last executing test programs: 1.53859115s ago: executing program 3 (id=839): open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.441708992s ago: executing program 3 (id=845): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.441381362s ago: executing program 4 (id=846): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb, 0x0, 0x7ffc1feb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.387100223s ago: executing program 4 (id=847): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x20000000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.307633935s ago: executing program 3 (id=855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.290892965s ago: executing program 3 (id=857): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) write$cgroup_subtree(r2, 0x0, 0xfe7d) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 1.200749547s ago: executing program 4 (id=859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122b00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3987050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 1.199879587s ago: executing program 4 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x5, 0x4) getdents(r2, 0x0, 0x0) 1.099506829s ago: executing program 2 (id=863): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)=r2}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') 1.078287279s ago: executing program 2 (id=864): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 976.724551ms ago: executing program 2 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001c000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) 971.588431ms ago: executing program 2 (id=866): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000440)={[{@mb_optimize_scan}, {@discard}, {@barrier}, {@noauto_da_alloc}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0xfb, 0x59e, &(0x7f0000001480)="$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") setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) 891.705323ms ago: executing program 4 (id=867): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1000000000000}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 836.567134ms ago: executing program 2 (id=869): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYRES64=r0, @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 812.714304ms ago: executing program 4 (id=870): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}, 0xa499}], 0x1, 0x10000, 0x0) 754.421445ms ago: executing program 2 (id=871): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 659.504058ms ago: executing program 0 (id=872): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = memfd_secret(0x0) ftruncate(r1, 0x51a9497) finit_module(r1, 0x0, 0x3) 514.50313ms ago: executing program 0 (id=873): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 513.93625ms ago: executing program 0 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 438.283952ms ago: executing program 0 (id=877): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}], 0x38) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x20002, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 437.872372ms ago: executing program 3 (id=878): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ftruncate(r0, 0x5) 159.367257ms ago: executing program 0 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000009}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 112.595728ms ago: executing program 1 (id=882): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 112.080708ms ago: executing program 1 (id=883): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) fallocate(r1, 0x20, 0x2000, 0x8000) 93.996188ms ago: executing program 0 (id=884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000300)={[{@resuid}, {@dioread_nolock}, {@noblock_validity}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000009c0)=';', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) 85.618528ms ago: executing program 1 (id=885): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 66.810588ms ago: executing program 1 (id=886): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 700.23µs ago: executing program 1 (id=887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) 378.57µs ago: executing program 1 (id=888): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18011}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x101}]}}]}, 0x54}}, 0x0) 0s ago: executing program 3 (id=889): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) kernel console output (not intermixed with test programs): =process permissive=1 [ 20.268798][ T29] audit: type=1400 audit(1757886635.015:61): avc: denied { siginh } for pid=3179 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 28.393386][ T29] audit: type=1400 audit(1757886643.235:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.394582][ T3289] cgroup: Unknown subsys name 'net' [ 28.416235][ T29] audit: type=1400 audit(1757886643.235:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.443617][ T29] audit: type=1400 audit(1757886643.255:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.564076][ T3289] cgroup: Unknown subsys name 'cpuset' [ 28.570426][ T3289] cgroup: Unknown subsys name 'rlimit' [ 28.681530][ T29] audit: type=1400 audit(1757886643.515:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.704945][ T29] audit: type=1400 audit(1757886643.515:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.725408][ T29] audit: type=1400 audit(1757886643.515:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.745913][ T29] audit: type=1400 audit(1757886643.515:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.766347][ T29] audit: type=1400 audit(1757886643.525:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.775838][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.791235][ T29] audit: type=1400 audit(1757886643.525:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.823116][ T29] audit: type=1400 audit(1757886643.635:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.860748][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.978280][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 30.090742][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 30.122241][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.129414][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.136745][ T3306] bridge_slave_0: entered allmulticast mode [ 30.143648][ T3306] bridge_slave_0: entered promiscuous mode [ 30.154936][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.176958][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.184100][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.191436][ T3306] bridge_slave_1: entered allmulticast mode [ 30.198226][ T3306] bridge_slave_1: entered promiscuous mode [ 30.206897][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 30.250801][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.273056][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.290765][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.297948][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.305365][ T3308] bridge_slave_0: entered allmulticast mode [ 30.311760][ T3308] bridge_slave_0: entered promiscuous mode [ 30.318455][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.325576][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.332761][ T3308] bridge_slave_1: entered allmulticast mode [ 30.339176][ T3308] bridge_slave_1: entered promiscuous mode [ 30.378052][ T3306] team0: Port device team_slave_0 added [ 30.390418][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 30.405439][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.412513][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.419669][ T3312] bridge_slave_0: entered allmulticast mode [ 30.426195][ T3312] bridge_slave_0: entered promiscuous mode [ 30.432761][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.439845][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.447000][ T3312] bridge_slave_1: entered allmulticast mode [ 30.453669][ T3312] bridge_slave_1: entered promiscuous mode [ 30.460485][ T3306] team0: Port device team_slave_1 added [ 30.477229][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.507746][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.524798][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.538653][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.545780][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.552896][ T3301] bridge_slave_0: entered allmulticast mode [ 30.559260][ T3301] bridge_slave_0: entered promiscuous mode [ 30.573413][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.582767][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.589752][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.615662][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.626429][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.633565][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.640759][ T3301] bridge_slave_1: entered allmulticast mode [ 30.647359][ T3301] bridge_slave_1: entered promiscuous mode [ 30.665668][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.672687][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.698651][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.718147][ T3308] team0: Port device team_slave_0 added [ 30.724812][ T3308] team0: Port device team_slave_1 added [ 30.741124][ T3312] team0: Port device team_slave_0 added [ 30.748197][ T3312] team0: Port device team_slave_1 added [ 30.776113][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.790187][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.797189][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.823124][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.833990][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.841045][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.848234][ T3303] bridge_slave_0: entered allmulticast mode [ 30.854911][ T3303] bridge_slave_0: entered promiscuous mode [ 30.876711][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.886307][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.893278][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.919226][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.930231][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.937330][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.945725][ T3303] bridge_slave_1: entered allmulticast mode [ 30.952043][ T3303] bridge_slave_1: entered promiscuous mode [ 30.958894][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.965874][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.991826][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.004960][ T3306] hsr_slave_0: entered promiscuous mode [ 31.010851][ T3306] hsr_slave_1: entered promiscuous mode [ 31.029186][ T3301] team0: Port device team_slave_0 added [ 31.039558][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.046634][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.072524][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.089864][ T3301] team0: Port device team_slave_1 added [ 31.105057][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.132633][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.139686][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.165657][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.177841][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.205140][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.212108][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.238146][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.276231][ T3308] hsr_slave_0: entered promiscuous mode [ 31.282379][ T3308] hsr_slave_1: entered promiscuous mode [ 31.289412][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 31.295214][ T3308] Cannot create hsr debugfs directory [ 31.305334][ T3312] hsr_slave_0: entered promiscuous mode [ 31.311318][ T3312] hsr_slave_1: entered promiscuous mode [ 31.317237][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 31.322965][ T3312] Cannot create hsr debugfs directory [ 31.329789][ T3303] team0: Port device team_slave_0 added [ 31.336658][ T3303] team0: Port device team_slave_1 added [ 31.389742][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.396753][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.422688][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.434061][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.441011][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.467102][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.489200][ T3301] hsr_slave_0: entered promiscuous mode [ 31.495375][ T3301] hsr_slave_1: entered promiscuous mode [ 31.501313][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 31.507066][ T3301] Cannot create hsr debugfs directory [ 31.562914][ T3303] hsr_slave_0: entered promiscuous mode [ 31.568973][ T3303] hsr_slave_1: entered promiscuous mode [ 31.574998][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.580726][ T3303] Cannot create hsr debugfs directory [ 31.686405][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.708901][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.719990][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.729060][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.759013][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.772908][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.781722][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.792975][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.817834][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.834104][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.853889][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.872730][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.881422][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.890359][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.912521][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.921641][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.939965][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.953647][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.967133][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.976621][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.999558][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.025846][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.059557][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.066658][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.088011][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.095107][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.111417][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.140991][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.150338][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.159114][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.177365][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.187081][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.198796][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.209294][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.216404][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.226349][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.241471][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.248591][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.258972][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.266115][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.275415][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.282484][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.293186][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.300274][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.327582][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.337990][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.356011][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.363259][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.372680][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.379779][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.389820][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.396894][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.451953][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.476347][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.486036][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.512265][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.557116][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.621267][ T3306] veth0_vlan: entered promiscuous mode [ 32.635358][ T3306] veth1_vlan: entered promiscuous mode [ 32.655904][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.669343][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.691836][ T3306] veth0_macvtap: entered promiscuous mode [ 32.714089][ T3306] veth1_macvtap: entered promiscuous mode [ 32.754894][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.774990][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.798616][ T3312] veth0_vlan: entered promiscuous mode [ 32.806773][ T2904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.824951][ T3308] veth0_vlan: entered promiscuous mode [ 32.833832][ T3312] veth1_vlan: entered promiscuous mode [ 32.841249][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.851394][ T3308] veth1_vlan: entered promiscuous mode [ 32.866068][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.875094][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.890182][ T3301] veth0_vlan: entered promiscuous mode [ 32.907706][ T3308] veth0_macvtap: entered promiscuous mode [ 32.914599][ T3301] veth1_vlan: entered promiscuous mode [ 32.921421][ T3308] veth1_macvtap: entered promiscuous mode [ 32.947817][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.957397][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.965400][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.979714][ T3301] veth0_macvtap: entered promiscuous mode [ 32.990670][ T3312] veth0_macvtap: entered promiscuous mode [ 33.020926][ T3301] veth1_macvtap: entered promiscuous mode [ 33.037798][ T3312] veth1_macvtap: entered promiscuous mode [ 33.049344][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.056871][ T2904] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.076162][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.087152][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.101913][ T2904] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.131728][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.139112][ T2904] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.160301][ T2904] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.191103][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.212489][ T3477] vxcan1: entered allmulticast mode [ 33.218262][ T3303] veth0_vlan: entered promiscuous mode [ 33.232348][ T3303] veth1_vlan: entered promiscuous mode [ 33.250251][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.263793][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.276806][ T3477] vxcan1: left allmulticast mode [ 33.300124][ T3303] veth0_macvtap: entered promiscuous mode [ 33.319214][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.338342][ T3303] veth1_macvtap: entered promiscuous mode [ 33.360724][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.380558][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.405989][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.416826][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.424427][ T3441] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.436685][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 33.436707][ T29] audit: type=1400 audit(1757886648.275:125): avc: denied { create } for pid=3492 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.465451][ C1] hrtimer: interrupt took 68783 ns [ 33.477188][ T3441] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.480886][ T29] audit: type=1400 audit(1757886648.305:126): avc: denied { open } for pid=3490 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.504924][ T29] audit: type=1400 audit(1757886648.305:127): avc: denied { kernel } for pid=3490 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.524161][ T29] audit: type=1400 audit(1757886648.305:128): avc: denied { write } for pid=3492 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.544341][ T29] audit: type=1400 audit(1757886648.305:129): avc: denied { read } for pid=3492 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.553759][ T3495] loop2: detected capacity change from 0 to 512 [ 33.569180][ T29] audit: type=1400 audit(1757886648.405:130): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.596721][ T3493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.610125][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.627774][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 33.637624][ T29] audit: type=1400 audit(1757886648.465:131): avc: denied { create } for pid=3499 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.656904][ T29] audit: type=1400 audit(1757886648.465:132): avc: denied { ioctl } for pid=3499 comm="syz.3.13" path="socket:[4709]" dev="sockfs" ino=4709 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.681129][ T29] audit: type=1400 audit(1757886648.465:133): avc: denied { bind } for pid=3499 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.700130][ T29] audit: type=1400 audit(1757886648.465:134): avc: denied { setopt } for pid=3499 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.720036][ T3441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.738831][ T3441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.755353][ T3493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.776331][ T3441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.795756][ T3441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.811714][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.853005][ T3504] loop2: detected capacity change from 0 to 256 [ 33.875885][ T3504] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.902760][ T3507] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 33.914425][ T3504] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.196189][ T3538] sd 0:0:1:0: device reset [ 34.279849][ T3542] loop4: detected capacity change from 0 to 4096 [ 34.291861][ T3542] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.326925][ T3542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.347470][ T3551] loop0: detected capacity change from 0 to 1024 [ 34.354612][ T3551] ======================================================= [ 34.354612][ T3551] WARNING: The mand mount option has been deprecated and [ 34.354612][ T3551] and is ignored by this kernel. Remove the mand [ 34.354612][ T3551] option from the mount to silence this warning. [ 34.354612][ T3551] ======================================================= [ 34.406570][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.426824][ T3493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.438366][ T3551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.464327][ T3551] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.517981][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.822322][ T3594] unsupported nla_type 52263 [ 35.109078][ T3608] SELinux: failed to load policy [ 35.122222][ T3610] geneve0: entered allmulticast mode [ 35.146148][ T3610] geneve0: entered promiscuous mode [ 35.255372][ T3609] geneve0: left promiscuous mode [ 35.260473][ T3609] geneve0: left allmulticast mode [ 35.367021][ T2993] udevd[2993]: worker [3295] terminated by signal 33 (Unknown signal 33) [ 35.376151][ T2993] udevd[2993]: worker [3295] failed while handling '/devices/virtual/block/loop2' [ 35.389147][ T3632] netlink: 'syz.2.57': attribute type 12 has an invalid length. [ 35.453940][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.683118][ T3493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.759344][ T3636] Set syz1 is full, maxelem 65536 reached [ 35.795658][ T3636] syz.2.59 (3636) used greatest stack depth: 10856 bytes left [ 35.932364][ T3657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 36.036312][ T3663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 36.117994][ T3676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 36.298797][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.334532][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.392169][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.450017][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.559749][ T3696] loop3: detected capacity change from 0 to 2048 [ 36.581862][ T3702] process 'syz.0.87' launched '/dev/fd/5' with NULL argv: empty string added [ 36.617117][ T3696] ext4: Unknown parameter 'measure' [ 36.659221][ T3696] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 36.861526][ T3719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 36.870520][ T3719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.91'. [ 36.879391][ T3719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 36.963502][ T3719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.91'. [ 36.972359][ T3719] netlink: 'syz.4.91': attribute type 6 has an invalid length. [ 37.201114][ T3684] serio: Serial port ptm0 [ 37.477448][ T3751] smc: net device bond0 applied user defined pnetid SYZ0 [ 37.488866][ T3751] smc: net device bond0 erased user defined pnetid SYZ0 [ 37.712187][ T3776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'. [ 37.729569][ T3776] netem: change failed [ 37.907093][ T3795] syzkaller0: entered allmulticast mode [ 37.919818][ T3795] syzkaller0 (unregistering): left allmulticast mode [ 38.042966][ T3803] sctp: [Deprecated]: syz.0.124 (pid 3803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 38.042966][ T3803] Use struct sctp_sack_info instead [ 38.151807][ T3809] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.226683][ T3809] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.288907][ T3809] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.378720][ T3809] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.483558][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.513485][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.533253][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.558904][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.653402][ T3838] __nla_validate_parse: 2 callbacks suppressed [ 38.653422][ T3838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'. [ 38.689630][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 38.689644][ T29] audit: type=1400 audit(1757886653.525:304): avc: denied { create } for pid=3846 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.690267][ T3848] bridge0: port 3(batadv1) entered blocking state [ 38.721605][ T3848] bridge0: port 3(batadv1) entered disabled state [ 38.730312][ T29] audit: type=1400 audit(1757886653.555:305): avc: denied { setopt } for pid=3846 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.753845][ T3848] batadv1: entered allmulticast mode [ 38.779207][ T3848] batadv1: entered promiscuous mode [ 38.887295][ T3861] loop3: detected capacity change from 0 to 512 [ 38.904466][ T29] audit: type=1400 audit(1757886653.735:306): avc: denied { name_connect } for pid=3862 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 38.935258][ T3861] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.948560][ T3861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.990823][ T3861] EXT4-fs (loop3): 1 orphan inode deleted [ 38.996662][ T3861] EXT4-fs (loop3): 1 truncate cleaned up [ 39.008233][ T3871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 39.024242][ T3861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.063686][ T3861] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.3.138: path /24/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 39.087526][ T3861] EXT4-fs (loop3): Remounting filesystem read-only [ 39.149283][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.196529][ T2904] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 39.205944][ T2904] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 39.242833][ T3877] netlink: 'syz.3.144': attribute type 10 has an invalid length. [ 39.250922][ T3877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.144'. [ 39.276140][ T3877] dummy0: entered promiscuous mode [ 39.351497][ T3881] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 39.359566][ T3881] netlink: 'syz.1.146': attribute type 9 has an invalid length. [ 39.367431][ T3881] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.146'. [ 39.531466][ T3871] Set syz1 is full, maxelem 65536 reached [ 39.553555][ T29] audit: type=1326 audit(1757886654.385:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4521d5eba9 code=0x7ffc0000 [ 39.576974][ T29] audit: type=1326 audit(1757886654.385:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4521d5eba9 code=0x7ffc0000 [ 39.600212][ T29] audit: type=1326 audit(1757886654.385:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4521d5eba9 code=0x7ffc0000 [ 39.623474][ T29] audit: type=1400 audit(1757886654.385:310): avc: denied { kexec_image_load } for pid=3889 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 39.623858][ T3891] loop3: detected capacity change from 0 to 512 [ 39.643349][ T29] audit: type=1326 audit(1757886654.385:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4521d5eba9 code=0x7ffc0000 [ 39.672871][ T29] audit: type=1326 audit(1757886654.385:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4521d5eba9 code=0x7ffc0000 [ 39.696278][ T29] audit: type=1326 audit(1757886654.385:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3889 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4521d5eba9 code=0x7ffc0000 [ 39.750746][ T3891] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 39.784140][ T3891] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.830025][ T3891] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.148: corrupted inode contents [ 39.872811][ T3914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.899150][ T3891] EXT4-fs (loop3): Remounting filesystem read-only [ 39.906707][ T3891] EXT4-fs (loop3): 1 truncate cleaned up [ 39.913199][ T3914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.921122][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.931702][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.960723][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 39.995304][ T3891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.085261][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.106298][ T3925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.126840][ T3925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.205593][ T3914] Set syz1 is full, maxelem 65536 reached [ 40.217932][ T3906] Set syz1 is full, maxelem 65536 reached [ 40.224343][ T3927] loop3: detected capacity change from 0 to 2048 [ 40.313984][ T3927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.528566][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.705188][ T3946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.171'. [ 40.972236][ T3966] futex_wake_op: syz.1.179 tries to shift op by 144; fix this program [ 41.283760][ T3303] syz-executor (3303) used greatest stack depth: 10776 bytes left [ 41.297649][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.336755][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.396247][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.438361][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.499414][ T3982] chnl_net:caif_netlink_parms(): no params data found [ 41.536970][ T60] bridge_slave_1: left allmulticast mode [ 41.542728][ T60] bridge_slave_1: left promiscuous mode [ 41.548428][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.556215][ T60] bridge_slave_0: left allmulticast mode [ 41.561940][ T60] bridge_slave_0: left promiscuous mode [ 41.567736][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.655997][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.666043][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.675725][ T60] bond0 (unregistering): Released all slaves [ 41.710363][ T3982] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.717616][ T3982] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.728711][ T3982] bridge_slave_0: entered allmulticast mode [ 41.735424][ T3982] bridge_slave_0: entered promiscuous mode [ 41.754903][ T60] hsr_slave_0: left promiscuous mode [ 41.761416][ T60] hsr_slave_1: left promiscuous mode [ 41.767237][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.775039][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.782611][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.790225][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.800880][ T60] veth1_macvtap: left promiscuous mode [ 41.806520][ T4002] syz.0.189 uses obsolete (PF_INET,SOCK_PACKET) [ 41.808522][ T60] veth0_macvtap: left promiscuous mode [ 41.819700][ T60] veth1_vlan: left promiscuous mode [ 41.825046][ T60] veth0_vlan: left promiscuous mode [ 41.908650][ T60] team0 (unregistering): Port device team_slave_1 removed [ 41.920217][ T60] team0 (unregistering): Port device team_slave_0 removed [ 42.063578][ T4013] capability: warning: `syz.1.194' uses 32-bit capabilities (legacy support in use) [ 42.242239][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.249414][ T3982] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.258548][ T3982] bridge_slave_1: entered allmulticast mode [ 42.265397][ T3982] bridge_slave_1: entered promiscuous mode [ 42.289227][ T4002] syzkaller1: entered promiscuous mode [ 42.294793][ T4002] syzkaller1: entered allmulticast mode [ 42.399796][ T3982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.430341][ T3982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.487335][ T3982] team0: Port device team_slave_0 added [ 42.506432][ T3982] team0: Port device team_slave_1 added [ 42.559441][ T4040] netlink: 'syz.3.200': attribute type 39 has an invalid length. [ 42.569724][ T3982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.576763][ T3982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.602751][ T3982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.672832][ T3982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.679891][ T3982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.706819][ T3982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.757533][ T4048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 42.790596][ T4048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 42.875323][ T3982] hsr_slave_0: entered promiscuous mode [ 42.888843][ T3982] hsr_slave_1: entered promiscuous mode [ 42.909705][ T3982] debugfs: 'hsr0' already exists in 'hsr' [ 42.915520][ T3982] Cannot create hsr debugfs directory [ 43.458889][ T3982] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.492914][ T3982] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.504950][ T3982] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.515281][ T3982] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.728966][ T3982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.734633][ T4087] Illegal XDP return value 4294967274 on prog (id 159) dev N/A, expect packet loss! [ 43.754382][ T4089] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4089 comm=syz.2.209 [ 43.766903][ T4089] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4089 comm=syz.2.209 [ 43.793863][ T3982] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.811538][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.818681][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.849561][ T3982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.860060][ T3982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.882183][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.889292][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.983703][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 43.983720][ T29] audit: type=1400 audit(1757886658.825:420): avc: denied { create } for pid=4112 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.063798][ T29] audit: type=1400 audit(1757886658.825:421): avc: denied { write } for pid=4112 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.083821][ T29] audit: type=1400 audit(1757886658.825:422): avc: denied { nlmsg_write } for pid=4112 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.135862][ T29] audit: type=1400 audit(1757886658.965:423): avc: denied { read } for pid=4124 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.138698][ T3982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.379073][ T29] audit: type=1326 audit(1757886659.205:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659484eba9 code=0x7ffc0000 [ 44.402404][ T29] audit: type=1326 audit(1757886659.205:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659484eba9 code=0x7ffc0000 [ 44.425758][ T29] audit: type=1326 audit(1757886659.205:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f659484eba9 code=0x7ffc0000 [ 44.449161][ T29] audit: type=1326 audit(1757886659.205:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659484eba9 code=0x7ffc0000 [ 44.472405][ T29] audit: type=1326 audit(1757886659.205:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659484eba9 code=0x7ffc0000 [ 44.495820][ T29] audit: type=1326 audit(1757886659.205:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f659484eba9 code=0x7ffc0000 [ 44.577300][ T4165] netlink: 96 bytes leftover after parsing attributes in process `syz.0.226'. [ 44.640166][ T3982] veth0_vlan: entered promiscuous mode [ 44.672380][ T3982] veth1_vlan: entered promiscuous mode [ 44.689106][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 44.719892][ T3982] veth0_macvtap: entered promiscuous mode [ 44.747629][ T3982] veth1_macvtap: entered promiscuous mode [ 44.767874][ T3982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.778773][ T3982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.790128][ T3441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.826825][ T3441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.848270][ T3441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.870587][ T3441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.178060][ T4201] loop4: detected capacity change from 0 to 128 [ 45.217630][ T4201] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.286445][ T4201] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.631107][ T4226] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.246'. [ 45.707341][ T4232] loop2: detected capacity change from 0 to 512 [ 45.776606][ T4232] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.854612][ T4232] EXT4-fs (loop2): mount failed [ 46.048731][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 46.078712][ T4241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 46.340610][ T4250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'. [ 46.370852][ T4250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'. [ 46.393272][ T4250] Zero length message leads to an empty skb [ 46.403027][ T4253] vlan2: entered allmulticast mode [ 46.412558][ T4253] dummy0: entered allmulticast mode [ 46.573280][ T4269] syzkaller1: entered promiscuous mode [ 46.578850][ T4269] syzkaller1: entered allmulticast mode [ 46.603096][ T4272] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.753235][ T4294] syz.4.276 (4294) used greatest stack depth: 9584 bytes left [ 46.765418][ T4299] mmap: syz.4.277 (4299) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.971767][ T4320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.286'. [ 47.583625][ T4354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 47.592583][ T4354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 47.613601][ T4352] loop3: detected capacity change from 0 to 128 [ 47.633452][ T4352] EXT4-fs: Ignoring removed nobh option [ 47.645296][ T4352] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.700707][ T4352] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.753036][ T4370] veth1_to_bond: entered allmulticast mode [ 47.760936][ T4370] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.778094][ T4370] bond0: (slave bond_slave_1): Releasing backup interface [ 47.790012][ T4370] veth1_to_bond (unregistering): left allmulticast mode [ 47.861918][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.909474][ T4373] program syz.0.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.920824][ T4373] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 47.961340][ T4379] netlink: 'syz.0.310': attribute type 30 has an invalid length. [ 48.135831][ T4394] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 48.266979][ T4407] vlan2: entered allmulticast mode [ 48.474557][ T4423] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 48.950122][ T4472] veth1_to_bond: entered allmulticast mode [ 48.960304][ T4472] bond0: (slave bond_slave_1): Releasing backup interface [ 48.971999][ T4472] veth1_to_bond (unregistering): left allmulticast mode [ 49.228649][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 49.228718][ T29] audit: type=1326 audit(1757886664.065:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12906beba9 code=0x7ffc0000 [ 49.260999][ T29] audit: type=1326 audit(1757886664.065:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12906beba9 code=0x7ffc0000 [ 49.284433][ T29] audit: type=1326 audit(1757886664.085:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12906beba9 code=0x7ffc0000 [ 49.307802][ T29] audit: type=1326 audit(1757886664.085:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12906beba9 code=0x7ffc0000 [ 49.331146][ T29] audit: type=1326 audit(1757886664.085:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12906beba9 code=0x7ffc0000 [ 49.354582][ T29] audit: type=1326 audit(1757886664.085:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12906beba9 code=0x7ffc0000 [ 49.377977][ T29] audit: type=1326 audit(1757886664.085:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12906beba9 code=0x7ffc0000 [ 49.401389][ T29] audit: type=1326 audit(1757886664.085:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12906beba9 code=0x7ffc0000 [ 49.424736][ T29] audit: type=1326 audit(1757886664.085:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12906beba9 code=0x7ffc0000 [ 49.448087][ T29] audit: type=1326 audit(1757886664.085:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4495 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12906beba9 code=0x7ffc0000 [ 49.603711][ T4521] Set syz1 is full, maxelem 65536 reached [ 49.637946][ T4521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.673376][ T4521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.677241][ T4532] veth1_to_bond: entered allmulticast mode [ 49.692730][ T4532] __nla_validate_parse: 6 callbacks suppressed [ 49.692743][ T4532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 49.728155][ T4532] bond0: (slave bond_slave_1): Releasing backup interface [ 49.738054][ T4535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 49.739184][ T4532] veth1_to_bond (unregistering): left allmulticast mode [ 49.799210][ T4541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.856506][ T4548] tmpfs: Unsupported parameter 'huge' [ 49.924908][ T4555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 50.090381][ T4567] loop2: detected capacity change from 0 to 128 [ 50.097414][ T4567] EXT4-fs: Ignoring removed nobh option [ 50.105124][ T4567] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.118873][ T4567] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.375535][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.428183][ T4566] Set syz1 is full, maxelem 65536 reached [ 50.490467][ T4584] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 50.518700][ T4584] team0 (unregistering): Port device team_slave_0 removed [ 50.540907][ T4584] team0 (unregistering): Port device team_slave_1 removed [ 50.736068][ T4601] netlink: zone id is out of range [ 50.746489][ T4601] netlink: zone id is out of range [ 50.751636][ T4601] netlink: zone id is out of range [ 50.756890][ T4601] netlink: zone id is out of range [ 50.762501][ T4601] netlink: zone id is out of range [ 50.771770][ T4601] netlink: zone id is out of range [ 50.778149][ T4601] netlink: zone id is out of range [ 50.783972][ T4601] netlink: zone id is out of range [ 50.857551][ T4617] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 50.865335][ T4617] netlink: 'syz.2.411': attribute type 4 has an invalid length. [ 50.873022][ T4617] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.411'. [ 50.982234][ T4629] netlink: 'syz.4.417': attribute type 10 has an invalid length. [ 50.997463][ T4629] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.004775][ T4629] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.021405][ T4629] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.028590][ T4629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.035953][ T4629] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.043006][ T4629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.055048][ T4629] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 51.075406][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 51.095030][ T4634] bridge_slave_1: left allmulticast mode [ 51.100739][ T4634] bridge_slave_1: left promiscuous mode [ 51.106528][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.140081][ T4634] bridge_slave_0: left allmulticast mode [ 51.145921][ T4634] bridge_slave_0: left promiscuous mode [ 51.151677][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.165930][ T4634] bond0: (slave bridge0): Releasing backup interface [ 51.194857][ T4639] SELinux: ebitmap: truncated map [ 51.201186][ T4639] SELinux: failed to load policy [ 51.272314][ T4651] netlink: 376 bytes leftover after parsing attributes in process `syz.4.426'. [ 51.325443][ T4657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 51.334420][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.342060][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.350328][ T4657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.357815][ T4657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.487717][ T4674] netlink: 'syz.0.437': attribute type 10 has an invalid length. [ 51.496506][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.503876][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.539031][ T4676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.438'. [ 51.551779][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.559033][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.566485][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.573559][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.585117][ T4674] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 51.594060][ T4679] bridge_slave_1: left allmulticast mode [ 51.599747][ T4679] bridge_slave_1: left promiscuous mode [ 51.605547][ T4679] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.615155][ T4679] bridge_slave_0: left allmulticast mode [ 51.620894][ T4679] bridge_slave_0: left promiscuous mode [ 51.626670][ T4679] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.640585][ T4679] bond0: (slave bridge0): Releasing backup interface [ 51.719465][ T4680] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 51.757737][ T4694] wg2: entered promiscuous mode [ 51.762701][ T4694] wg2: entered allmulticast mode [ 51.801211][ T4696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.815019][ T4696] vlan2: entered allmulticast mode [ 51.820185][ T4696] bond1: entered allmulticast mode [ 51.985461][ T4716] random: crng reseeded on system resumption [ 52.178498][ T4749] loop2: detected capacity change from 0 to 8192 [ 52.193890][ T4753] loop3: detected capacity change from 0 to 1024 [ 52.219482][ T4753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.232493][ T4753] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.246632][ T4753] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 52.261691][ T4753] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 52.274101][ T4753] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.274101][ T4753] [ 52.283804][ T4753] EXT4-fs (loop3): Total free blocks count 0 [ 52.289885][ T4753] EXT4-fs (loop3): Free/Dirty block details [ 52.295843][ T4753] EXT4-fs (loop3): free_blocks=4293918720 [ 52.301579][ T4753] EXT4-fs (loop3): dirty_blocks=16 [ 52.306743][ T4753] EXT4-fs (loop3): Block reservation details [ 52.312746][ T4753] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 52.334409][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.724406][ T4811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.731891][ T4811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.742046][ T4811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.749624][ T4811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.758469][ T4814] netlink: 'syz.2.497': attribute type 39 has an invalid length. [ 53.148015][ T4854] SELinux: ebitmap: truncated map [ 53.154710][ T4854] SELinux: failed to load policy [ 53.211901][ T4861] netlink: 'syz.1.517': attribute type 39 has an invalid length. [ 53.843173][ T4870] loop3: detected capacity change from 0 to 512 [ 53.857413][ T4870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.871184][ T4870] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.887479][ T4870] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.523: corrupted xattr block 19: overlapping e_value [ 53.903401][ T4870] EXT4-fs (loop3): Remounting filesystem read-only [ 53.909938][ T4870] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 53.936200][ T4870] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 53.989013][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.418334][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 54.418348][ T29] audit: type=1400 audit(1757886669.255:944): avc: denied { read write } for pid=4910 comm="syz.3.537" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.447887][ T29] audit: type=1400 audit(1757886669.255:945): avc: denied { open } for pid=4910 comm="syz.3.537" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.471894][ T4911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.491299][ T4911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.510828][ T29] audit: type=1400 audit(1757886669.305:946): avc: denied { ioctl } for pid=4910 comm="syz.3.537" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.693427][ T29] audit: type=1400 audit(1757886669.525:947): avc: denied { getopt } for pid=4918 comm="syz.4.540" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.760925][ T4929] __nla_validate_parse: 11 callbacks suppressed [ 54.760942][ T4929] netlink: 204 bytes leftover after parsing attributes in process `syz.4.545'. [ 54.797045][ T29] audit: type=1400 audit(1757886669.635:948): avc: denied { name_bind } for pid=4932 comm="syz.4.547" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 54.871117][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 54.912999][ T4950] ref_ctr_offset mismatch. inode: 0x204 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 54.980895][ T4957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.559'. [ 55.050476][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 55.100157][ T29] audit: type=1400 audit(1757886669.935:949): avc: denied { mount } for pid=4965 comm="syz.2.562" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.129604][ T4972] loop3: detected capacity change from 0 to 512 [ 55.151965][ T4974] net_ratelimit: 14 callbacks suppressed [ 55.151981][ T4974] IPv4: Oversized IP packet from 127.202.26.0 [ 55.182204][ T4972] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.196043][ T4972] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.565: invalid indirect mapped block 4294967295 (level 0) [ 55.225916][ T4972] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.565: invalid indirect mapped block 4294967295 (level 1) [ 55.240477][ T4972] EXT4-fs (loop3): 1 orphan inode deleted [ 55.246265][ T4972] EXT4-fs (loop3): 1 truncate cleaned up [ 55.252389][ T4972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.291844][ T4972] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 55.317037][ T29] audit: type=1400 audit(1757886670.145:950): avc: denied { read write } for pid=4986 comm="syz.0.572" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.341224][ T29] audit: type=1400 audit(1757886670.145:951): avc: denied { open } for pid=4986 comm="syz.0.572" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.386273][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.396449][ T29] audit: type=1400 audit(1757886670.235:952): avc: denied { ioctl } for pid=4991 comm="syz.4.574" path="socket:[10214]" dev="sockfs" ino=10214 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.435003][ T4992] netlink: 32 bytes leftover after parsing attributes in process `syz.4.574'. [ 55.497709][ T4997] loop2: detected capacity change from 0 to 1024 [ 55.515189][ T29] audit: type=1400 audit(1757886670.355:953): avc: denied { execute_no_trans } for pid=4996 comm="syz.4.577" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.569516][ T4997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.645443][ T4997] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.576: Allocating blocks 449-513 which overlap fs metadata [ 55.689992][ T4995] EXT4-fs (loop2): pa ffff8881072aa150: logic 48, phys. 177, len 21 [ 55.698080][ T4995] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 55.722833][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.743777][ T5019] syz.4.586 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.915207][ T5046] SELinux: Context system_u:object_r:ping_exec_t:s0 is not valid (left unmapped). [ 55.986092][ T5060] loop2: detected capacity change from 0 to 164 [ 56.016746][ T5060] syz.2.606: attempt to access beyond end of device [ 56.016746][ T5060] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 56.059025][ T5060] syz.2.606: attempt to access beyond end of device [ 56.059025][ T5060] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 56.166049][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.193963][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.302047][ T5145] netlink: 332 bytes leftover after parsing attributes in process `syz.4.615'. [ 56.480199][ T5153] netlink: 'syz.4.619': attribute type 13 has an invalid length. [ 56.546148][ T5157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.905399][ T5131] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.924320][ T5131] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.956581][ T5131] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.969067][ T5131] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.212668][ T5177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 57.250831][ T5177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.305355][ T5177] vlan2: entered allmulticast mode [ 57.310549][ T5177] bond1: entered allmulticast mode [ 57.470184][ T5192] geneve2: entered promiscuous mode [ 57.476322][ T5192] geneve2: entered allmulticast mode [ 57.545568][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'. [ 57.586004][ T5201] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 57.990326][ T5228] syzkaller1: entered promiscuous mode [ 57.995909][ T5228] syzkaller1: entered allmulticast mode [ 58.054627][ T5226] Set syz1 is full, maxelem 65536 reached [ 58.060637][ T5224] Set syz1 is full, maxelem 65536 reached [ 58.340111][ T5250] geneve2: entered promiscuous mode [ 58.345496][ T5250] geneve2: entered allmulticast mode [ 59.132636][ T5280] loop2: detected capacity change from 0 to 512 [ 59.144877][ T5280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.158182][ T5280] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.262756][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.379018][ T5287] syzkaller0: entered promiscuous mode [ 59.384642][ T5287] syzkaller0: entered allmulticast mode [ 59.539094][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 59.539108][ T29] audit: type=1400 audit(1757886674.375:1015): avc: denied { setopt } for pid=5296 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.582961][ T29] audit: type=1400 audit(1757886674.405:1016): avc: denied { bind } for pid=5296 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.602341][ T29] audit: type=1400 audit(1757886674.405:1017): avc: denied { listen } for pid=5296 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.621975][ T29] audit: type=1400 audit(1757886674.405:1018): avc: denied { write } for pid=5296 comm="syz.2.678" path="socket:[11598]" dev="sockfs" ino=11598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.654408][ T29] audit: type=1400 audit(1757886674.485:1019): avc: denied { ioctl } for pid=5296 comm="syz.2.678" path="socket:[11598]" dev="sockfs" ino=11598 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.691348][ T29] audit: type=1326 audit(1757886674.525:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536f15eba9 code=0x7ffc0000 [ 59.714805][ T29] audit: type=1326 audit(1757886674.525:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536f15eba9 code=0x7ffc0000 [ 59.738184][ T29] audit: type=1326 audit(1757886674.525:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f536f15eba9 code=0x7ffc0000 [ 59.761502][ T29] audit: type=1326 audit(1757886674.525:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536f15eba9 code=0x7ffc0000 [ 59.784843][ T29] audit: type=1326 audit(1757886674.525:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5299 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536f15eba9 code=0x7ffc0000 [ 59.878970][ T5310] netlink: 'syz.4.685': attribute type 1 has an invalid length. [ 59.886820][ T5310] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.685'. [ 59.934251][ T5318] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 60.037483][ T5326] loop2: detected capacity change from 0 to 4096 [ 60.053090][ T5326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.080265][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.123103][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.697'. [ 60.268014][ T5339] loop3: detected capacity change from 0 to 512 [ 60.318088][ T5339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.376641][ T5339] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.417489][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 60.468238][ T5355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 60.633086][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.719684][ T5368] loop3: detected capacity change from 0 to 2048 [ 60.826752][ T5368] Alternate GPT is invalid, using primary GPT. [ 60.833170][ T5368] loop3: p2 p3 p7 [ 60.846530][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 60.942421][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 61.155037][ T5388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.717'. [ 61.385226][ T5407] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 62.749520][ T5503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 62.761827][ T5505] netlink: 'syz.1.762': attribute type 13 has an invalid length. [ 62.786705][ T5508] capability: warning: `syz.3.765' uses deprecated v2 capabilities in a way that may be insecure [ 62.893877][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.901146][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.949665][ T5505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.961133][ T5505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.004568][ T5099] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.014649][ T5099] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.032741][ T5099] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.046481][ T5099] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.059029][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.066313][ T5530] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.076676][ T5530] bridge0: entered allmulticast mode [ 63.114374][ T5530] batadv1: left allmulticast mode [ 63.119598][ T5530] batadv1: left promiscuous mode [ 63.124797][ T5530] bridge0: port 3(batadv1) entered disabled state [ 63.152639][ T5530] bridge_slave_1: left allmulticast mode [ 63.158398][ T5530] bridge_slave_1: left promiscuous mode [ 63.164679][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.198307][ T5530] bridge_slave_0: left allmulticast mode [ 63.204908][ T5530] bridge_slave_0: left promiscuous mode [ 63.210625][ T5530] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.395532][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 63.414897][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 63.523757][ T5565] bond0: (slave bond_slave_0): Releasing backup interface [ 63.537672][ T5565] team0: Port device team_slave_0 removed [ 63.547198][ T5565] team0: Port device team_slave_1 removed [ 63.561447][ T5565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.568974][ T5565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.581491][ T5565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.589728][ T5565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.635453][ T5578] loop2: detected capacity change from 0 to 164 [ 63.644799][ T5578] syz.2.793: attempt to access beyond end of device [ 63.644799][ T5578] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 63.661060][ T5578] syz.2.793: attempt to access beyond end of device [ 63.661060][ T5578] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 64.396411][ T5612] netlink: 'syz.2.807': attribute type 13 has an invalid length. [ 64.493127][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.500414][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.558774][ T5620] netlink: 'syz.0.818': attribute type 13 has an invalid length. [ 64.645139][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.694982][ T5620] gretap0: refused to change device tx_queue_len [ 64.701887][ T5620] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.718953][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.745006][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.759278][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.914829][ T5626] rdma_op ffff88812d359980 conn xmit_rdma 0000000000000000 [ 64.971928][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 64.971943][ T29] audit: type=1326 audit(1757886679.805:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93443deba9 code=0x7ffc0000 [ 65.038232][ T29] audit: type=1326 audit(1757886679.845:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93443deba9 code=0x7ffc0000 [ 65.061705][ T29] audit: type=1326 audit(1757886679.845:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93443deba9 code=0x7ffc0000 [ 65.085304][ T29] audit: type=1326 audit(1757886679.845:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93443deba9 code=0x7ffc0000 [ 65.108850][ T29] audit: type=1326 audit(1757886679.845:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93443deba9 code=0x7ffc0000 [ 65.132379][ T29] audit: type=1326 audit(1757886679.845:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f93443deba9 code=0x7ffc0000 [ 65.155667][ T29] audit: type=1326 audit(1757886679.845:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93443deba9 code=0x7ffc0000 [ 65.179038][ T29] audit: type=1326 audit(1757886679.845:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93443deba9 code=0x7ffc0000 [ 65.202410][ T29] audit: type=1326 audit(1757886679.845:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93443deba9 code=0x7ffc0000 [ 65.226048][ T29] audit: type=1326 audit(1757886679.845:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5630 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93443deba9 code=0x7ffc0000 [ 65.276645][ T5638] vhci_hcd: invalid port number 96 [ 65.281828][ T5638] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 66.193028][ T5747] loop2: detected capacity change from 0 to 1024 [ 66.221000][ T5747] EXT4-fs: inline encryption not supported [ 66.261440][ T5747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.299117][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.674353][ T5772] __nla_validate_parse: 8 callbacks suppressed [ 66.674372][ T5772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.876'. [ 66.714609][ T5776] loop3: detected capacity change from 0 to 128 [ 66.739986][ T5776] syz.3.878: attempt to access beyond end of device [ 66.739986][ T5776] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 66.765068][ T5776] syz.3.878: attempt to access beyond end of device [ 66.765068][ T5776] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 66.778473][ T5776] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 66.791832][ T5776] syz.3.878: attempt to access beyond end of device [ 66.791832][ T5776] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 66.815674][ T5776] syz.3.878: attempt to access beyond end of device [ 66.815674][ T5776] loop3: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 66.829096][ T5776] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 66.847399][ T5776] syz.3.878: attempt to access beyond end of device [ 66.847399][ T5776] loop3: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 66.861242][ T5776] syz.3.878: attempt to access beyond end of device [ 66.861242][ T5776] loop3: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 66.875372][ T5776] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 66.885560][ T5776] syz.3.878: attempt to access beyond end of device [ 66.885560][ T5776] loop3: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 66.899406][ T5776] syz.3.878: attempt to access beyond end of device [ 66.899406][ T5776] loop3: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 66.913519][ T5776] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 66.924159][ T5776] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 66.948070][ T5776] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 66.959409][ T5776] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 66.976575][ T5776] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 66.986913][ T5776] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 66.996865][ T5776] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 67.022040][ T5784] 9pnet: Could not find request transport: fd0x0000000000000003 [ 67.148512][ T5798] ================================================================== [ 67.156651][ T5798] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 67.165285][ T5798] [ 67.167641][ T5798] write to 0xffff8881158f8d68 of 8 bytes by task 5791 on cpu 0: [ 67.175311][ T5798] shmem_file_splice_read+0x470/0x600 [ 67.180718][ T5798] splice_direct_to_actor+0x26f/0x680 [ 67.186110][ T5798] do_splice_direct+0xda/0x150 [ 67.190903][ T5798] do_sendfile+0x380/0x650 [ 67.195351][ T5798] __x64_sys_sendfile64+0x105/0x150 [ 67.200583][ T5798] x64_sys_call+0x2bb0/0x2ff0 [ 67.205287][ T5798] do_syscall_64+0xd2/0x200 [ 67.209837][ T5798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.215754][ T5798] [ 67.218082][ T5798] write to 0xffff8881158f8d68 of 8 bytes by task 5798 on cpu 1: [ 67.225710][ T5798] shmem_file_splice_read+0x470/0x600 [ 67.231100][ T5798] splice_direct_to_actor+0x26f/0x680 [ 67.236475][ T5798] do_splice_direct+0xda/0x150 [ 67.241247][ T5798] do_sendfile+0x380/0x650 [ 67.245682][ T5798] __x64_sys_sendfile64+0x105/0x150 [ 67.250902][ T5798] x64_sys_call+0x2bb0/0x2ff0 [ 67.255595][ T5798] do_syscall_64+0xd2/0x200 [ 67.260115][ T5798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.266014][ T5798] [ 67.268335][ T5798] value changed: 0x000000000000134b -> 0x000000000000134d [ 67.275440][ T5798] [ 67.277767][ T5798] Reported by Kernel Concurrency Sanitizer on: [ 67.283939][ T5798] CPU: 1 UID: 0 PID: 5798 Comm: syz.0.884 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.293573][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 67.303628][ T5798] ==================================================================