last executing test programs: 2.247784016s ago: executing program 1 (id=369): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x88, 0xc000067}, 0x2c) 1.887698093s ago: executing program 1 (id=376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2, 0x0, 0x7ffffffe, 0x4000}}, 0x20) 1.771974356s ago: executing program 1 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000070003"], 0x48}}, 0x0) 1.56110307s ago: executing program 1 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) 1.385390413s ago: executing program 1 (id=401): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2, 0x5, 0x6, 0x7f}, &(0x7f0000000240)=0x10) 872.670353ms ago: executing program 0 (id=417): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x26020400) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 802.072444ms ago: executing program 0 (id=421): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) 778.360245ms ago: executing program 0 (id=423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000000)={0xf97cff8c, 0x8}, 0x10) 712.237416ms ago: executing program 0 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) 638.668137ms ago: executing program 0 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 605.037268ms ago: executing program 4 (id=436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1, 0x0, 0x8}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r2, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded724070800010002"], 0x150}}, 0x0) 603.728728ms ago: executing program 0 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) 579.524069ms ago: executing program 4 (id=440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 558.896229ms ago: executing program 3 (id=441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 459.010671ms ago: executing program 1 (id=443): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 402.789562ms ago: executing program 2 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 375.187883ms ago: executing program 3 (id=445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 329.075644ms ago: executing program 2 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 294.848984ms ago: executing program 4 (id=447): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu~=0||!') 287.463024ms ago: executing program 2 (id=448): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000400), 0x1) 244.213285ms ago: executing program 3 (id=449): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000240)=""/85, 0x55) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) 203.672366ms ago: executing program 2 (id=450): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) 203.317776ms ago: executing program 3 (id=451): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000002b40)={0x0, 0x9, 0x7, 0x2, 0x4a1f5aab, 0x7fff, 0x1000, 0x8086}, &(0x7f0000002b80)={0x9, 0x5, 0x6, 0x7, 0x6, 0x49a2, 0x4, 0x8}, 0x0, 0x0, 0x0) 139.974948ms ago: executing program 4 (id=452): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xf7d4, 0x8, 0x1, 0x8001, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 134.517128ms ago: executing program 3 (id=453): fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 131.366617ms ago: executing program 2 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 77.976438ms ago: executing program 4 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 77.045258ms ago: executing program 3 (id=456): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 44.997409ms ago: executing program 2 (id=457): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 0s ago: executing program 4 (id=458): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = inotify_init1(0x0) fstatfs(r1, &(0x7f00000003c0)=""/59) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 33.924801][ T29] audit: type=1400 audit(1758186097.290:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.925908][ T3294] cgroup: Unknown subsys name 'net' [ 33.947646][ T29] audit: type=1400 audit(1758186097.290:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.975055][ T29] audit: type=1400 audit(1758186097.320:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.147752][ T3294] cgroup: Unknown subsys name 'cpuset' [ 34.153964][ T3294] cgroup: Unknown subsys name 'rlimit' [ 34.285796][ T29] audit: type=1400 audit(1758186097.650:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.313370][ T29] audit: type=1400 audit(1758186097.660:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.333876][ T29] audit: type=1400 audit(1758186097.660:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.350365][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.354237][ T29] audit: type=1400 audit(1758186097.660:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.383079][ T29] audit: type=1400 audit(1758186097.680:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.394940][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.407862][ T29] audit: type=1400 audit(1758186097.680:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.439893][ T29] audit: type=1400 audit(1758186097.740:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.522795][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.594256][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.601420][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.608795][ T3305] bridge_slave_0: entered allmulticast mode [ 35.615173][ T3305] bridge_slave_0: entered promiscuous mode [ 35.621789][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.646241][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.653392][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.660597][ T3305] bridge_slave_1: entered allmulticast mode [ 35.667203][ T3305] bridge_slave_1: entered promiscuous mode [ 35.696431][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.725525][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.745790][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.752897][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.760051][ T3312] bridge_slave_0: entered allmulticast mode [ 35.766508][ T3312] bridge_slave_0: entered promiscuous mode [ 35.781030][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.794870][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.804540][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.811770][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.818934][ T3312] bridge_slave_1: entered allmulticast mode [ 35.825283][ T3312] bridge_slave_1: entered promiscuous mode [ 35.860123][ T3305] team0: Port device team_slave_0 added [ 35.878771][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.888641][ T3305] team0: Port device team_slave_1 added [ 35.910157][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.925247][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.955505][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.962625][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.969842][ T3308] bridge_slave_0: entered allmulticast mode [ 35.976249][ T3308] bridge_slave_0: entered promiscuous mode [ 35.988552][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.995584][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.021566][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.032892][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.039902][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.065844][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.088849][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.095925][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.104190][ T3308] bridge_slave_1: entered allmulticast mode [ 36.110542][ T3308] bridge_slave_1: entered promiscuous mode [ 36.117285][ T3312] team0: Port device team_slave_0 added [ 36.126175][ T3312] team0: Port device team_slave_1 added [ 36.162532][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.169661][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.176987][ T3304] bridge_slave_0: entered allmulticast mode [ 36.183464][ T3304] bridge_slave_0: entered promiscuous mode [ 36.191385][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.200547][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.207680][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.214848][ T3304] bridge_slave_1: entered allmulticast mode [ 36.221293][ T3304] bridge_slave_1: entered promiscuous mode [ 36.228668][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.235621][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.261544][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.280335][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.304844][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.311858][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.337807][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.362789][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.369991][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.377151][ T3313] bridge_slave_0: entered allmulticast mode [ 36.383472][ T3313] bridge_slave_0: entered promiscuous mode [ 36.407281][ T3312] hsr_slave_0: entered promiscuous mode [ 36.413222][ T3312] hsr_slave_1: entered promiscuous mode [ 36.424932][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.432048][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.439203][ T3313] bridge_slave_1: entered allmulticast mode [ 36.446366][ T3313] bridge_slave_1: entered promiscuous mode [ 36.458717][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.469926][ T3305] hsr_slave_0: entered promiscuous mode [ 36.475877][ T3305] hsr_slave_1: entered promiscuous mode [ 36.481905][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 36.487660][ T3305] Cannot create hsr debugfs directory [ 36.500492][ T3308] team0: Port device team_slave_0 added [ 36.512939][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.539146][ T3308] team0: Port device team_slave_1 added [ 36.546251][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.579482][ T3304] team0: Port device team_slave_0 added [ 36.586375][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.603070][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.610065][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.636124][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.648753][ T3304] team0: Port device team_slave_1 added [ 36.654748][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.661753][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.687773][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.729039][ T3313] team0: Port device team_slave_0 added [ 36.734935][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.741928][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.767839][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.789888][ T3313] team0: Port device team_slave_1 added [ 36.806155][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.813165][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.839107][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.869939][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.876909][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.902904][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.930478][ T3308] hsr_slave_0: entered promiscuous mode [ 36.936440][ T3308] hsr_slave_1: entered promiscuous mode [ 36.942397][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 36.948139][ T3308] Cannot create hsr debugfs directory [ 36.953807][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.960774][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.986884][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.035536][ T3304] hsr_slave_0: entered promiscuous mode [ 37.041721][ T3304] hsr_slave_1: entered promiscuous mode [ 37.047843][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 37.053651][ T3304] Cannot create hsr debugfs directory [ 37.079556][ T3313] hsr_slave_0: entered promiscuous mode [ 37.085572][ T3313] hsr_slave_1: entered promiscuous mode [ 37.091553][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 37.097326][ T3313] Cannot create hsr debugfs directory [ 37.140197][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.168114][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.194011][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.202713][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.268130][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.276882][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.294947][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.307659][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.339269][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.363045][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.375618][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.384736][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.415043][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.423946][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.440337][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.457299][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.470716][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.490607][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.501019][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.509842][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.518949][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.544229][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.559018][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.588965][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.596085][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.615615][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.622726][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.634504][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.646638][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.660570][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.679677][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.705200][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.715619][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.727993][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.735051][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.744640][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.751751][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.761068][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.768123][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.776742][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.783913][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.815392][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.845869][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.862894][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.877229][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.884345][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.905102][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.912254][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.923553][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.969836][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.976966][ T1477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.985802][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.992896][ T1477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.031937][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.048004][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.061970][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.153083][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.180707][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.245569][ T3305] veth0_vlan: entered promiscuous mode [ 38.253168][ T3312] veth0_vlan: entered promiscuous mode [ 38.262711][ T3312] veth1_vlan: entered promiscuous mode [ 38.272100][ T3305] veth1_vlan: entered promiscuous mode [ 38.281476][ T3308] veth0_vlan: entered promiscuous mode [ 38.302679][ T3312] veth0_macvtap: entered promiscuous mode [ 38.317174][ T3312] veth1_macvtap: entered promiscuous mode [ 38.336519][ T3305] veth0_macvtap: entered promiscuous mode [ 38.343429][ T3308] veth1_vlan: entered promiscuous mode [ 38.355792][ T3305] veth1_macvtap: entered promiscuous mode [ 38.379580][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.396770][ T3308] veth0_macvtap: entered promiscuous mode [ 38.406090][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.418217][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.428079][ T3308] veth1_macvtap: entered promiscuous mode [ 38.443958][ T3304] veth0_vlan: entered promiscuous mode [ 38.453492][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.468444][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.487534][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.497217][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.505947][ T3304] veth1_vlan: entered promiscuous mode [ 38.514855][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.523620][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.534695][ T3313] veth0_vlan: entered promiscuous mode [ 38.548000][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.556726][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.566386][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.580091][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.590838][ T3313] veth1_vlan: entered promiscuous mode [ 38.606914][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.620478][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.634298][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.659689][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.660218][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.684520][ T3313] veth0_macvtap: entered promiscuous mode [ 38.696947][ T3304] veth0_macvtap: entered promiscuous mode [ 38.703352][ T1477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.718148][ T3313] veth1_macvtap: entered promiscuous mode [ 38.738051][ T3304] veth1_macvtap: entered promiscuous mode [ 38.760998][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.771497][ T3478] atomic_op ffff888119248128 conn xmit_atomic 0000000000000000 [ 38.776557][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.796199][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.812448][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.824088][ T3435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.850158][ T3435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.866093][ T3435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.896749][ T3435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.917513][ T3435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.929102][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 38.929123][ T29] audit: type=1400 audit(1758186102.300:113): avc: denied { ioctl } for pid=3486 comm="syz.2.8" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.971965][ T3435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.988100][ T3435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.996854][ T3435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.041406][ T29] audit: type=1400 audit(1758186102.410:114): avc: denied { allowed } for pid=3491 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.097849][ T29] audit: type=1400 audit(1758186102.440:115): avc: denied { create } for pid=3491 comm="+}[@" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.118741][ T29] audit: type=1400 audit(1758186102.440:116): avc: denied { map } for pid=3491 comm="+}[@" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.142277][ T29] audit: type=1400 audit(1758186102.440:117): avc: denied { read write } for pid=3491 comm="+}[@" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.166486][ T29] audit: type=1326 audit(1758186102.450:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd46eba9 code=0x7ffc0000 [ 39.189746][ T29] audit: type=1326 audit(1758186102.450:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd46eba9 code=0x7ffc0000 [ 39.212980][ T29] audit: type=1326 audit(1758186102.450:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7febcd46eba9 code=0x7ffc0000 [ 39.236357][ T29] audit: type=1326 audit(1758186102.450:121): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd46eba9 code=0x7ffc0000 [ 39.260092][ T29] audit: type=1326 audit(1758186102.450:122): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3495 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febcd46eba9 code=0x7ffc0000 [ 39.674957][ T3543] pimreg: entered allmulticast mode [ 39.711842][ T3543] pimreg: left allmulticast mode [ 39.826659][ T3547] loop3: detected capacity change from 0 to 2048 [ 39.860112][ T3547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.892754][ T3547] EXT4-fs (loop3): shut down requested (1) [ 39.953732][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.979664][ T3540] loop0: detected capacity change from 0 to 32768 [ 40.015392][ T3559] loop1: detected capacity change from 0 to 1024 [ 40.024141][ T3559] EXT4-fs: Ignoring removed bh option [ 40.031753][ T3540] syz.0.29 (3540) used greatest stack depth: 10896 bytes left [ 40.040246][ T3559] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.080460][ T3559] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 40.109614][ T3559] System zones: 0-1, 3-12 [ 40.117725][ T3559] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.37: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.163833][ T3559] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.37: Failed to acquire dquot type 0 [ 40.212320][ T3559] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.37: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.269558][ T3559] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.37: Invalid inode bitmap blk 0 in block_group 0 [ 40.287827][ T3435] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.312394][ T3559] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 40.332996][ T3435] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 40.353185][ T3559] EXT4-fs (loop1): 1 orphan inode deleted [ 40.378452][ T3559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.391869][ T3582] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 40.476694][ T3597] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004D0xffffffffffffffff [ 40.490400][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.552366][ T3606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=3606 comm=syz.1.58 [ 40.585783][ T3612] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET) [ 40.593227][ T3618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.58'. [ 40.692055][ T3634] all (unregistering): Released all slaves [ 40.800833][ T3642] syzkaller1: entered promiscuous mode [ 40.806361][ T3642] syzkaller1: entered allmulticast mode [ 41.348852][ T3663] Zero length message leads to an empty skb [ 41.370428][ T3665] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.682461][ T3698] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 41.682883][ T3392] IPVS: starting estimator thread 0... [ 41.777039][ T3706] IPVS: using max 2448 ests per chain, 122400 per kthread [ 42.302400][ T3714] program syz.1.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.389166][ T3722] loop1: detected capacity change from 0 to 8192 [ 42.487187][ T3733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.112'. [ 42.529916][ T3735] loop0: detected capacity change from 0 to 512 [ 42.538301][ T3735] ======================================================= [ 42.538301][ T3735] WARNING: The mand mount option has been deprecated and [ 42.538301][ T3735] and is ignored by this kernel. Remove the mand [ 42.538301][ T3735] option from the mount to silence this warning. [ 42.538301][ T3735] ======================================================= [ 42.588534][ T3735] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.597391][ T3735] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.114: bad orphan inode 13 [ 42.635413][ T3735] ext4_test_bit(bit=12, block=18) = 1 [ 42.641126][ T3735] is_bad_inode(inode)=0 [ 42.645342][ T3735] NEXT_ORPHAN(inode)=2130706432 [ 42.650321][ T3735] max_ino=32 [ 42.653569][ T3735] i_nlink=1 [ 42.667094][ T3745] loop3: detected capacity change from 0 to 1024 [ 42.680141][ T3745] EXT4-fs: Ignoring removed orlov option [ 42.699915][ T3735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.721926][ T3745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.734882][ T3745] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.747363][ T3751] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 42.777983][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.790141][ T3745] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.117: lblock 3 mapped to illegal pblock 3 (length 3) [ 42.816721][ T3745] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 42.829105][ T3745] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.829105][ T3745] [ 42.842604][ T3755] loop0: detected capacity change from 0 to 128 [ 42.846342][ T3758] netlink: 'syz.1.120': attribute type 10 has an invalid length. [ 42.863108][ T3755] syz.0.122: attempt to access beyond end of device [ 42.863108][ T3755] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 42.877657][ T3755] syz.0.122: attempt to access beyond end of device [ 42.877657][ T3755] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 42.878772][ T3758] syz_tun: entered promiscuous mode [ 42.893818][ T3755] syz.0.122: attempt to access beyond end of device [ 42.893818][ T3755] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 42.911207][ T12] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 42.931384][ T3758] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 42.941230][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 42.953626][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.953626][ T12] [ 42.964478][ T3755] syz.0.122: attempt to access beyond end of device [ 42.964478][ T3755] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 42.975380][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.978084][ T3755] syz.0.122: attempt to access beyond end of device [ 42.978084][ T3755] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 43.014130][ T3755] syz.0.122: attempt to access beyond end of device [ 43.014130][ T3755] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 43.027969][ T3755] syz.0.122: attempt to access beyond end of device [ 43.027969][ T3755] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 43.042085][ T3755] syz.0.122: attempt to access beyond end of device [ 43.042085][ T3755] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 43.057199][ T3755] syz.0.122: attempt to access beyond end of device [ 43.057199][ T3755] loop0: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 43.117175][ T3767] hub 8-0:1.0: USB hub found [ 43.122261][ T3767] hub 8-0:1.0: 8 ports detected [ 43.180089][ T3779] netlink: 'syz.1.130': attribute type 16 has an invalid length. [ 43.188094][ T3779] netlink: 'syz.1.130': attribute type 17 has an invalid length. [ 43.205318][ T3773] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.231128][ T3773] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.515085][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.522287][ T3779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.535694][ T3779] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.542805][ T3779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.609750][ T3797] loop2: detected capacity change from 0 to 8192 [ 43.847152][ T3824] loop1: detected capacity change from 0 to 512 [ 43.856324][ T3808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.866286][ T3808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.901235][ T3824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.915102][ T3824] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.932130][ T3824] syz.1.151 (3824) used greatest stack depth: 10240 bytes left [ 43.939799][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 43.939810][ T29] audit: type=1400 audit(1758186107.300:319): avc: denied { read write open } for pid=3823 comm="syz.1.151" path=2F32332F66696C65312F233138202864656C6574656429 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.984928][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.013851][ T29] audit: type=1400 audit(1758186107.380:320): avc: denied { tracepoint } for pid=3832 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.042309][ T29] audit: type=1400 audit(1758186107.410:321): avc: denied { create } for pid=3832 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.062663][ T29] audit: type=1400 audit(1758186107.410:322): avc: denied { bind } for pid=3832 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.082365][ T29] audit: type=1400 audit(1758186107.410:323): avc: denied { write } for pid=3832 comm="syz.0.154" path="socket:[6296]" dev="sockfs" ino=6296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.182459][ T3840] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.156'. [ 44.832300][ T29] audit: type=1326 audit(1758186108.200:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce33f2eba9 code=0x7ffc0000 [ 44.887286][ T29] audit: type=1326 audit(1758186108.200:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce33f2eba9 code=0x7ffc0000 [ 44.910600][ T29] audit: type=1326 audit(1758186108.200:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce33f2eba9 code=0x7ffc0000 [ 44.934006][ T29] audit: type=1326 audit(1758186108.200:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce33f2eba9 code=0x7ffc0000 [ 44.957409][ T29] audit: type=1326 audit(1758186108.200:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3886 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce33f2eba9 code=0x7ffc0000 [ 45.034751][ T3901] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15) [ 45.295420][ T3942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3942 comm=syz.1.204 [ 45.418281][ T3964] loop1: detected capacity change from 0 to 1024 [ 45.439681][ T3964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.483808][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.553072][ T3987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3987 comm=syz.3.224 [ 45.619113][ T4001] io-wq is not configured for unbound workers [ 45.638878][ T4005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 45.658193][ T4005] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 45.667057][ T4005] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 45.840507][ T4046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 46.066539][ T4069] netlink: 'syz.1.253': attribute type 21 has an invalid length. [ 46.075959][ T4069] netlink: 156 bytes leftover after parsing attributes in process `syz.1.253'. [ 46.088987][ T4069] netlink: 'syz.1.253': attribute type 21 has an invalid length. [ 46.096733][ T4069] netlink: 6 bytes leftover after parsing attributes in process `syz.1.253'. [ 46.164192][ T4080] loop2: detected capacity change from 0 to 1024 [ 46.172581][ T4080] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.183535][ T4080] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.196705][ T4080] JBD2: no valid journal superblock found [ 46.202574][ T4080] EXT4-fs (loop2): Could not load journal inode [ 46.897797][ T4158] 9pnet_fd: Insufficient options for proto=fd [ 46.940135][ T4163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4163 comm=syz.0.285 [ 46.952548][ T4163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4163 comm=syz.0.285 [ 47.176113][ T4197] loop9: detected capacity change from 0 to 7 [ 47.184472][ T4197] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.195194][ T4197] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.203117][ T4197] loop9: unable to read partition table [ 47.213307][ T4197] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 47.213307][ T4197] ) failed (rc=-5) [ 47.380530][ T4239] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 47.388881][ T4239] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 47.464432][ T4258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.321'. [ 47.474175][ T4259] loop9: detected capacity change from 0 to 7 [ 47.482000][ T4259] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.490204][ T4259] Buffer I/O error on dev loop9, logical block 0, async page read [ 47.498097][ T4259] loop9: unable to read partition table [ 47.524403][ T4259] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 47.524403][ T4259] ) failed (rc=-5) [ 47.583875][ T4278] loop3: detected capacity change from 0 to 1024 [ 47.620117][ T4278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.643324][ T4278] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 47.668223][ T4278] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.680594][ T4278] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.680594][ T4278] [ 47.690297][ T4278] EXT4-fs (loop3): Total free blocks count 0 [ 47.696312][ T4278] EXT4-fs (loop3): Free/Dirty block details [ 47.702310][ T4278] EXT4-fs (loop3): free_blocks=68451041280 [ 47.708162][ T4278] EXT4-fs (loop3): dirty_blocks=80 [ 47.713297][ T4278] EXT4-fs (loop3): Block reservation details [ 47.719325][ T4278] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 47.758959][ T4278] syz.3.316 (4278) used greatest stack depth: 9864 bytes left [ 47.776030][ T4285] mmap: syz.2.319 (4285) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.805602][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 48.034310][ T4327] 9pnet: Could not find request transport: t [ 48.092304][ T4340] netlink: 204 bytes leftover after parsing attributes in process `syz.2.333'. [ 48.101424][ T4340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.333'. [ 48.124430][ T4340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'. [ 48.176019][ T4349] netlink: 'syz.3.337': attribute type 13 has an invalid length. [ 48.232176][ T4362] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 48.322470][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.329695][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.440060][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.450319][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.512338][ T145] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.531759][ T145] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.540910][ T4403] pim6reg1: entered promiscuous mode [ 48.546233][ T4403] pim6reg1: entered allmulticast mode [ 48.558894][ T145] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.586871][ T145] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.723338][ T4416] program syz.2.351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.752277][ T4422] loop4: detected capacity change from 0 to 512 [ 48.759783][ T4422] EXT4-fs: Invalid want_extra_isize 107 [ 48.850690][ T4434] loop4: detected capacity change from 0 to 1024 [ 48.880402][ T4434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.943837][ T4434] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 48.985486][ T4434] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.997895][ T4434] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.997895][ T4434] [ 49.007587][ T4434] EXT4-fs (loop4): Total free blocks count 0 [ 49.013596][ T4434] EXT4-fs (loop4): Free/Dirty block details [ 49.019656][ T4434] EXT4-fs (loop4): free_blocks=68451041280 [ 49.025509][ T4434] EXT4-fs (loop4): dirty_blocks=80 [ 49.030661][ T4434] EXT4-fs (loop4): Block reservation details [ 49.036655][ T4434] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 49.059196][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 49.059212][ T29] audit: type=1400 audit(1758186112.430:492): avc: denied { open } for pid=4443 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.084667][ T29] audit: type=1400 audit(1758186112.430:493): avc: denied { kernel } for pid=4443 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.134989][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 49.139121][ T29] audit: type=1400 audit(1758186112.500:494): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.180379][ T4446] macvtap1: entered promiscuous mode [ 49.185812][ T4446] batadv0: entered promiscuous mode [ 49.204241][ T4446] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 49.213057][ T4446] batadv0: left promiscuous mode [ 49.315409][ T1035] IPVS: starting estimator thread 0... [ 49.365623][ T4466] netlink: 'syz.4.372': attribute type 10 has an invalid length. [ 49.386472][ T29] audit: type=1326 audit(1758186112.750:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4467 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755b34eba9 code=0x7ffc0000 [ 49.391983][ T4466] team0: Device hsr_slave_0 failed to register rx_handler [ 49.417581][ T4462] IPVS: using max 2352 ests per chain, 117600 per kthread [ 49.456528][ T29] audit: type=1326 audit(1758186112.790:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4467 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f755b34eba9 code=0x7ffc0000 [ 49.481333][ T29] audit: type=1326 audit(1758186112.790:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4467 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755b34eba9 code=0x7ffc0000 [ 49.504612][ T29] audit: type=1326 audit(1758186112.790:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4467 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755b34eba9 code=0x7ffc0000 [ 49.527932][ T29] audit: type=1326 audit(1758186112.790:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4467 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f755b34eba9 code=0x7ffc0000 [ 49.551311][ T29] audit: type=1326 audit(1758186112.790:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4467 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755b34eba9 code=0x7ffc0000 [ 49.574661][ T29] audit: type=1326 audit(1758186112.790:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4467 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f755b34eba9 code=0x7ffc0000 [ 49.626879][ T4470] SELinux: Context is not valid (left unmapped). [ 49.628513][ T4472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26216 sclass=netlink_route_socket pid=4472 comm=syz.4.375 [ 49.787578][ T4493] netlink: 'syz.1.380': attribute type 3 has an invalid length. [ 49.814368][ T4495] rdma_op ffff888119d93980 conn xmit_rdma 0000000000000000 [ 49.895163][ T4505] team0: Device gre1 is of different type [ 49.908376][ T4507] loop3: detected capacity change from 0 to 128 [ 49.943737][ T4507] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.064175][ T4507] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.216430][ T4542] process 'syz.0.408' launched '/dev/fd/5' with NULL argv: empty string added [ 50.359747][ T4550] loop2: detected capacity change from 0 to 512 [ 50.399374][ T4550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.428629][ T4550] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.522205][ T4550] capability: warning: `syz.2.411' uses deprecated v2 capabilities in a way that may be insecure [ 50.628689][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.631199][ T4566] netlink: 'syz.4.418': attribute type 11 has an invalid length. [ 50.645631][ T4566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.418'. [ 50.684363][ T4570] netlink: 'syz.4.420': attribute type 3 has an invalid length. [ 50.735564][ T4577] SELinux: failed to load policy [ 50.765457][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.391027][ T4648] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.423020][ T4648] FAT-fs (loop5): unable to read boot sector [ 51.465178][ T4628] ================================================================== [ 51.473308][ T4628] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 51.480873][ T4628] [ 51.483199][ T4628] read-write to 0xffff888237d25ea8 of 1 bytes by task 4653 on cpu 1: [ 51.491275][ T4628] folio_add_lru+0xa5/0x1f0 [ 51.495787][ T4628] folio_add_lru_vma+0x49/0x70 [ 51.500562][ T4628] do_wp_page+0x1458/0x24e0 [ 51.505106][ T4628] handle_mm_fault+0x77d/0x2c20 [ 51.509982][ T4628] do_user_addr_fault+0x636/0x1090 [ 51.515118][ T4628] exc_page_fault+0x62/0xa0 [ 51.519640][ T4628] asm_exc_page_fault+0x26/0x30 [ 51.524504][ T4628] [ 51.526854][ T4628] read to 0xffff888237d25ea8 of 1 bytes by task 4628 on cpu 0: [ 51.534397][ T4628] __lru_add_drain_all+0x12b/0x3f0 [ 51.539512][ T4628] lru_cache_disable+0x1f/0x30 [ 51.544282][ T4628] __se_sys_mbind+0x496/0xac0 [ 51.548975][ T4628] __x64_sys_mbind+0x78/0x90 [ 51.553582][ T4628] x64_sys_call+0x2932/0x2ff0 [ 51.558273][ T4628] do_syscall_64+0xd2/0x200 [ 51.562820][ T4628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.568736][ T4628] [ 51.571069][ T4628] value changed: 0x19 -> 0x1a [ 51.575749][ T4628] [ 51.578079][ T4628] Reported by Kernel Concurrency Sanitizer on: [ 51.584251][ T4628] CPU: 0 UID: 0 PID: 4628 Comm: syz.1.443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.593914][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 51.603973][ T4628] ==================================================================