last executing test programs: 24.817830162s ago: executing program 1 (id=208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 24.705328734s ago: executing program 1 (id=221): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) 24.652442205s ago: executing program 1 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r2, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 24.468072529s ago: executing program 1 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) 24.419272289s ago: executing program 1 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 24.190428144s ago: executing program 1 (id=227): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x2019, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$phonet(0x23, 0x2, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f", @ANYRES16=r0], 0xfe33) 24.130504355s ago: executing program 32 (id=227): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x2019, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$phonet(0x23, 0x2, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f", @ANYRES16=r0], 0xfe33) 2.682158689s ago: executing program 3 (id=753): syz_open_procfs(0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.607250411s ago: executing program 3 (id=756): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r2) 1.247417066s ago: executing program 5 (id=784): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) 1.196121027s ago: executing program 5 (id=785): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x1}, 0x18) socket(0x10, 0x3, 0x9) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 1.151233928s ago: executing program 5 (id=788): r0 = gettid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x88, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r1, 0x4b49, &(0x7f0000003140)=""/4111) r2 = inotify_init() readv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 688.921037ms ago: executing program 4 (id=808): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r2, r3+10000000}) 647.630687ms ago: executing program 2 (id=809): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc}, 0x20) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x104) pwritev2(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="a9", 0x1}], 0x1, 0x6c00, 0x1, 0x3) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 632.445448ms ago: executing program 4 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r2, 0xffffffffffffffff, 0x0) 565.911739ms ago: executing program 4 (id=811): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 530.81509ms ago: executing program 2 (id=813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) 525.22376ms ago: executing program 0 (id=814): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 481.88034ms ago: executing program 4 (id=815): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 481.35943ms ago: executing program 0 (id=816): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0309000002"], 0x50) 481.196001ms ago: executing program 3 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 453.824491ms ago: executing program 3 (id=818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000800), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d000000000001000000000000000141000000030017"], 0x38}}, 0x0) 435.270461ms ago: executing program 3 (id=819): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, 0x0) getrlimit(0x3, &(0x7f0000000100)) 423.327912ms ago: executing program 4 (id=820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 395.753662ms ago: executing program 3 (id=821): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="08000000109eb2fa3400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 394.770612ms ago: executing program 2 (id=822): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 279.858924ms ago: executing program 0 (id=823): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xf5b}) fcntl$lock(r2, 0x25, &(0x7f0000002200)={0x2, 0x1, 0xc, 0x4}) 248.949605ms ago: executing program 2 (id=824): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x84}}, 0x24040084) 208.902995ms ago: executing program 5 (id=825): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 207.989826ms ago: executing program 0 (id=826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 195.895606ms ago: executing program 2 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) getpeername(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x70bd2b, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0xffffffff}}}}}, 0x28}}, 0x44) 155.811497ms ago: executing program 2 (id=828): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x1051, &(0x7f0000001280)="$eJzsz7EJwlAUBdAbTIIiSBp7LR3jD+Em9gouo87jJLY2kpg4gqQ4Bz58Hvc+eGEuXqmS/r3HwTLJ4vttk6yn4PNXuez2uZbzEK36eOmG1mab1Wms3kubqmtSp0lyO0zrUtc5Pv55IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM1ScAAP//gqkI3g==") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89a2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x32126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='GPL\x00') 155.333377ms ago: executing program 0 (id=829): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 141.076687ms ago: executing program 5 (id=830): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000380), 0x10) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/115, 0x73}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}, 0x1, 0x0, 0x0, 0x4014}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 126.965297ms ago: executing program 4 (id=831): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0xfffffffe, 0x1, 0xa, 0x21005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) 76.878668ms ago: executing program 0 (id=832): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x21c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 5 (id=833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 33.651671][ T29] audit: type=1400 audit(1758234413.430:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.652725][ T3294] cgroup: Unknown subsys name 'net' [ 33.674430][ T29] audit: type=1400 audit(1758234413.430:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.701812][ T29] audit: type=1400 audit(1758234413.460:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.839410][ T3294] cgroup: Unknown subsys name 'cpuset' [ 33.845963][ T3294] cgroup: Unknown subsys name 'rlimit' [ 33.957013][ T29] audit: type=1400 audit(1758234413.730:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.980375][ T29] audit: type=1400 audit(1758234413.730:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.001028][ T29] audit: type=1400 audit(1758234413.730:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.021425][ T29] audit: type=1400 audit(1758234413.740:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.036278][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.041777][ T29] audit: type=1400 audit(1758234413.740:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.075132][ T29] audit: type=1400 audit(1758234413.740:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.098583][ T29] audit: type=1400 audit(1758234413.830:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.126647][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.441158][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.508291][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.555985][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.563180][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.570551][ T3312] bridge_slave_0: entered allmulticast mode [ 35.577115][ T3312] bridge_slave_0: entered promiscuous mode [ 35.586319][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.593491][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.600731][ T3312] bridge_slave_1: entered allmulticast mode [ 35.607083][ T3312] bridge_slave_1: entered promiscuous mode [ 35.618309][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.656639][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.670718][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.697235][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.716359][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.748971][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.756028][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.763317][ T3306] bridge_slave_0: entered allmulticast mode [ 35.769795][ T3306] bridge_slave_0: entered promiscuous mode [ 35.776939][ T3312] team0: Port device team_slave_0 added [ 35.783948][ T3312] team0: Port device team_slave_1 added [ 35.804426][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.811582][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.818896][ T3306] bridge_slave_1: entered allmulticast mode [ 35.825341][ T3306] bridge_slave_1: entered promiscuous mode [ 35.867167][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.874282][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.882520][ T3313] bridge_slave_0: entered allmulticast mode [ 35.889113][ T3313] bridge_slave_0: entered promiscuous mode [ 35.901017][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.907982][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.934013][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.945247][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.952363][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.978310][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.998621][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.005703][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.012929][ T3313] bridge_slave_1: entered allmulticast mode [ 36.019350][ T3313] bridge_slave_1: entered promiscuous mode [ 36.026713][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.038823][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.045901][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.053404][ T3304] bridge_slave_0: entered allmulticast mode [ 36.059955][ T3304] bridge_slave_0: entered promiscuous mode [ 36.077727][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.093222][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.102342][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.109868][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.117084][ T3304] bridge_slave_1: entered allmulticast mode [ 36.123519][ T3304] bridge_slave_1: entered promiscuous mode [ 36.129880][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.137030][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.144299][ T3310] bridge_slave_0: entered allmulticast mode [ 36.150832][ T3310] bridge_slave_0: entered promiscuous mode [ 36.168193][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.182362][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.189479][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.196783][ T3310] bridge_slave_1: entered allmulticast mode [ 36.203400][ T3310] bridge_slave_1: entered promiscuous mode [ 36.215074][ T3306] team0: Port device team_slave_0 added [ 36.221883][ T3306] team0: Port device team_slave_1 added [ 36.258415][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.275997][ T3312] hsr_slave_0: entered promiscuous mode [ 36.282134][ T3312] hsr_slave_1: entered promiscuous mode [ 36.293680][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.300671][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.326620][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.338088][ T3313] team0: Port device team_slave_0 added [ 36.345024][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.355600][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.366155][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.375477][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.382498][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.408956][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.422885][ T3313] team0: Port device team_slave_1 added [ 36.444198][ T3304] team0: Port device team_slave_0 added [ 36.466089][ T3304] team0: Port device team_slave_1 added [ 36.477287][ T3310] team0: Port device team_slave_0 added [ 36.484249][ T3310] team0: Port device team_slave_1 added [ 36.495888][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.502877][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.528820][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.540243][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.547201][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.573156][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.615737][ T3306] hsr_slave_0: entered promiscuous mode [ 36.622582][ T3306] hsr_slave_1: entered promiscuous mode [ 36.628401][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 36.634151][ T3306] Cannot create hsr debugfs directory [ 36.653260][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.660314][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.686213][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.697413][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.704588][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.730522][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.743790][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.750822][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.776855][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.791095][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.798136][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.824052][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.862637][ T3313] hsr_slave_0: entered promiscuous mode [ 36.868833][ T3313] hsr_slave_1: entered promiscuous mode [ 36.874859][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 36.880644][ T3313] Cannot create hsr debugfs directory [ 36.915529][ T3304] hsr_slave_0: entered promiscuous mode [ 36.921715][ T3304] hsr_slave_1: entered promiscuous mode [ 36.927579][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.933450][ T3304] Cannot create hsr debugfs directory [ 36.975840][ T3310] hsr_slave_0: entered promiscuous mode [ 36.981922][ T3310] hsr_slave_1: entered promiscuous mode [ 36.987763][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 36.993534][ T3310] Cannot create hsr debugfs directory [ 37.136622][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.151528][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.162686][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.176336][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.203376][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.216801][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.226699][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.241339][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.251398][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.265028][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.278946][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.292477][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.314024][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.323295][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.332824][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.343470][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.396494][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.407311][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.416356][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.430029][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.437225][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.454725][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.470524][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.477591][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.489692][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.508572][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.515819][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.538491][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.554268][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.564721][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.571802][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.596494][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.603651][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.627117][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.646663][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.656644][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.663869][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.679777][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.690306][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.706116][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.713297][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.735623][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.769990][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.777151][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.796266][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.811852][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.819097][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.829738][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.851049][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.862401][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.899345][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.906437][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.920353][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.927424][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.965954][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.015599][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.049365][ T3312] veth0_vlan: entered promiscuous mode [ 38.075715][ T3312] veth1_vlan: entered promiscuous mode [ 38.129767][ T3312] veth0_macvtap: entered promiscuous mode [ 38.148385][ T3312] veth1_macvtap: entered promiscuous mode [ 38.158987][ T3304] veth0_vlan: entered promiscuous mode [ 38.170857][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.181439][ T3304] veth1_vlan: entered promiscuous mode [ 38.190396][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.212251][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.228710][ T3313] veth0_vlan: entered promiscuous mode [ 38.245986][ T3313] veth1_vlan: entered promiscuous mode [ 38.253683][ T3304] veth0_macvtap: entered promiscuous mode [ 38.267912][ T3304] veth1_macvtap: entered promiscuous mode [ 38.275547][ T293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.298369][ T293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.312218][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.327320][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.334634][ T293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.357142][ T293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.373128][ T3310] veth0_vlan: entered promiscuous mode [ 38.381539][ T293] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.391227][ T3313] veth0_macvtap: entered promiscuous mode [ 38.397607][ T3306] veth0_vlan: entered promiscuous mode [ 38.412007][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.430038][ T293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.439631][ T3310] veth1_vlan: entered promiscuous mode [ 38.447409][ T3306] veth1_vlan: entered promiscuous mode [ 38.456090][ T3313] veth1_macvtap: entered promiscuous mode [ 38.462821][ T293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.498423][ T293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.508164][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.515678][ T3310] veth0_macvtap: entered promiscuous mode [ 38.535685][ T3306] veth0_macvtap: entered promiscuous mode [ 38.545237][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.566867][ T3310] veth1_macvtap: entered promiscuous mode [ 38.581696][ T3306] veth1_macvtap: entered promiscuous mode [ 38.590655][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.608106][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.616783][ T3477] sch_fq: defrate 4294967295 ignored. [ 38.644320][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.660182][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.675120][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.683893][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.698304][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.708448][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 38.708461][ T29] audit: type=1400 audit(1758234418.480:111): avc: denied { create } for pid=3481 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.751055][ T293] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.760971][ T293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.770245][ T293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.779050][ T29] audit: type=1400 audit(1758234418.510:112): avc: denied { ioctl } for pid=3481 comm="syz.0.8" path="socket:[4675]" dev="sockfs" ino=4675 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.797837][ T293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.803494][ T29] audit: type=1400 audit(1758234418.510:113): avc: denied { write } for pid=3481 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.815866][ T293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.840397][ T29] audit: type=1400 audit(1758234418.610:114): avc: denied { open } for pid=3489 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.856543][ C0] hrtimer: interrupt took 30389 ns [ 38.859507][ T29] audit: type=1400 audit(1758234418.610:115): avc: denied { kernel } for pid=3489 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.884461][ T29] audit: type=1400 audit(1758234418.660:116): avc: denied { create } for pid=3489 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.906223][ T29] audit: type=1400 audit(1758234418.680:117): avc: denied { write } for pid=3489 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.931121][ T29] audit: type=1400 audit(1758234418.710:118): avc: denied { read } for pid=3489 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.959572][ T293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.969621][ T293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.983709][ T3494] loop2: detected capacity change from 0 to 164 [ 38.995138][ T29] audit: type=1400 audit(1758234418.770:119): avc: denied { mount } for pid=3491 comm="syz.3.4" name="/" dev="ramfs" ino=4685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.027579][ T293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.048098][ T3497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 39.057618][ T3494] Unable to read rock-ridge attributes [ 39.075286][ T29] audit: type=1400 audit(1758234418.850:120): avc: denied { mount } for pid=3493 comm="syz.2.12" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 39.109163][ T3494] Unable to read rock-ridge attributes [ 39.119558][ T3494] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 39.158262][ T3490] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.199342][ T293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.213464][ T3497] team1: entered promiscuous mode [ 39.218541][ T3497] team1: entered allmulticast mode [ 39.238047][ T3497] Zero length message leads to an empty skb [ 39.321210][ T3512] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 39.474416][ T3520] capability: warning: `syz.1.21' uses 32-bit capabilities (legacy support in use) [ 39.486424][ T3517] loop3: detected capacity change from 0 to 4096 [ 39.494188][ T3517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.554435][ T3517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.606963][ T3526] loop2: detected capacity change from 0 to 1024 [ 39.680204][ T3526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.754842][ T3526] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.23: Allocating blocks 449-513 which overlap fs metadata [ 39.805198][ T3542] sd 0:0:1:0: device reset [ 39.809829][ T3525] EXT4-fs (loop2): pa ffff88810726d070: logic 48, phys. 177, len 21 [ 39.817902][ T3525] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 39.851200][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.954589][ T3551] pimreg: entered allmulticast mode [ 39.964001][ T3551] pimreg: left allmulticast mode [ 40.013954][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.060342][ T3560] loop2: detected capacity change from 0 to 164 [ 40.119360][ T3563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 40.123455][ T3566] netlink: 204 bytes leftover after parsing attributes in process `syz.1.40'. [ 40.183153][ T3569] loop3: detected capacity change from 0 to 512 [ 40.193869][ T3569] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.207200][ T3569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.219731][ T3569] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.233947][ T3569] EXT4-fs (loop3): 1 truncate cleaned up [ 40.240465][ T3569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.275898][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.341965][ T3490] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.504083][ T3593] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.518788][ T3593] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 40.771449][ T3609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.57'. [ 40.796760][ T3609] netem: change failed [ 40.805672][ T3611] loop3: detected capacity change from 0 to 1024 [ 40.837385][ T3611] ======================================================= [ 40.837385][ T3611] WARNING: The mand mount option has been deprecated and [ 40.837385][ T3611] and is ignored by this kernel. Remove the mand [ 40.837385][ T3611] option from the mount to silence this warning. [ 40.837385][ T3611] ======================================================= [ 40.912401][ T3611] EXT4-fs: Ignoring removed orlov option [ 40.918250][ T3611] EXT4-fs: Ignoring removed nobh option [ 40.923972][ T3611] EXT4-fs: Ignoring removed bh option [ 40.959014][ T3611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.976351][ T3620] netlink: 'syz.4.60': attribute type 3 has an invalid length. [ 40.990366][ T3611] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.58: Allocating blocks 481-513 which overlap fs metadata [ 41.052234][ T3611] EXT4-fs (loop3): pa ffff88810726d070: logic 352, phys. 465, len 3 [ 41.060425][ T3611] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 41.145303][ T3611] syz.3.58 (3611) used greatest stack depth: 10664 bytes left [ 41.159167][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.205094][ T3641] loop3: detected capacity change from 0 to 1024 [ 41.217393][ T3641] EXT4-fs: Ignoring removed bh option [ 41.233510][ T3641] EXT4-fs: inline encryption not supported [ 41.241500][ T3644] loop4: detected capacity change from 0 to 164 [ 41.257323][ T3644] Unable to read rock-ridge attributes [ 41.268434][ T3641] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.284529][ T3644] Unable to read rock-ridge attributes [ 41.290475][ T3644] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 41.302766][ T3641] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.70: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.332494][ T3641] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.70: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.349403][ T3641] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.70: Failed to acquire dquot type 0 [ 41.362027][ T3648] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 41.377580][ T3641] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 41.395210][ T3641] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.70: mark_inode_dirty error [ 41.406765][ T3641] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 41.418192][ T3641] EXT4-fs (loop3): 1 orphan inode deleted [ 41.424472][ T3641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.438302][ T293] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.449117][ T3655] syz.1.74 uses obsolete (PF_INET,SOCK_PACKET) [ 41.459247][ T293] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 41.471965][ T3641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.481664][ T3641] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.70: Invalid inode table block 1 in block_group 0 [ 41.494316][ T3641] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 41.504852][ T3641] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz.3.70: mark_inode_dirty error [ 41.637117][ T3668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'. [ 41.668327][ T3671] loop3: detected capacity change from 0 to 2048 [ 41.687862][ T3671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.704719][ T3671] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.831170][ T3682] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.82: bg 0: block 345: padding at end of block bitmap is not set [ 41.854141][ T3490] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.873631][ T3682] EXT4-fs (loop3): Remounting filesystem read-only [ 41.882919][ T31] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 41.943498][ T3490] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.051202][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.069667][ T3693] syz.4.90 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.082951][ T3694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 42.092113][ T3682] syz.3.82 (3682) used greatest stack depth: 10344 bytes left [ 42.098743][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.107770][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.117724][ T3696] loop2: detected capacity change from 0 to 512 [ 42.137798][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.169549][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.173248][ T3698] netlink: 'syz.0.93': attribute type 13 has an invalid length. [ 42.193645][ T3696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.210402][ T3696] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.361303][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.368663][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.473067][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.502740][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.576266][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.594846][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.615706][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.632988][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.719746][ T3698] syz.0.93 (3698) used greatest stack depth: 10160 bytes left [ 42.791248][ T3718] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 42.799064][ T3718] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.99'. [ 42.839525][ T3721] process 'syz.0.100' launched './file1' with NULL argv: empty string added [ 43.041921][ T3696] syz.2.92 (3696) used greatest stack depth: 7320 bytes left [ 43.061448][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.143055][ T3728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.103'. [ 43.155476][ T3694] Set syz1 is full, maxelem 65536 reached [ 43.302016][ T3745] netlink: 5 bytes leftover after parsing attributes in process `syz.1.110'. [ 43.311036][ T3745] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 43.318644][ T3745] 0ªî{X¹¦: entered allmulticast mode [ 43.324630][ T3745] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 43.390063][ T3747] loop1: detected capacity change from 0 to 8192 [ 43.447306][ T3707] loop1: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 43.448538][ T3707] loop1: p3 size 33554432 extends beyond EOD, truncated [ 43.783313][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 43.783330][ T29] audit: type=1400 audit(1758234423.560:241): avc: denied { read } for pid=3753 comm="syz.0.113" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.832162][ T29] audit: type=1400 audit(1758234423.560:242): avc: denied { open } for pid=3753 comm="syz.0.113" path="net:[4026532468]" dev="nsfs" ino=4026532468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.910999][ T29] audit: type=1326 audit(1758234423.690:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3757 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b337deba9 code=0x7ffc0000 [ 43.957837][ T29] audit: type=1326 audit(1758234423.720:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3757 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f8b337deba9 code=0x7ffc0000 [ 43.981470][ T29] audit: type=1326 audit(1758234423.720:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3757 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b337deba9 code=0x7ffc0000 [ 44.005050][ T29] audit: type=1326 audit(1758234423.720:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3757 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b337deba9 code=0x7ffc0000 [ 44.028500][ T29] audit: type=1326 audit(1758234423.720:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3757 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f8b337deba9 code=0x7ffc0000 [ 44.040534][ T3747] loop1: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 44.051946][ T29] audit: type=1326 audit(1758234423.720:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3757 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b337deba9 code=0x7ffc0000 [ 44.056172][ T3747] loop1: p3 size 33554432 extends beyond EOD, truncated [ 44.205189][ T3764] loop0: detected capacity change from 0 to 512 [ 44.218604][ T3764] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.248640][ T29] audit: type=1400 audit(1758234423.960:249): avc: denied { bind } for pid=3759 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.269641][ T3764] EXT4-fs (loop0): 1 truncate cleaned up [ 44.275721][ T3767] syzkaller0: entered promiscuous mode [ 44.275918][ T3764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.281263][ T3767] syzkaller0: entered allmulticast mode [ 44.326892][ T29] audit: type=1400 audit(1758234424.100:250): avc: denied { write } for pid=3772 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.939242][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.026270][ T3796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3796 comm=syz.3.129 [ 45.173176][ T3707] udevd[3707]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 45.185025][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 45.185149][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 45.206122][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 45.390582][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 45.399179][ T3809] udevd[3809]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 45.402041][ T3707] udevd[3707]: inotify_add_watch(7, /dev/loop1p14, 10) failed: No such file or directory [ 45.417033][ T3816] udevd[3816]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory [ 45.421678][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory [ 45.446955][ T3815] udevd[3815]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 46.020390][ T3841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.143'. [ 46.131610][ T3845] netlink: 'syz.3.145': attribute type 30 has an invalid length. [ 46.993983][ T3873] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 47.001777][ T3873] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.155'. [ 47.022968][ T3869] loop4: detected capacity change from 0 to 512 [ 47.052638][ T3869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.093603][ T3876] IPVS: stopping master sync thread 3882 ... [ 47.101709][ T3882] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 47.120304][ T3869] EXT4-fs (loop4): 1 truncate cleaned up [ 47.137673][ T3869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.394707][ T3890] loop2: detected capacity change from 0 to 512 [ 47.483508][ T3890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.498211][ T3890] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.569244][ T3894] netlink: 56 bytes leftover after parsing attributes in process `syz.3.163'. [ 47.618688][ T3894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.163'. [ 47.714247][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.807409][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.161885][ T3930] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 48.169690][ T3930] netlink: 'syz.0.174': attribute type 4 has an invalid length. [ 48.177378][ T3930] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.174'. [ 48.209384][ T3930] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 48.217148][ T3930] netlink: 'syz.0.174': attribute type 4 has an invalid length. [ 48.224864][ T3930] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.174'. [ 48.242794][ T3933] syzkaller1: entered promiscuous mode [ 48.248396][ T3933] syzkaller1: entered allmulticast mode [ 48.827262][ T3965] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 48.833846][ T3965] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.841543][ T3965] vhci_hcd vhci_hcd.0: Device attached [ 48.874026][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 48.874044][ T29] audit: type=1400 audit(1758234428.650:282): avc: denied { create } for pid=3968 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.902685][ T3970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.929105][ T29] audit: type=1400 audit(1758234428.710:283): avc: denied { write } for pid=3971 comm="syz.3.192" lport=53355 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 48.958161][ T3965] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 48.964793][ T3965] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.972246][ T3965] vhci_hcd vhci_hcd.0: Device attached [ 48.972817][ T29] audit: type=1400 audit(1758234428.710:284): avc: denied { setopt } for pid=3971 comm="syz.3.192" lport=53355 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 49.048600][ T3386] vhci_hcd: vhci_device speed not set [ 49.063589][ T3970] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(7) [ 49.070141][ T3970] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 49.077903][ T3970] vhci_hcd vhci_hcd.0: Device attached [ 49.138120][ T3965] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(10) [ 49.144773][ T3965] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 49.152509][ T3965] vhci_hcd vhci_hcd.0: Device attached [ 49.190394][ T3386] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 49.199421][ T3970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 49.218940][ T3970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 49.246288][ T3965] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 49.253074][ T3965] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.260595][ T3965] vhci_hcd vhci_hcd.0: Device attached [ 49.310992][ T29] audit: type=1400 audit(1758234429.070:285): avc: denied { name_bind } for pid=3987 comm="syz.3.196" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.354735][ T3966] vhci_hcd: connection reset by peer [ 49.356176][ T3979] vhci_hcd: connection closed [ 49.360145][ T3973] vhci_hcd: connection closed [ 49.370707][ T3983] vhci_hcd: connection closed [ 49.381685][ T3977] vhci_hcd: connection closed [ 49.388925][ T37] vhci_hcd: stop threads [ 49.397893][ T37] vhci_hcd: release socket [ 49.402421][ T37] vhci_hcd: disconnect device [ 49.411369][ T37] vhci_hcd: stop threads [ 49.415674][ T37] vhci_hcd: release socket [ 49.420173][ T37] vhci_hcd: disconnect device [ 49.433475][ T37] vhci_hcd: stop threads [ 49.437788][ T37] vhci_hcd: release socket [ 49.442333][ T37] vhci_hcd: disconnect device [ 49.457809][ T37] vhci_hcd: stop threads [ 49.462219][ T37] vhci_hcd: release socket [ 49.466653][ T37] vhci_hcd: disconnect device [ 49.479072][ T37] vhci_hcd: stop threads [ 49.483420][ T37] vhci_hcd: release socket [ 49.487856][ T37] vhci_hcd: disconnect device [ 49.576392][ T29] audit: type=1400 audit(1758234429.350:286): avc: denied { getopt } for pid=3999 comm="syz.2.201" lport=55990 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 49.732879][ T29] audit: type=1400 audit(1758234429.500:287): avc: denied { lock } for pid=4006 comm="syz.0.204" path="socket:[6569]" dev="sockfs" ino=6569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 49.898152][ T29] audit: type=1400 audit(1758234429.670:288): avc: denied { create } for pid=4015 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.945632][ T29] audit: type=1400 audit(1758234429.670:289): avc: denied { write } for pid=4015 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.965072][ T4020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.209'. [ 49.965622][ T29] audit: type=1400 audit(1758234429.670:290): avc: denied { nlmsg_write } for pid=4015 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.302505][ T29] audit: type=1400 audit(1758234430.080:291): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.396866][ T4044] netlink: 36 bytes leftover after parsing attributes in process `syz.4.219'. [ 50.597494][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.663987][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.735601][ T4076] netem: change failed [ 50.744376][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.874492][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.059249][ T12] bridge_slave_1: left allmulticast mode [ 51.065112][ T12] bridge_slave_1: left promiscuous mode [ 51.070894][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.088026][ T12] bridge_slave_0: left allmulticast mode [ 51.093837][ T12] bridge_slave_0: left promiscuous mode [ 51.099639][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.116170][ T4107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.245'. [ 51.223823][ T4121] loop2: detected capacity change from 0 to 764 [ 51.257738][ T4121] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.276932][ T4121] Symlink component flag not implemented [ 51.291436][ T4128] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.249'. [ 51.309925][ T4121] Symlink component flag not implemented (7) [ 51.351258][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.367342][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.378750][ T12] bond0 (unregistering): Released all slaves [ 51.448374][ T12] hsr_slave_0: left promiscuous mode [ 51.454573][ T12] hsr_slave_1: left promiscuous mode [ 51.464010][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.471480][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.484519][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.491980][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.521992][ T12] veth1_macvtap: left promiscuous mode [ 51.534095][ T12] veth0_macvtap: left promiscuous mode [ 51.540185][ T12] veth1_vlan: left promiscuous mode [ 51.547477][ T12] veth0_vlan: left promiscuous mode [ 51.580050][ T4144] loop2: detected capacity change from 0 to 8192 [ 51.607517][ T3816] loop2: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 51.612605][ T3816] loop2: p3 size 33554432 extends beyond EOD, truncated [ 51.790828][ T12] team0 (unregistering): Port device team_slave_1 removed [ 51.815266][ T4163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 51.815682][ T12] team0 (unregistering): Port device team_slave_0 removed [ 52.001936][ T4072] chnl_net:caif_netlink_parms(): no params data found [ 52.122883][ T4072] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.130066][ T4072] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.157211][ T4072] bridge_slave_0: entered allmulticast mode [ 52.165423][ T4072] bridge_slave_0: entered promiscuous mode [ 52.172696][ T4072] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.179837][ T4072] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.187217][ T4072] bridge_slave_1: entered allmulticast mode [ 52.194545][ T4072] bridge_slave_1: entered promiscuous mode [ 52.228121][ T4191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 52.240928][ T4072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.272266][ T4191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 52.273851][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 52.294956][ T4072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.306028][ T4195] syzkaller0: entered allmulticast mode [ 52.348095][ T4195] syzkaller0 (unregistering): left allmulticast mode [ 52.416615][ T4208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 52.427123][ T4072] team0: Port device team_slave_0 added [ 52.441349][ T4072] team0: Port device team_slave_1 added [ 52.480287][ T4214] loop0: detected capacity change from 0 to 512 [ 52.508259][ T4072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.515376][ T4072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.541481][ T4072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.561730][ T4072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.568785][ T4072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.594765][ T4072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.607790][ T4214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.647794][ T4214] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.718425][ T4144] loop2: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 52.730247][ T4144] loop2: p3 size 33554432 extends beyond EOD, truncated [ 52.848843][ T4072] hsr_slave_0: entered promiscuous mode [ 52.859711][ T4072] hsr_slave_1: entered promiscuous mode [ 52.877084][ T4072] debugfs: 'hsr0' already exists in 'hsr' [ 52.883041][ T4072] Cannot create hsr debugfs directory [ 53.043314][ T4245] mmap: syz.3.268 (4245) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.094684][ T4072] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.112544][ T4072] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.137677][ T4072] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.169746][ T4072] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.270974][ T4072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.291281][ T4072] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.304315][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.311525][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.338516][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.345739][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.468476][ T3817] udevd[3817]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 53.469793][ T3816] udevd[3816]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 53.499641][ T3809] udevd[3809]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 53.512208][ T3707] udevd[3707]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 53.523236][ T3817] udevd[3817]: inotify_add_watch(7, /dev/loop2p14, 10) failed: No such file or directory [ 53.538043][ T3820] udevd[3820]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 53.549311][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 53.561566][ T3815] udevd[3815]: inotify_add_watch(7, /dev/loop2p13, 10) failed: No such file or directory [ 53.561594][ T3812] udevd[3812]: inotify_add_watch(7, /dev/loop2p10, 10) failed: No such file or directory [ 53.580598][ T4072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.583156][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 53.606124][ T4269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 53.711923][ T4274] loop4: detected capacity change from 0 to 512 [ 53.759552][ T4274] EXT4-fs (loop4): too many log groups per flexible block group [ 53.767297][ T4274] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 53.793058][ T4274] EXT4-fs (loop4): mount failed [ 53.843805][ T4282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 54.001275][ T3374] kernel write not supported for file /164/loginuid (pid: 3374 comm: kworker/0:2) [ 54.023439][ T4072] veth0_vlan: entered promiscuous mode [ 54.078992][ T4072] veth1_vlan: entered promiscuous mode [ 54.129762][ T4072] veth0_macvtap: entered promiscuous mode [ 54.169446][ T4072] veth1_macvtap: entered promiscuous mode [ 54.220853][ T4072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.228626][ T3386] usb 9-1: enqueue for inactive port 0 [ 54.234182][ T3386] usb 9-1: enqueue for inactive port 0 [ 54.260267][ T4072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.309875][ T3386] vhci_hcd: vhci_device speed not set [ 54.351476][ T4307] netlink: 96 bytes leftover after parsing attributes in process `syz.4.284'. [ 54.363786][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.387120][ T4311] loop3: detected capacity change from 0 to 1024 [ 54.419178][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 54.419193][ T29] audit: type=1400 audit(1758234434.200:362): avc: denied { mount } for pid=4072 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.425443][ T4311] EXT4-fs: Ignoring removed bh option [ 54.425495][ T4311] EXT4-fs: inline encryption not supported [ 54.433687][ T4311] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.477269][ T29] audit: type=1400 audit(1758234434.230:363): avc: denied { mounton } for pid=4072 comm="syz-executor" path="/root/syzkaller.9acWd0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.545407][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.588778][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.597677][ T4320] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 54.604223][ T4320] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.611716][ T4320] vhci_hcd vhci_hcd.0: Device attached [ 54.635538][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.636155][ T4311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 54.653957][ T4320] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.705302][ T4320] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 54.708442][ T4311] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.286: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.711874][ T4320] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.712039][ T4320] vhci_hcd vhci_hcd.0: Device attached [ 54.753336][ T4311] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 54.761797][ T4329] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 54.768472][ T4329] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 54.776180][ T4329] vhci_hcd vhci_hcd.0: Device attached [ 54.786781][ T4311] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.286: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.808594][ T1041] vhci_hcd: vhci_device speed not set [ 54.838853][ T4320] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(9) [ 54.844540][ T4311] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 54.845409][ T4320] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 54.854322][ T4311] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.286: Failed to acquire dquot type 0 [ 54.861809][ T4320] vhci_hcd vhci_hcd.0: Device attached [ 54.883271][ T1041] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 54.913004][ T4319] capability: warning: `syz.4.289' uses deprecated v2 capabilities in a way that may be insecure [ 54.931645][ T4336] loop5: detected capacity change from 0 to 128 [ 54.949937][ T4311] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 54.972437][ T4329] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.983264][ T4336] EXT4-fs: Ignoring removed nobh option [ 54.993340][ T4336] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.007118][ T4311] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.286: mark_inode_dirty error [ 55.020280][ T4336] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.083262][ T4311] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 55.117307][ T4311] EXT4-fs (loop3): 1 orphan inode deleted [ 55.135049][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.150009][ T4320] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 55.175847][ T29] audit: type=1400 audit(1758234434.950:364): avc: denied { bind } for pid=4340 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.204654][ T31] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 55.213221][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 55.231047][ T4320] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 55.237759][ T4320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.245362][ T4320] vhci_hcd vhci_hcd.0: Device attached [ 55.258808][ T4311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.260534][ T4327] vhci_hcd: connection closed [ 55.271343][ T4321] vhci_hcd: connection reset by peer [ 55.271547][ T4330] vhci_hcd: connection closed [ 55.281776][ T4332] vhci_hcd: connection closed [ 55.286517][ T37] vhci_hcd: stop threads [ 55.289231][ T4342] vhci_hcd: connection closed [ 55.291356][ T37] vhci_hcd: release socket [ 55.304787][ T37] vhci_hcd: disconnect device [ 55.306466][ T29] audit: type=1400 audit(1758234435.070:365): avc: denied { write } for pid=4340 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.340555][ T37] vhci_hcd: stop threads [ 55.344859][ T37] vhci_hcd: release socket [ 55.349372][ T37] vhci_hcd: disconnect device [ 55.393427][ T4072] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.395742][ T29] audit: type=1400 audit(1758234435.110:366): avc: denied { setopt } for pid=4340 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.404786][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.432816][ T37] vhci_hcd: stop threads [ 55.437114][ T37] vhci_hcd: release socket [ 55.441664][ T37] vhci_hcd: disconnect device [ 55.458026][ T37] vhci_hcd: stop threads [ 55.462346][ T37] vhci_hcd: release socket [ 55.466828][ T37] vhci_hcd: disconnect device [ 55.479323][ T37] vhci_hcd: stop threads [ 55.483661][ T37] vhci_hcd: release socket [ 55.488114][ T37] vhci_hcd: disconnect device [ 55.490605][ T4311] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm syz.3.286: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.511002][ T29] audit: type=1326 audit(1758234435.290:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4346 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 55.534950][ T29] audit: type=1326 audit(1758234435.290:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4346 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 55.566169][ T4347] loop5: detected capacity change from 0 to 512 [ 55.574055][ T4347] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 55.586829][ T4347] EXT4-fs (loop5): orphan cleanup on readonly fs [ 55.600517][ T4347] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.294: Block bitmap for bg 0 marked uninitialized [ 55.626066][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.640075][ T3313] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 55.654715][ T4347] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 55.664117][ T3313] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 55.710338][ T3313] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 55.725981][ T4347] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.294: Block bitmap for bg 0 marked uninitialized [ 55.759346][ T4347] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 55.785851][ T4347] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.294: Block bitmap for bg 0 marked uninitialized [ 55.821436][ T4347] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 55.834059][ T4347] EXT4-fs (loop5): 1 orphan inode deleted [ 55.852850][ T4347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.900366][ T4072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.984515][ T4418] program syz.5.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.998990][ T4418] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 56.094393][ T4425] netlink: 'syz.5.301': attribute type 4 has an invalid length. [ 56.120479][ T4425] netlink: 'syz.5.301': attribute type 4 has an invalid length. [ 56.375907][ T4448] loop4: detected capacity change from 0 to 512 [ 56.396720][ T4448] EXT4-fs: Ignoring removed oldalloc option [ 56.424447][ T4448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.446027][ T4448] EXT4-fs (loop4): 1 truncate cleaned up [ 56.455162][ T4454] loop2: detected capacity change from 0 to 1024 [ 56.471362][ T4448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.509726][ T4454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.585768][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.688113][ T4471] loop5: detected capacity change from 0 to 1024 [ 56.737480][ T4471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.809940][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.850366][ T4072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.118052][ T4509] loop3: detected capacity change from 0 to 128 [ 57.181555][ T4511] atomic_op ffff888125bd5928 conn xmit_atomic 0000000000000000 [ 57.201360][ T3414] Process accounting resumed [ 57.206083][ T3414] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 57.213598][ T3414] FAT-fs (loop3): Filesystem has been set read-only [ 57.584290][ T4535] loop0: detected capacity change from 0 to 2048 [ 57.666342][ T4535] EXT4-fs (loop0): failed to initialize system zone (-117) [ 57.721770][ T4535] EXT4-fs (loop0): mount failed [ 58.028044][ T4565] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 58.126180][ T4574] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 58.212307][ T4580] syzkaller0: entered allmulticast mode [ 58.227471][ T4580] syzkaller0 (unregistering): left allmulticast mode [ 58.705204][ T4621] loop4: detected capacity change from 0 to 128 [ 59.100035][ T4638] __nla_validate_parse: 2 callbacks suppressed [ 59.100053][ T4638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.383'. [ 59.139572][ T4638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.383'. [ 59.566049][ T4656] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.597439][ T4661] netlink: 360 bytes leftover after parsing attributes in process `syz.4.392'. [ 59.677519][ T4656] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.695664][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 59.695682][ T29] audit: type=1400 audit(1758234439.470:559): avc: denied { bind } for pid=4662 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.703459][ T4526] syz.0.334 (4526) used greatest stack depth: 6120 bytes left [ 59.746535][ T4665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.394'. [ 59.854708][ T4656] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.911162][ T1041] usb 5-1: enqueue for inactive port 0 [ 59.920090][ T1041] usb 5-1: enqueue for inactive port 0 [ 59.939435][ T4682] serio: Serial port ptm0 [ 60.012191][ T1041] vhci_hcd: vhci_device speed not set [ 60.046014][ T29] audit: type=1400 audit(1758234439.820:560): avc: denied { mount } for pid=4687 comm="syz.0.404" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.193088][ T4656] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.373893][ T29] audit: type=1326 audit(1758234440.150:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a137eba9 code=0x7ffc0000 [ 60.397271][ T29] audit: type=1326 audit(1758234440.150:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a137eba9 code=0x7ffc0000 [ 60.422482][ T29] audit: type=1326 audit(1758234440.200:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6a137eba9 code=0x7ffc0000 [ 60.445812][ T29] audit: type=1326 audit(1758234440.200:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a137eba9 code=0x7ffc0000 [ 60.469091][ T29] audit: type=1326 audit(1758234440.200:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a137eba9 code=0x7ffc0000 [ 60.498737][ T4386] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.520801][ T29] audit: type=1326 audit(1758234440.270:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fa6a137eba9 code=0x7ffc0000 [ 60.535106][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.544158][ T29] audit: type=1326 audit(1758234440.270:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a137eba9 code=0x7ffc0000 [ 60.575534][ T29] audit: type=1326 audit(1758234440.270:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.2.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a137eba9 code=0x7ffc0000 [ 60.577979][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.636329][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.140125][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.430'. [ 61.158133][ T4747] netlink: 32 bytes leftover after parsing attributes in process `syz.5.430'. [ 61.205797][ T4749] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 61.373783][ T4756] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 61.417500][ T4756] SELinux: failed to load policy [ 61.476326][ T4761] netlink: 96 bytes leftover after parsing attributes in process `syz.3.436'. [ 61.513203][ T4767] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 61.891415][ T4809] loop2: detected capacity change from 0 to 512 [ 61.929047][ T4809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.941868][ T4809] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.958774][ T4815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.459'. [ 62.057948][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.237017][ T4833] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.365507][ T4833] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.465605][ T4833] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.560168][ T4833] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.747152][ T4359] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.869975][ T4862] vhci_hcd: invalid port number 255 [ 62.875414][ T4862] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 62.919721][ T4386] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.000848][ T4359] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.062237][ T4359] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.343188][ T4917] netlink: 256 bytes leftover after parsing attributes in process `syz.2.503'. [ 63.402314][ T4927] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 63.410156][ T4927] netlink: 198116 bytes leftover after parsing attributes in process `syz.3.507'. [ 63.613480][ T4948] loop2: detected capacity change from 0 to 8192 [ 63.638170][ T3312] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 63.646084][ T3312] FAT-fs (loop2): Filesystem has been set read-only [ 64.195114][ T4999] __nla_validate_parse: 1 callbacks suppressed [ 64.195129][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 64.272373][ T5003] netlink: 96 bytes leftover after parsing attributes in process `syz.3.542'. [ 64.530474][ T4997] Set syz1 is full, maxelem 65536 reached [ 64.718865][ T5042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 64.792586][ T5053] netlink: 'syz.4.556': attribute type 12 has an invalid length. [ 64.814630][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 64.814647][ T29] audit: type=1400 audit(1758234444.590:788): avc: denied { bind } for pid=5054 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.859024][ T5064] netlink: 'syz.4.556': attribute type 12 has an invalid length. [ 64.882039][ T29] audit: type=1400 audit(1758234444.620:789): avc: denied { listen } for pid=5054 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.985835][ T5076] ref_ctr increment failed for inode: 0x29e offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881042aed40 [ 65.006144][ T5075] uprobe: syz.3.561:5075 failed to unregister, leaking uprobe [ 65.037140][ T29] audit: type=1400 audit(1758234444.810:790): avc: denied { setopt } for pid=5078 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.847356][ T29] audit: type=1400 audit(1758234445.620:791): avc: denied { write } for pid=5096 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.107692][ T5115] serio: Serial port ptm0 [ 66.135935][ T5120] netlink: 'syz.0.578': attribute type 4 has an invalid length. [ 66.135979][ T29] audit: type=1326 audit(1758234445.910:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd57feba9 code=0x7ffc0000 [ 66.179528][ T5120] netlink: 'syz.0.578': attribute type 4 has an invalid length. [ 66.179535][ T29] audit: type=1326 audit(1758234445.950:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad12f85b67 code=0x7fc00000 [ 66.210453][ T29] audit: type=1326 audit(1758234445.950:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad12f2ada9 code=0x7fc00000 [ 66.233890][ T29] audit: type=1326 audit(1758234445.950:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fad12f2ae6f code=0x7fc00000 [ 66.257355][ T29] audit: type=1326 audit(1758234445.950:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad12f8eba9 code=0x7fc00000 [ 66.280670][ T29] audit: type=1326 audit(1758234445.950:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5086 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad12f8eba9 code=0x7fc00000 [ 66.457244][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 66.460151][ T5149] netlink: 'syz.4.589': attribute type 3 has an invalid length. [ 66.688112][ T5169] netlink: 'syz.3.598': attribute type 10 has an invalid length. [ 66.697847][ T5169] team0: Device dummy0 is up. Set it down before adding it as a team port [ 66.933631][ T5179] loop0: detected capacity change from 0 to 8192 [ 67.001222][ T5192] pimreg: entered allmulticast mode [ 67.010685][ T5192] pimreg: left allmulticast mode [ 67.117054][ T5206] loop0: detected capacity change from 0 to 164 [ 67.371290][ T5232] bridge_slave_0: left allmulticast mode [ 67.376985][ T5232] bridge_slave_0: left promiscuous mode [ 67.382776][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.427690][ T5232] bridge_slave_1: left allmulticast mode [ 67.433583][ T5232] bridge_slave_1: left promiscuous mode [ 67.439283][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.549572][ T5232] bond0: (slave bond_slave_0): Releasing backup interface [ 67.568328][ T5254] netlink: 'syz.5.636': attribute type 10 has an invalid length. [ 67.576378][ T5254] netlink: 40 bytes leftover after parsing attributes in process `syz.5.636'. [ 67.606319][ T5232] bond0: (slave bond_slave_1): Releasing backup interface [ 67.625838][ T5232] team0: Port device team_slave_0 removed [ 67.643534][ T5232] team0: Port device team_slave_1 removed [ 67.682228][ T5232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.689753][ T5232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.711708][ T5232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.719193][ T5232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.882517][ T5254] dummy0: entered promiscuous mode [ 67.888412][ T5254] bridge0: port 3(dummy0) entered blocking state [ 67.894964][ T5254] bridge0: port 3(dummy0) entered disabled state [ 67.910040][ T5254] dummy0: entered allmulticast mode [ 67.916262][ T5254] bridge0: port 3(dummy0) entered blocking state [ 67.922770][ T5254] bridge0: port 3(dummy0) entered forwarding state [ 68.056218][ T5279] loop2: detected capacity change from 0 to 512 [ 68.451709][ T5305] SELinux: ebitmap: truncated map [ 68.461669][ T5305] SELinux: failed to load policy [ 69.106233][ T5243] loop4: detected capacity change from 0 to 2048 [ 69.212696][ T5243] EXT4-fs (loop4): failed to initialize system zone (-117) [ 69.229836][ T5243] EXT4-fs (loop4): mount failed [ 69.486578][ T5351] loop5: detected capacity change from 0 to 1024 [ 69.493367][ T5352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 69.521605][ T5351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.534620][ T5351] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.632475][ T4072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.710704][ T5367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.679'. [ 69.773518][ T5376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.683'. [ 69.790409][ T5376] netem: change failed [ 69.845768][ T5381] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.685'. [ 70.272487][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 70.272500][ T29] audit: type=1326 audit(1758234450.050:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 70.302380][ T29] audit: type=1326 audit(1758234450.050:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 70.325760][ T29] audit: type=1326 audit(1758234450.050:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 70.348981][ T29] audit: type=1326 audit(1758234450.050:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 70.372375][ T29] audit: type=1326 audit(1758234450.050:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 70.395625][ T29] audit: type=1326 audit(1758234450.050:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 70.419326][ T29] audit: type=1326 audit(1758234450.050:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 70.442622][ T29] audit: type=1326 audit(1758234450.050:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 70.465983][ T29] audit: type=1326 audit(1758234450.060:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.5.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd64718eba9 code=0x7ffc0000 [ 70.491435][ T5421] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 70.592158][ T5434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.704'. [ 70.601350][ T5434] netlink: 24 bytes leftover after parsing attributes in process `syz.5.704'. [ 70.720481][ T5438] pim6reg: entered allmulticast mode [ 70.730202][ T5438] pim6reg: left allmulticast mode [ 70.869195][ T29] audit: type=1326 audit(1758234450.640:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd57feba9 code=0x7ffc0000 [ 70.930348][ T5464] loop0: detected capacity change from 0 to 512 [ 71.223635][ T5485] netlink: zone id is out of range [ 71.230475][ T5485] netlink: zone id is out of range [ 71.235796][ T5485] netlink: zone id is out of range [ 71.241085][ T5485] netlink: zone id is out of range [ 71.254052][ T5485] netlink: zone id is out of range [ 71.261483][ T5485] netlink: zone id is out of range [ 71.267178][ T5485] netlink: zone id is out of range [ 71.272741][ T5485] netlink: zone id is out of range [ 71.278025][ T5485] netlink: zone id is out of range [ 71.283658][ T5485] netlink: zone id is out of range [ 71.296828][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 71.303054][ T10] IPVS: starting estimator thread 0... [ 71.314342][ T5487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.722'. [ 71.352896][ T5496] netlink: 'syz.0.725': attribute type 21 has an invalid length. [ 71.400759][ T5492] IPVS: using max 2448 ests per chain, 122400 per kthread [ 71.476904][ T5512] loop4: detected capacity change from 0 to 512 [ 71.526203][ T5518] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 71.552275][ T5518] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.575539][ T5518] bond0: (slave team0): Enslaving as an active interface with an up link [ 71.797930][ T5535] loop5: detected capacity change from 0 to 1024 [ 71.809633][ T5537] netlink: 'syz.0.743': attribute type 10 has an invalid length. [ 71.817401][ T5537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.743'. [ 71.843343][ T5537] dummy0: entered promiscuous mode [ 71.849936][ T5537] bridge0: port 3(dummy0) entered blocking state [ 71.856480][ T5537] bridge0: port 3(dummy0) entered disabled state [ 71.873496][ T5535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.895972][ T5537] dummy0: entered allmulticast mode [ 71.902973][ T5535] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.950703][ T5535] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 71.984380][ T5552] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.984762][ T4072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.069777][ T5558] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.091669][ T5564] netlink: 104 bytes leftover after parsing attributes in process `syz.2.754'. [ 72.120689][ T5558] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.135614][ T5566] netlink: 'syz.2.755': attribute type 12 has an invalid length. [ 72.190469][ T5558] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.202334][ T5571] netlink: 'syz.2.755': attribute type 12 has an invalid length. [ 72.230869][ T5558] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.241372][ T5570] loop0: detected capacity change from 0 to 8192 [ 72.330815][ T3816] loop0: p1 p2 p3 p4 [ 72.336272][ T3816] loop0: p2 start 151000334 is beyond EOD, truncated [ 72.343042][ T3816] loop0: p3 start 331777 is beyond EOD, truncated [ 72.349528][ T3816] loop0: p4 size 263168 extends beyond EOD, truncated [ 72.361377][ T5570] loop0: p1 p2 p3 p4 [ 72.366243][ T5570] loop0: p2 start 151000334 is beyond EOD, truncated [ 72.366379][ T4409] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.373052][ T5570] loop0: p3 start 331777 is beyond EOD, truncated [ 72.387724][ T5570] loop0: p4 size 263168 extends beyond EOD, truncated [ 72.404815][ T4368] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.423716][ T4368] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.440997][ T4368] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.549941][ T5575] batadv1: entered promiscuous mode [ 72.555206][ T5575] batadv1: entered allmulticast mode [ 72.636730][ T3817] udevd[3817]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 72.648933][ T3816] udevd[3816]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 72.649510][ T5579] loop0: detected capacity change from 0 to 1024 [ 72.683235][ T5579] EXT4-fs: Ignoring removed orlov option [ 72.703312][ T5579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.917332][ T5593] loop5: detected capacity change from 0 to 1024 [ 72.942940][ T5593] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.000313][ T5593] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 73.025713][ T5593] EXT4-fs (loop5): orphan cleanup on readonly fs [ 73.053040][ T5593] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 73.067602][ T5593] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 73.087864][ T5593] EXT4-fs (loop5): 1 truncate cleaned up [ 73.139870][ T5593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.154818][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.197601][ T4072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.262401][ T5616] loop5: detected capacity change from 0 to 256 [ 73.473902][ T5631] bridge0: entered allmulticast mode [ 73.523555][ T5633] loop4: detected capacity change from 0 to 512 [ 73.536381][ T5633] EXT4-fs (loop4): failed to initialize system zone (-117) [ 73.551388][ T3658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3658 comm=kworker/1:4 [ 73.564763][ T5639] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 73.595901][ T5633] EXT4-fs (loop4): mount failed [ 73.681322][ T5653] tmpfs: Unsupported parameter 'huge' [ 73.821321][ T5664] pim6reg: entered allmulticast mode [ 73.844504][ T5664] pim6reg: left allmulticast mode [ 73.906107][ T5672] syzkaller1: entered promiscuous mode [ 73.911670][ T5672] syzkaller1: entered allmulticast mode [ 74.041903][ T5680] bond1: entered promiscuous mode [ 74.047079][ T5680] bond1: entered allmulticast mode [ 74.052988][ T5680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.066407][ T5680] bond1 (unregistering): Released all slaves [ 74.115344][ T5687] loop2: detected capacity change from 0 to 256 [ 74.421776][ T5717] vxlan0: entered promiscuous mode [ 74.428432][ T4358] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.447068][ T4358] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.458290][ T4358] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.474108][ T4358] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.645184][ T5731] loop2: detected capacity change from 0 to 8192 [ 74.670865][ T5741] __nla_validate_parse: 5 callbacks suppressed [ 74.670881][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 74.686012][ T5741] netlink: 'syz.0.832': attribute type 11 has an invalid length. [ 74.691554][ T5731] loop2: p1 p2 p3 p4 [ 74.694090][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 74.706735][ T5741] netlink: 'syz.0.832': attribute type 11 has an invalid length. [ 74.710618][ T5731] loop2: p2 start 151000334 is beyond EOD, truncated [ 74.721226][ T5731] loop2: p3 start 331777 is beyond EOD, truncated [ 74.727689][ T5731] loop2: p4 size 263168 extends beyond EOD, truncated [ 74.752061][ T2994] ================================================================== [ 74.760195][ T2994] BUG: KCSAN: data-race in dont_mount / step_into [ 74.766633][ T2994] [ 74.768969][ T2994] read-write to 0xffff888119de8cc0 of 4 bytes by task 3817 on cpu 1: [ 74.777050][ T2994] dont_mount+0x2a/0x40 [ 74.781233][ T2994] vfs_unlink+0x28f/0x420 [ 74.785577][ T2994] do_unlinkat+0x24e/0x480 [ 74.790002][ T2994] __x64_sys_unlink+0x2e/0x40 [ 74.794692][ T2994] x64_sys_call+0x2dc0/0x2ff0 [ 74.799377][ T2994] do_syscall_64+0xd2/0x200 [ 74.803899][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.809799][ T2994] [ 74.812133][ T2994] read to 0xffff888119de8cc0 of 4 bytes by task 2994 on cpu 0: [ 74.819682][ T2994] step_into+0x12f/0x820 [ 74.823937][ T2994] walk_component+0x162/0x220 [ 74.828637][ T2994] path_lookupat+0xfe/0x2a0 [ 74.833160][ T2994] filename_lookup+0x147/0x340 [ 74.837943][ T2994] do_readlinkat+0x7d/0x320 [ 74.842533][ T2994] __x64_sys_readlink+0x47/0x60 [ 74.847391][ T2994] x64_sys_call+0x28da/0x2ff0 [ 74.852071][ T2994] do_syscall_64+0xd2/0x200 [ 74.856592][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.862504][ T2994] [ 74.864836][ T2994] value changed: 0x00300080 -> 0x00004080 [ 74.870557][ T2994] [ 74.872903][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 74.879073][ T2994] CPU: 0 UID: 0 PID: 2994 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.888370][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 74.898435][ T2994] ================================================================== [ 75.019063][ T3816] udevd[3816]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory