ T4149] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.500963][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.508187][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.527526][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.534703][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.615460][ T4149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.627104][ T4278] loop1: detected capacity change from 0 to 512 [ 50.652850][ T4278] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 50.667598][ T4278] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.283: iget: bogus i_mode (5) [ 50.679377][ T4278] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.283: couldn't read orphan inode 15 (err -117) [ 50.692043][ T4278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.704668][ T4278] ext2 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.742308][ T4149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.791075][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.861544][ T4304] loop0: detected capacity change from 0 to 1024 [ 50.880035][ T4304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.913528][ T4299] loop1: detected capacity change from 0 to 8192 [ 51.034177][ T4149] veth0_vlan: entered promiscuous mode [ 51.049746][ T4149] veth1_vlan: entered promiscuous mode [ 51.082050][ T4149] veth0_macvtap: entered promiscuous mode [ 51.090733][ T4149] veth1_macvtap: entered promiscuous mode [ 51.105867][ T4149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.118387][ T4149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.130354][ T4149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.139194][ T4149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.148111][ T4149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.156932][ T4149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.181414][ C0] ================================================================== [ 51.189558][ C0] BUG: KCSAN: data-race in do_select / pollwake [ 51.195847][ C0] [ 51.198200][ C0] read to 0xffffc900018b79e0 of 4 bytes by task 4317 on cpu 1: [ 51.205769][ C0] do_select+0xe48/0xf50 [ 51.210046][ C0] core_sys_select+0x3d7/0x6e0 [ 51.214853][ C0] __se_sys_pselect6+0x216/0x280 [ 51.219993][ C0] __x64_sys_pselect6+0x78/0x90 [ 51.224871][ C0] x64_sys_call+0x1caa/0x2fb0 [ 51.229572][ C0] do_syscall_64+0xd2/0x200 [ 51.234084][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.239984][ C0] [ 51.242306][ C0] write to 0xffffc900018b79e0 of 4 bytes by interrupt on cpu 0: [ 51.249947][ C0] pollwake+0xb6/0x100 [ 51.254019][ C0] __wake_up+0x66/0xb0 [ 51.258103][ C0] bpf_ringbuf_notify+0x22/0x30 [ 51.262970][ C0] irq_work_run+0xe2/0x2d0 [ 51.267402][ C0] __sysvec_irq_work+0x22/0x170 [ 51.272271][ C0] sysvec_irq_work+0x66/0x80 [ 51.276870][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 51.281814][ C0] native_apic_msr_write+0x3d/0x60 [ 51.286935][ C0] x2apic_send_IPI_self+0x10/0x20 [ 51.291973][ C0] arch_irq_work_raise+0x46/0x50 [ 51.296938][ C0] __irq_work_queue_local+0x10f/0x2c0 [ 51.302336][ C0] irq_work_queue+0x70/0x100 [ 51.306943][ C0] bpf_ringbuf_discard+0xd3/0xf0 [ 51.311899][ C0] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 51.317386][ C0] bpf_trace_run3+0x10f/0x1d0 [ 51.322078][ C0] __traceiter_kmem_cache_free+0x38/0x60 [ 51.327736][ C0] kmem_cache_free+0x257/0x300 [ 51.332517][ C0] __kfree_skb+0x109/0x150 [ 51.336953][ C0] consume_skb+0x49/0x150 [ 51.341299][ C0] netlink_broadcast_filtered+0xb25/0xc00 [ 51.347038][ C0] nlmsg_notify+0xcf/0x170 [ 51.351500][ C0] rtnl_notify+0x76/0x90 [ 51.355757][ C0] inet6_rt_notify+0x116/0x190 [ 51.360528][ C0] fib6_add_rt2node+0xc31/0x1720 [ 51.365471][ C0] fib6_add+0x5b9/0xe00 [ 51.369625][ C0] ip6_route_add+0xc7/0x170 [ 51.374156][ C0] addrconf_add_dev+0x1c6/0x240 [ 51.379013][ C0] addrconf_init_auto_addrs+0x4d2/0x730 [ 51.384566][ C0] addrconf_notify+0x72c/0x930 [ 51.389356][ C0] raw_notifier_call_chain+0x6c/0x1b0 [ 51.394730][ C0] call_netdevice_notifiers_info+0xae/0x100 [ 51.400629][ C0] __dev_notify_flags+0xff/0x1a0 [ 51.405575][ C0] netif_change_flags+0xac/0xd0 [ 51.410435][ C0] do_setlink+0x9d2/0x2810 [ 51.414861][ C0] rtnl_newlink+0xe75/0x12d0 [ 51.419461][ C0] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 51.424400][ C0] netlink_rcv_skb+0x120/0x220 [ 51.429176][ C0] rtnetlink_rcv+0x1c/0x30 [ 51.433591][ C0] netlink_unicast+0x5a1/0x670 [ 51.438364][ C0] netlink_sendmsg+0x58b/0x6b0 [ 51.443127][ C0] __sock_sendmsg+0x145/0x180 [ 51.447825][ C0] __sys_sendto+0x268/0x330 [ 51.452345][ C0] __x64_sys_sendto+0x76/0x90 [ 51.457033][ C0] x64_sys_call+0x2eb6/0x2fb0 [ 51.461714][ C0] do_syscall_64+0xd2/0x200 [ 51.466242][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.472138][ C0] [ 51.474457][ C0] value changed: 0x00000001 -> 0x00000000 [ 51.480171][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 51.482494][ C0] Reported by Kernel Concurrency Sanitizer on: [ 51.488656][ C0] CPU: 0 UID: 0 PID: 4149 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 51.501335][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.511401][ C0] ================================================================== [ 51.882520][ T388] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 51.897714][ T388] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.910094][ T388] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.910094][ T388] [ 51.919903][ T388] EXT4-fs (loop0): Total free blocks count 0 [ 51.926015][ T388] EXT4-fs (loop0): Free/Dirty block details [ 51.931949][ T388] EXT4-fs (loop0): free_blocks=68451041280 [ 51.937805][ T388] EXT4-fs (loop0): dirty_blocks=10272 [ 51.943266][ T388] EXT4-fs (loop0): Block reservation details [ 51.949290][ T388] EXT4-fs (loop0): i_reserved_data_blocks=642 [ 51.958150][ T388] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 51.972093][ T383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.030048][ T383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.089983][ T383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.170911][ T383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.250363][ T383] bridge_slave_1: left allmulticast mode [ 52.256059][ T383] bridge_slave_1: left promiscuous mode [ 52.261818][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.269749][ T383] bridge_slave_0: left allmulticast mode [ 52.275519][ T383] bridge_slave_0: left promiscuous mode [ 52.281302][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.360183][ T383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.370410][ T383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.379858][ T383] bond0 (unregistering): Released all slaves [ 52.388443][ T383] bond1 (unregistering): Released all slaves [ 52.428950][ T383] tipc: Left network mode [ 52.434372][ T383] hsr_slave_1: left promiscuous mode [ 52.440042][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.447488][ T383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.457017][ T383] veth1_macvtap: left promiscuous mode [ 52.462583][ T383] veth0_macvtap: left promiscuous mode [ 52.490086][ T383] pimreg (unregistering): left allmulticast mode [ 52.509237][ T383] team0 (unregistering): Port device team_slave_1 removed [ 52.518895][ T383] team0 (unregistering): Port device team_slave_0 removed [ 52.861030][ T383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.890292][ T383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.950877][ T383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.990005][ T383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.072165][ T383] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.110008][ T383] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.160622][ T383] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.210821][ T383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.271435][ T383] dummy0: left allmulticast mode [ 53.276524][ T383] bridge0: port 3(dummy0) entered disabled state [ 53.283606][ T383] bridge_slave_1: left allmulticast mode [ 53.289332][ T383] bridge_slave_1: left promiscuous mode [ 53.295137][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.302986][ T383] bridge_slave_0: left allmulticast mode [ 53.308804][ T383] bridge_slave_0: left promiscuous mode [ 53.314588][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.324040][ T383] bridge_slave_1: left allmulticast mode [ 53.329751][ T383] bridge_slave_1: left promiscuous mode [ 53.335418][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.343398][ T383] bridge_slave_0: left allmulticast mode [ 53.349236][ T383] bridge_slave_0: left promiscuous mode [ 53.354894][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.519599][ T383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.529284][ T383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.538677][ T383] bond0 (unregistering): Released all slaves [ 53.591536][ T383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.601455][ T383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.611190][ T383] bond0 (unregistering): Released all slaves [ 53.659532][ T383] tipc: Left network mode [ 53.666490][ T383] hsr_slave_0: left promiscuous mode [ 53.672543][ T383] hsr_slave_1: left promiscuous mode [ 53.678277][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.685666][ T383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.693269][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.700781][ T383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.709867][ T383] hsr_slave_0: left promiscuous mode [ 53.715489][ T383] hsr_slave_1: left promiscuous mode [ 53.721155][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.728572][ T383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.736111][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.743570][ T383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.755748][ T383] veth1_macvtap: left promiscuous mode [ 53.761329][ T383] veth0_macvtap: left promiscuous mode [ 53.766849][ T383] veth1_vlan: left promiscuous mode [ 53.772513][ T383] veth1_macvtap: left promiscuous mode [ 53.778026][ T383] veth0_macvtap: left promiscuous mode [ 53.783564][ T383] veth1_vlan: left promiscuous mode [ 53.788989][ T383] veth0_vlan: left promiscuous mode [ 53.852145][ T383] pimreg (unregistering): left allmulticast mode [ 53.884891][ T383] team0 (unregistering): Port device team_slave_1 removed [ 53.894228][ T383] team0 (unregistering): Port device team_slave_0 removed [ 53.947843][ T383] team0 (unregistering): Port device team_slave_1 removed [ 53.957144][ T383] team0 (unregistering): Port device team_slave_0 removed [ 54.499782][ T383] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.539071][ T383] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.599011][ T383] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.659021][ T383] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.722875][ T383] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.789975][ T383] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.830192][ T383] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.890069][ T383] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.943176][ T383] bridge_slave_1: left allmulticast mode [ 54.948896][ T383] bridge_slave_1: left promiscuous mode [ 54.954597][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.962447][ T383] bridge_slave_0: left allmulticast mode [ 54.968171][ T383] bridge_slave_0: left promiscuous mode [ 54.973912][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.037384][ T383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.047010][ T383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.056721][ T383] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 55.066759][ T383] bond0 (unregistering): Released all slaves [ 55.119999][ T383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.129734][ T383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.139321][ T383] bond0 (unregistering): Released all slaves [ 55.181665][ T383] hsr_slave_0: left promiscuous mode [ 55.187412][ T383] hsr_slave_1: left promiscuous mode [ 55.193101][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.200571][ T383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.208168][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.215553][ T383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.224587][ T383] hsr_slave_0: left promiscuous mode [ 55.230181][ T383] hsr_slave_1: left promiscuous mode [ 55.235789][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.243279][ T383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.250939][ T383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.258399][ T383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.269324][ T383] veth1_macvtap: left promiscuous mode [ 55.274811][ T383] veth0_macvtap: left promiscuous mode [ 55.280845][ T383] veth1_macvtap: left promiscuous mode [ 55.286322][ T383] veth0_macvtap: left promiscuous mode [ 55.291867][ T383] veth1_vlan: left promiscuous mode [ 55.297093][ T383] veth0_vlan: left promiscuous mode [ 55.370213][ T383] team0 (unregistering): Port device team_slave_1 removed [ 55.380577][ T383] team0 (unregistering): Port device team_slave_0 removed [ 55.431874][ T383] team0 (unregistering): Port device team_slave_1 removed [ 55.441803][ T383] team0 (unregistering): Port device team_slave_0 removed