last executing test programs: 886.482706ms ago: executing program 3 (id=4): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x37, 0xfffffffe, 0x7f}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @remote}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)='veth0_vlan\x00', 0x8, 0xe, 0x8}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x588, &(0x7f0000000bc0)="$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") socket$inet6_udp(0xa, 0x2, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="59fdd4", 0xfdef}], 0x1, 0x8, 0x365) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000240)={0xc, 0x27, 0x11, 0x17, 0x4, 0x4, 0x5, 0x11a}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000380)={0x90000018}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 810.116837ms ago: executing program 1 (id=2): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, 0x0, 0x20000010) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newsa={0x14c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x80, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x8, 0x100000001, 0x6, 0x0, 0x6}, {0x0, 0x3, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0xa, 0x4}, [@algo_aead={0x5b, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x78, 0x80, "e30c4a833114d85163740408cffe3c"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendfile(r4, r4, 0x0, 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0xfffffffc, 0x0, {0x4}}, 0x14}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x8000000}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) syz_emit_ethernet(0x2a, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d66642cf266646e6f3d", @ANYRESHEX, @ANYBLOB="66e454098c3b22f4e2bfd9418f2662ab34c933bdae1199e25bd35356d19c17a4abdc5cd06a23432ca7c031d425640371103b10720035d800689b6147f9ce4666817aacf89db3aaf816ef354061b4d39edf036995fc60f55736e5e4ce4638fa12a54663313b82d0b6c90ba82c51eb88b7442cb60aec35ed91ac3f9d8d17cb", @ANYRES8=0x0]) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) 370.904684ms ago: executing program 4 (id=5): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 358.788004ms ago: executing program 2 (id=3): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f0000000200)=[{0x0}], 0x1) 310.165195ms ago: executing program 4 (id=6): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket$pptp(0x18, 0x1, 0x2) open_by_handle_at(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="20000000620000005afb0000000000000700000000000000000000030100000008000023e56b8f84c80000000000"], 0x321b01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x44, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000340), 0x9, 0x4000) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)="f2aa83431a185d27284863b27da0cb5896bae75f0fdf7b2c5f21a4b21b49443337142499a9e812477ac135262d0af0ae3426e3cdf91a1043959964a9e76c4241a44d67105f188e05217ee6afd569510eaba6837cca8fa9946ee564fe87633356c4d13461b71594122c0d00b4fd3c064612aaef2a5787d0cfc3d4f1fc31c44c346cf98924560efcf02878c577f629aa054d8fc3b5deed0d20a10e91bc17f72469a1d89e739065f988db5e3fdf5f37e6f6ef75ebf90f2b0358576ca217aace155f847db0bc2d958aa462fb94968ce9c0e9cefef6677a0f9e70665dbb017dae479deb3e38798abdc0364220d2b2f4d62bc78fc52afb579cdf", 0xf7}, {&(0x7f0000000700)="7566733766f91bf9d4fcf822f3afb3b6b507d1b47cb1b05fb5678470883bee49ca099b3bb686e32f7de3a67a7f290bf75dc1f7ba95b35b4f063b85c20f3ec22e66c2810079eb8b8d733495d1845cee83297f1b4689c60d7f08174ab3250de5bbe598104d5eefac7fb3045bc326fca520db4018402e11a75e9df1db1ecbd669e4da2d5d66dd35963ae259020dc4efb3ecb96153fe69c57eb88e4c3d269f7fbc5ad8164b5c1517264a8a1277bdce52872811aff10181509670d4036c4d0f88a6a1c956d20a09c516a539f75a3a5b", 0xcd}, {&(0x7f0000000800)="ef2b04ccf1ee52abfbff43a22c7e4eaa2096968ab6d6c20254eacc35e4a54820794d6ae8a062bab7ee7de483d857d828114ec3e4f476be8586751857a17fe0281759bf4c76e2684aefbe649de9f38e89fe6aaa584c2c7f04d3379ccae70b60368e11165e269aff08ab92273601e0c4ef97562be68be869dbec692c5b0809b99ad57c19f7379bbcb076c1dc777b376d045f0365543d7b7190c32230a7db4d55486d6238dca6f5a993de", 0xa9}, {&(0x7f00000008c0)="ef851e4ad3f7895c746525cbf747daee6645989e0a08384e14115b7907db7413505a891796a1ce963f0e12e5c9ee65cb2bc1fda20aad7f9d6bc0beaac654a121523c38eb26981225574621cad18c19015f3c95a755c793d9501c7006cf917e2b0a1f5fc8a620f050015ee8dcd0520e3f9255f7142116c04090036586b832d7d95586b4d9dd91448e51413b592b7ee2de0bb4b518087085a9dbe4ecaa7e96a11baff9eb833fc127d5abfb6018071d54ee424bee23208a536a421a2b766c4d473b3b4d691b370cc05efc11d838813550e86d440096a28c2d", 0xd7}], 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="b00000000000000029000000370000008712000000000000075000000000120503000900000000000000000000000000000002000000000000000900000000000000ffffffff00000000040000000000000074ce000000000000080000000000000000000080000000000001000740000000000e02d07d01000000000000000900000000000000a44d00000000000004000000000000000200000000000000100000000000000000000000000000000048000000000000002900000039000000000602bb00000000fe8000000000000000000000000000bbfe800000000000000000000000000024fe8000000000000000000000000000aaf0010000000000002900000004000000043a00000000000004010107100000000202070008010100000000000009b2557f6edb7b8e6ff28926a2d9d0fda686a3dbaf448e19c4fea75c184abf806d90f50fb9b6150941051c7f6038832be1836ee368a2f461c0b6c9c7b566b8283f466d11e4657121cd6ca03509ee9ba78bd61eee88c0952b62589d8450110cccc3b5b8ec8db68a040e85f2ae5e94127bc443ff26326767c4896292cfb99ebb3f44c5eb15d236b03c0879aba19533d812f2e6c3497b7983404ef65115908b142931de433db6fc0625d2cede503d2dbb7cd82e58e90740000000030e8d0000070000000000000003000000000000000000000000000000b200000000000000ff0700000000000004000000000000000800000000000000fabdf1ba7da90adf96166115453a5143e165c8d55e9bf3ea0c00b2839c76982b2efb59ab4601b4ccaadff859b82004db1d054f49fc9f949077acda78ae268a52d564a517267af6a50ca68bd4b23712d9b2955d4b74ac3046a3fc10f4469844c3dcf45e76816a0f4c05ba171ecbaa0a4aa177595eb0b0954027c271a5a2a4ff4e18b2d8d877e120cc1f39fc5ffca5d04ec92d5e3732f2c563d5629a140509862884455b8da1ff8d5e58b70c81e49b40ce07ca16c39230f97493e387fe83745b050200070401f4000000000000001400000000000000290000003e000000de080000000000002400000000000000290000003200000020010000000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="00000000c00000000000000029000000370000001d140000000000000730000000030aee00000600000000000000000000000000000003000000000000000700000000000000ffffffffffffffff1c72c3b30131572b57642099291f79421bf9aa0f8e22038627d449a18534cf84994f4f5c5b972404a2dd3fb6605be61907720f2e550c6d8b128aaa763274cc51fdf97e3e8fe0b9f89ca8b0d1445208a23fc95a3ece1f89f061256cdf0ec1928f8dea61d23cb95c987fd1b1d13710c7d92753861a00002400000000000000290000003200000000000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYBLOB="0000000095881544e585d7e4123c1df315"], 0x410}}], 0x1, 0x90) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x130, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6fd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20040850}, 0x810) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r11, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 247.498506ms ago: executing program 2 (id=7): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000780)=0x5, 0x3) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) sync_file_range(r3, 0x4000000008, 0x3ff, 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) socket$rds(0x15, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0xfffffffc, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "80031f0000000200"}, 0x38) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801fbffffff0000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5008051}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x30, r11, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4004) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 246.907066ms ago: executing program 0 (id=1): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 246.050096ms ago: executing program 3 (id=8): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x1, 0x2, 0x2, 0x1, 0xffffffffffffffe0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) r1 = syz_io_uring_setup(0x409d, &(0x7f0000000980)={0x0, 0xf7a4, 0x80, 0x0, 0xe3}, &(0x7f0000000940)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x1e, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4, 0x1}) r4 = socket(0x1e, 0x2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/63, 0x3f, 0x0, &(0x7f0000000380)=""/90, 0x5a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=0x0, @ANYRESDEC=r6], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x17, 0x22, &(0x7f0000000780)=@raw=[@generic={0x3, 0x0, 0x2, 0x8, 0xbe}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @ldst={0x0, 0x2, 0x3, 0x9, 0xb, 0x4, 0xfffffffffffffffc}, @tail_call, @tail_call, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x256f}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000500)='GPL\x00', 0x40, 0x8f, &(0x7f0000000a00)=""/143, 0x41100, 0x2e, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xd, 0x7a, 0x7fff}, 0x10, r6, r0, 0x0, 0x0, &(0x7f00000008c0), 0x10, 0x8, @void, @value}, 0x94) write(r5, &(0x7f0000000300)="1400000052004f030e78937ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x6a381) 244.702176ms ago: executing program 1 (id=9): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xd, &(0x7f0000000ac0)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x88}, 0x1, 0x0, 0x0, 0x44000}, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r5, 0x26, &(0x7f00000031c0)={0x1}) 0s ago: executing program 2 (id=10): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x1002, 0x4) sendto$inet(r1, 0x0, 0x0, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x88}, 0x1, 0x0, 0x0, 0x44000}, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r5, 0x26, &(0x7f00000031c0)={0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 28.684698][ T29] audit: type=1400 audit(1750753633.002:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.685913][ T3294] cgroup: Unknown subsys name 'net' [ 28.707463][ T29] audit: type=1400 audit(1750753633.002:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.734911][ T29] audit: type=1400 audit(1750753633.032:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.886079][ T3294] cgroup: Unknown subsys name 'cpuset' [ 28.892384][ T3294] cgroup: Unknown subsys name 'rlimit' [ 29.083572][ T29] audit: type=1400 audit(1750753633.402:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.106958][ T29] audit: type=1400 audit(1750753633.402:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.127454][ T29] audit: type=1400 audit(1750753633.402:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.147980][ T29] audit: type=1400 audit(1750753633.412:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.168324][ T29] audit: type=1400 audit(1750753633.422:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.177437][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.193175][ T29] audit: type=1400 audit(1750753633.422:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.225371][ T29] audit: type=1400 audit(1750753633.552:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 29.309090][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.487980][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 31.538808][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 31.576892][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.584041][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.591225][ T3311] bridge_slave_0: entered allmulticast mode [ 31.597833][ T3311] bridge_slave_0: entered promiscuous mode [ 31.624757][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.631976][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.639232][ T3311] bridge_slave_1: entered allmulticast mode [ 31.645860][ T3311] bridge_slave_1: entered promiscuous mode [ 31.672958][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.680132][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.687297][ T3304] bridge_slave_0: entered allmulticast mode [ 31.693817][ T3304] bridge_slave_0: entered promiscuous mode [ 31.706464][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.732224][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.739350][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.747060][ T3304] bridge_slave_1: entered allmulticast mode [ 31.753748][ T3304] bridge_slave_1: entered promiscuous mode [ 31.761233][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.785929][ T3311] team0: Port device team_slave_0 added [ 31.807057][ T3311] team0: Port device team_slave_1 added [ 31.812845][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 31.823051][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.832334][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 31.842316][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.852895][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.902946][ T3304] team0: Port device team_slave_0 added [ 31.909386][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.916407][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.942366][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.965006][ T3304] team0: Port device team_slave_1 added [ 31.971035][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.978134][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.004250][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.049682][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.056709][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.082773][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.110983][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.118017][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.143975][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.162084][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.169316][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.176540][ T3305] bridge_slave_0: entered allmulticast mode [ 32.183043][ T3305] bridge_slave_0: entered promiscuous mode [ 32.201735][ T3311] hsr_slave_0: entered promiscuous mode [ 32.207761][ T3311] hsr_slave_1: entered promiscuous mode [ 32.218961][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.226084][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.233367][ T3305] bridge_slave_1: entered allmulticast mode [ 32.239792][ T3305] bridge_slave_1: entered promiscuous mode [ 32.252251][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.259424][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.266702][ T3308] bridge_slave_0: entered allmulticast mode [ 32.273225][ T3308] bridge_slave_0: entered promiscuous mode [ 32.280356][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.287570][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.294721][ T3308] bridge_slave_1: entered allmulticast mode [ 32.301155][ T3308] bridge_slave_1: entered promiscuous mode [ 32.307758][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.314837][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.322146][ T3313] bridge_slave_0: entered allmulticast mode [ 32.328762][ T3313] bridge_slave_0: entered promiscuous mode [ 32.335574][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.342695][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.349885][ T3313] bridge_slave_1: entered allmulticast mode [ 32.356521][ T3313] bridge_slave_1: entered promiscuous mode [ 32.388476][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.408558][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.427936][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.438258][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.449299][ T3304] hsr_slave_0: entered promiscuous mode [ 32.455528][ T3304] hsr_slave_1: entered promiscuous mode [ 32.461395][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.469020][ T3304] Cannot create hsr debugfs directory [ 32.475535][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.497903][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.525024][ T3305] team0: Port device team_slave_0 added [ 32.536850][ T3313] team0: Port device team_slave_0 added [ 32.550923][ T3308] team0: Port device team_slave_0 added [ 32.561583][ T3305] team0: Port device team_slave_1 added [ 32.576334][ T3313] team0: Port device team_slave_1 added [ 32.590312][ T3308] team0: Port device team_slave_1 added [ 32.613544][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.620671][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.646822][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.662959][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.670038][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.696034][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.712038][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.719073][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.745063][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.758845][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.765895][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.791887][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.802843][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.809950][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.835911][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.849305][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.856325][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.882480][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.950310][ T3313] hsr_slave_0: entered promiscuous mode [ 32.956422][ T3313] hsr_slave_1: entered promiscuous mode [ 32.962293][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.969911][ T3313] Cannot create hsr debugfs directory [ 32.982338][ T3308] hsr_slave_0: entered promiscuous mode [ 32.988447][ T3308] hsr_slave_1: entered promiscuous mode [ 32.994209][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.001921][ T3308] Cannot create hsr debugfs directory [ 33.014467][ T3305] hsr_slave_0: entered promiscuous mode [ 33.020883][ T3305] hsr_slave_1: entered promiscuous mode [ 33.026966][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.034525][ T3305] Cannot create hsr debugfs directory [ 33.120581][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.139010][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.164820][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.182873][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.235514][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.248871][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.262848][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.276998][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.307243][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.316454][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.327686][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.339640][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.376891][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.386760][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.399255][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.411748][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.451252][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.458790][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.467613][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.482645][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.492106][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.505083][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.531804][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.552050][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.559215][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.581022][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.588912][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.597906][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.605113][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.630153][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.637310][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.656187][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.665062][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.674842][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.681947][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.699982][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.718898][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.726050][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.735034][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.742228][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.751060][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.758187][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.780136][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.787356][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.808411][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.822940][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.833652][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.862785][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.891617][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.898781][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.944401][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.951562][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.978714][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.990389][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.028323][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.086890][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.109054][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.173013][ T3304] veth0_vlan: entered promiscuous mode [ 34.192908][ T3304] veth1_vlan: entered promiscuous mode [ 34.232851][ T3305] veth0_vlan: entered promiscuous mode [ 34.251939][ T3308] veth0_vlan: entered promiscuous mode [ 34.261657][ T3304] veth0_macvtap: entered promiscuous mode [ 34.273031][ T3305] veth1_vlan: entered promiscuous mode [ 34.295084][ T3305] veth0_macvtap: entered promiscuous mode [ 34.302193][ T3304] veth1_macvtap: entered promiscuous mode [ 34.314821][ T3308] veth1_vlan: entered promiscuous mode [ 34.332865][ T3311] veth0_vlan: entered promiscuous mode [ 34.339447][ T3305] veth1_macvtap: entered promiscuous mode [ 34.358128][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.369551][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.381427][ T3304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.390270][ T3304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.399071][ T3304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.407853][ T3304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.419385][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.433913][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.442460][ T3311] veth1_vlan: entered promiscuous mode [ 34.450438][ T3313] veth0_vlan: entered promiscuous mode [ 34.456623][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.465434][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.474146][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.482950][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.500227][ T3308] veth0_macvtap: entered promiscuous mode [ 34.521771][ T3308] veth1_macvtap: entered promiscuous mode [ 34.531731][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 34.531746][ T29] audit: type=1400 audit(1750753638.852:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.zD8OlP/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.563024][ T29] audit: type=1400 audit(1750753638.852:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.585089][ T29] audit: type=1400 audit(1750753638.852:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.zD8OlP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.610385][ T29] audit: type=1400 audit(1750753638.852:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.632204][ T29] audit: type=1400 audit(1750753638.852:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.zD8OlP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.658926][ T29] audit: type=1400 audit(1750753638.852:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.zD8OlP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.686313][ T29] audit: type=1400 audit(1750753638.852:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.705904][ T29] audit: type=1400 audit(1750753638.892:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.730215][ T29] audit: type=1400 audit(1750753638.892:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.762047][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.768498][ T3313] veth1_vlan: entered promiscuous mode [ 34.785859][ T3311] veth0_macvtap: entered promiscuous mode [ 34.797540][ T3311] veth1_macvtap: entered promiscuous mode [ 34.799537][ T29] audit: type=1400 audit(1750753639.122:90): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.810411][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.840731][ T3313] veth0_macvtap: entered promiscuous mode [ 34.853000][ T3385] IPVS: starting estimator thread 0... [ 34.862072][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.878943][ T3313] veth1_macvtap: entered promiscuous mode [ 34.904070][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.914172][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.924564][ T3475] loop3: detected capacity change from 0 to 1024 [ 34.926575][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.939820][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.940042][ T3475] ======================================================= [ 34.940042][ T3475] WARNING: The mand mount option has been deprecated and [ 34.940042][ T3475] and is ignored by this kernel. Remove the mand [ 34.940042][ T3475] option from the mount to silence this warning. [ 34.940042][ T3475] ======================================================= [ 34.948589][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.948623][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.957863][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.983688][ T3476] IPVS: using max 1968 ests per chain, 98400 per kthread [ 35.030953][ T3308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.039843][ T3308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.048772][ T3308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.057543][ T3308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.066016][ T3475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.084427][ T3489] 9pnet_fd: Insufficient options for proto=fd [ 35.132510][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.150482][ T3475] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.169927][ T3313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.179009][ T3313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.187883][ T3313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.196813][ T3313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.218267][ T3475] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 35.234262][ T3475] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 35.246780][ T3475] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.246780][ T3475] [ 35.256472][ T3475] EXT4-fs (loop3): Total free blocks count 0 [ 35.262508][ T3475] EXT4-fs (loop3): Free/Dirty block details [ 35.268451][ T3475] EXT4-fs (loop3): free_blocks=4293918720 [ 35.274190][ T3475] EXT4-fs (loop3): dirty_blocks=48 [ 35.279376][ T3475] EXT4-fs (loop3): Block reservation details [ 35.285418][ T3475] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 35.345029][ T3475] syz.3.4 (3475) used greatest stack depth: 9976 bytes left [ 35.418163][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.728236][ T3537] ================================================================== [ 35.736367][ T3537] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe [ 35.743675][ T3537] [ 35.746000][ T3537] read-write to 0xffff8881199cf210 of 4 bytes by task 3538 on cpu 0: [ 35.754063][ T3537] io_issue_sqe+0x19c/0x970 [ 35.758577][ T3537] io_wq_submit_work+0x3f7/0x5f0 [ 35.763523][ T3537] io_worker_handle_work+0x44e/0x9b0 [ 35.768818][ T3537] io_wq_worker+0x22e/0x870 [ 35.773329][ T3537] ret_from_fork+0xda/0x150 [ 35.777837][ T3537] ret_from_fork_asm+0x1a/0x30 [ 35.782604][ T3537] [ 35.784927][ T3537] read to 0xffff8881199cf210 of 4 bytes by task 3537 on cpu 1: [ 35.792473][ T3537] io_flush_timeouts+0x56/0x1d0 [ 35.797335][ T3537] __io_commit_cqring_flush+0xeb/0x100 [ 35.802805][ T3537] io_issue_sqe+0x7cb/0x970 [ 35.807317][ T3537] io_wq_submit_work+0x3f7/0x5f0 [ 35.812266][ T3537] io_worker_handle_work+0x44e/0x9b0 [ 35.817562][ T3537] io_wq_worker+0x22e/0x870 [ 35.822074][ T3537] ret_from_fork+0xda/0x150 [ 35.826578][ T3537] ret_from_fork_asm+0x1a/0x30 [ 35.831346][ T3537] [ 35.833666][ T3537] value changed: 0x0000038d -> 0x0000038e [ 35.839375][ T3537] [ 35.841697][ T3537] Reported by Kernel Concurrency Sanitizer on: [ 35.847858][ T3537] CPU: 1 UID: 0 PID: 3537 Comm: iou-wrk-3518 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(voluntary) [ 35.860448][ T3537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.870508][ T3537] ================================================================== [ 36.409470][ T3519] syz.4.6 (3519) used greatest stack depth: 6752 bytes left