last executing test programs: 1.393472423s ago: executing program 3 (id=262): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061) close(r2) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x8, &(0x7f0000000280)={[], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}]}, 0x0, 0x55b, &(0x7f0000000980)="$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") 1.285500604s ago: executing program 4 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) creat(0x0, 0x48) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1.229964045s ago: executing program 4 (id=269): socket$packet(0x11, 0x2, 0x300) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000000140)={0x0, 0xd, 0x0, @thr={&(0x7f0000000240), 0x0}}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) 1.199677855s ago: executing program 3 (id=270): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59251f4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) close_range(r0, r1, 0x0) 1.199246105s ago: executing program 4 (id=271): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 1.160877046s ago: executing program 1 (id=272): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x2, r0}, 0x38) 1.133936396s ago: executing program 3 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = epoll_create1(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 1.115964086s ago: executing program 1 (id=274): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="704002010189"], 0x6) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.098778786s ago: executing program 4 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x3, {0x1, 0x1, 0x4}, {0x0, 0x0, 0x4}, 0xfe, 0xfe}, {0x2, 0x3, {0x0, 0xff}, {0x2}, 0xff, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.076308936s ago: executing program 3 (id=276): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 961.661568ms ago: executing program 3 (id=277): syz_read_part_table(0x634, &(0x7f0000000000)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x40000000, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0xfffc, 0x0, 0xfffd, 0xfffe, 0xa}, {0xffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60}, {0x0, 0x7fffffffffffffff, 0x4}, 0x4, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x33}, 0xa, @in=@empty, 0x0, 0x4, 0x0, 0x0, 0x200}}, 0xe8) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 951.532768ms ago: executing program 1 (id=278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x1, 0x1}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 780.647741ms ago: executing program 1 (id=279): socket$inet6(0xa, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 677.380842ms ago: executing program 3 (id=280): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) 677.231732ms ago: executing program 0 (id=281): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800040000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 561.928183ms ago: executing program 0 (id=283): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc89, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) preadv(r3, 0x0, 0x0, 0x8, 0x4) 561.529053ms ago: executing program 0 (id=284): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_set_self_attr(0x68, 0x0, 0xc7, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @private=0xa010100}, 0x7ffffffe, 0x0, 0x2}}, 0x2e) 521.501404ms ago: executing program 2 (id=285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0xb) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000640)="980bcfe393059bae3f648ed47a483be27024e4dd506130bdfbcd2df1d38ec7fa1c341ccb083d3ff79d5bc4d28e2a61cc95e5c91b2b508136985bd117c1dff44ccbd4ab6f", 0x44}], 0x1) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 518.922664ms ago: executing program 0 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0x0, 0x3}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 500.256024ms ago: executing program 0 (id=287): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1400}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, 0xffffffffffffffff) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 448.464365ms ago: executing program 0 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000110000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r4, &(0x7f0000000180)=0x18a0000, 0x6399) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410e9) sendfile(r4, r3, 0x0, 0x100000000) 447.916705ms ago: executing program 2 (id=289): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 395.081966ms ago: executing program 2 (id=290): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) 279.480316ms ago: executing program 2 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149882, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r3, &(0x7f0000000e00)="49000080", 0x4, 0x4840, &(0x7f0000002400)={0x2, 0xfdfc, @multicast2}, 0x10) 211.550698ms ago: executing program 2 (id=292): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 188.283138ms ago: executing program 1 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 114.166939ms ago: executing program 2 (id=294): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r1, r1, 0x0, 0x40000f63c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 107.313069ms ago: executing program 4 (id=295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) migrate_pages(0x0, 0xf0ce, 0x0, 0x0) unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) statx(r2, 0x0, 0x1000, 0x2, &(0x7f0000000540)) 1.18917ms ago: executing program 4 (id=296): r0 = open(&(0x7f0000000000)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, r1, 0x0, 0x80001d00c0d0) 0s ago: executing program 1 (id=297): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59251f4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) close_range(r0, r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 24.727652][ T29] audit: type=1400 audit(1749034417.825:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.728375][ T3305] cgroup: Unknown subsys name 'net' [ 24.750370][ T29] audit: type=1400 audit(1749034417.825:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.777802][ T29] audit: type=1400 audit(1749034417.865:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.921571][ T3305] cgroup: Unknown subsys name 'cpuset' [ 24.927646][ T3305] cgroup: Unknown subsys name 'rlimit' [ 25.116212][ T29] audit: type=1400 audit(1749034418.215:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.140988][ T29] audit: type=1400 audit(1749034418.215:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.161485][ T29] audit: type=1400 audit(1749034418.215:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.181887][ T29] audit: type=1400 audit(1749034418.215:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.202511][ T29] audit: type=1400 audit(1749034418.225:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.210138][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.227305][ T29] audit: type=1400 audit(1749034418.225:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.259113][ T29] audit: type=1400 audit(1749034418.345:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 25.346666][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.419934][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.488637][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.516242][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 26.555107][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 26.589578][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 26.602389][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.609441][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.616625][ T3315] bridge_slave_0: entered allmulticast mode [ 26.622904][ T3315] bridge_slave_0: entered promiscuous mode [ 26.641879][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.648933][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.656217][ T3315] bridge_slave_1: entered allmulticast mode [ 26.662488][ T3315] bridge_slave_1: entered promiscuous mode [ 26.668572][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.675693][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.682813][ T3316] bridge_slave_0: entered allmulticast mode [ 26.689140][ T3316] bridge_slave_0: entered promiscuous mode [ 26.717366][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.724532][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.731852][ T3316] bridge_slave_1: entered allmulticast mode [ 26.738252][ T3316] bridge_slave_1: entered promiscuous mode [ 26.753061][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.768322][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.775417][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.782574][ T3322] bridge_slave_0: entered allmulticast mode [ 26.788953][ T3322] bridge_slave_0: entered promiscuous mode [ 26.797593][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.804802][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.811954][ T3322] bridge_slave_1: entered allmulticast mode [ 26.818321][ T3322] bridge_slave_1: entered promiscuous mode [ 26.825448][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.865113][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.875361][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.893815][ T3315] team0: Port device team_slave_0 added [ 26.899591][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.906790][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.914008][ T3323] bridge_slave_0: entered allmulticast mode [ 26.920554][ T3323] bridge_slave_0: entered promiscuous mode [ 26.927994][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.938029][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.951943][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.959122][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.966237][ T3320] bridge_slave_0: entered allmulticast mode [ 26.972601][ T3320] bridge_slave_0: entered promiscuous mode [ 26.979335][ T3315] team0: Port device team_slave_1 added [ 26.985294][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.992370][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.999438][ T3323] bridge_slave_1: entered allmulticast mode [ 27.005833][ T3323] bridge_slave_1: entered promiscuous mode [ 27.021038][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.028253][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.035487][ T3320] bridge_slave_1: entered allmulticast mode [ 27.041756][ T3320] bridge_slave_1: entered promiscuous mode [ 27.060298][ T3322] team0: Port device team_slave_0 added [ 27.078749][ T3316] team0: Port device team_slave_0 added [ 27.084778][ T3322] team0: Port device team_slave_1 added [ 27.091344][ T3316] team0: Port device team_slave_1 added [ 27.102199][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.109202][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.135212][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.146904][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.156227][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.163270][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.189316][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.210395][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.220473][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.241490][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.248727][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.274703][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.286546][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.301258][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.308204][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.334162][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.344969][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.351958][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.378533][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.405087][ T3323] team0: Port device team_slave_0 added [ 27.414472][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.421548][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.447491][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.459451][ T3320] team0: Port device team_slave_0 added [ 27.470253][ T3323] team0: Port device team_slave_1 added [ 27.489288][ T3320] team0: Port device team_slave_1 added [ 27.500687][ T3315] hsr_slave_0: entered promiscuous mode [ 27.506473][ T3315] hsr_slave_1: entered promiscuous mode [ 27.536059][ T3316] hsr_slave_0: entered promiscuous mode [ 27.542168][ T3316] hsr_slave_1: entered promiscuous mode [ 27.547898][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.555483][ T3316] Cannot create hsr debugfs directory [ 27.564211][ T3322] hsr_slave_0: entered promiscuous mode [ 27.570053][ T3322] hsr_slave_1: entered promiscuous mode [ 27.575810][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.583416][ T3322] Cannot create hsr debugfs directory [ 27.597833][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.604900][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.631896][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.643948][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.651060][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.676985][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.693421][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.700347][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.726514][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.745742][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.752741][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.778650][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.832774][ T3323] hsr_slave_0: entered promiscuous mode [ 27.838803][ T3323] hsr_slave_1: entered promiscuous mode [ 27.844537][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.852100][ T3323] Cannot create hsr debugfs directory [ 27.885010][ T3320] hsr_slave_0: entered promiscuous mode [ 27.891044][ T3320] hsr_slave_1: entered promiscuous mode [ 27.896980][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.904657][ T3320] Cannot create hsr debugfs directory [ 28.030126][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.038853][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.050989][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.059459][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.081117][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.089863][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.098530][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.111377][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.139396][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.149187][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.159446][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.167998][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.204947][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.214201][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.229419][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.242514][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.251684][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.286084][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.295571][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.305223][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.313243][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.323497][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.332512][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.341788][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.348891][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.368416][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.385217][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.392936][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.399988][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.417398][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.424542][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.438614][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.445714][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.473829][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.482659][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.502283][ T2741] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.509423][ T2741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.527367][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.538166][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.551942][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.559115][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.573320][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.591356][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.598445][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.623819][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.630973][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.680787][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.694311][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.703059][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.729671][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.759299][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.776677][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.783877][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.798965][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.812182][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.819367][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.837846][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.906456][ T3316] veth0_vlan: entered promiscuous mode [ 28.914442][ T3315] veth0_vlan: entered promiscuous mode [ 28.923600][ T3316] veth1_vlan: entered promiscuous mode [ 28.933538][ T3315] veth1_vlan: entered promiscuous mode [ 28.962819][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.992228][ T3316] veth0_macvtap: entered promiscuous mode [ 29.003630][ T3316] veth1_macvtap: entered promiscuous mode [ 29.014556][ T3315] veth0_macvtap: entered promiscuous mode [ 29.035994][ T3315] veth1_macvtap: entered promiscuous mode [ 29.049466][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.058522][ T3322] veth0_vlan: entered promiscuous mode [ 29.069640][ T3323] veth0_vlan: entered promiscuous mode [ 29.077477][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.090419][ T3322] veth1_vlan: entered promiscuous mode [ 29.098281][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.107150][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.116100][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.124827][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.139745][ T3323] veth1_vlan: entered promiscuous mode [ 29.148572][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.167081][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.191510][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.200384][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.209279][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.218130][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.229350][ T3323] veth0_macvtap: entered promiscuous mode [ 29.235431][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.253204][ T3322] veth0_macvtap: entered promiscuous mode [ 29.267081][ T3323] veth1_macvtap: entered promiscuous mode [ 29.289687][ T3322] veth1_macvtap: entered promiscuous mode [ 29.312607][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.329356][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.342417][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.342679][ C0] hrtimer: interrupt took 66089 ns [ 29.362140][ T3323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.370935][ T3323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.379867][ T3323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.388684][ T3323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.405910][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.435617][ T3322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.444528][ T3322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.445571][ T3457] ======================================================= [ 29.445571][ T3457] WARNING: The mand mount option has been deprecated and [ 29.445571][ T3457] and is ignored by this kernel. Remove the mand [ 29.445571][ T3457] option from the mount to silence this warning. [ 29.445571][ T3457] ======================================================= [ 29.453417][ T3322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.497004][ T3322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.509435][ T3320] veth0_vlan: entered promiscuous mode [ 29.530871][ T3320] veth1_vlan: entered promiscuous mode [ 29.555397][ T3320] veth0_macvtap: entered promiscuous mode [ 29.565118][ T3320] veth1_macvtap: entered promiscuous mode [ 29.592873][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.613982][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.661262][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.670174][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.679068][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.687854][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.708518][ T3470] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7'. [ 29.783192][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 29.783209][ T29] audit: type=1400 audit(1749034422.885:129): avc: denied { create } for pid=3475 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.841296][ T29] audit: type=1400 audit(1749034422.935:130): avc: denied { create } for pid=3482 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.846845][ T3483] tipc: Failed to remove unknown binding: 66,1,1/0:2109422907/2109422909 [ 29.893697][ T29] audit: type=1400 audit(1749034422.945:131): avc: denied { bind } for pid=3482 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.898688][ T3485] tipc: Failed to remove unknown binding: 66,1,1/0:2109422907/2109422909 [ 29.912868][ T29] audit: type=1400 audit(1749034422.945:132): avc: denied { setopt } for pid=3482 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.921271][ T3485] tipc: Failed to remove unknown binding: 66,1,1/0:2109422907/2109422909 [ 29.940468][ T29] audit: type=1400 audit(1749034422.965:133): avc: denied { ioctl } for pid=3480 comm="syz.1.21" path="socket:[3919]" dev="sockfs" ino=3919 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.973464][ T29] audit: type=1400 audit(1749034422.975:134): avc: denied { write } for pid=3480 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.992801][ T29] audit: type=1400 audit(1749034422.975:135): avc: denied { create } for pid=3475 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.012932][ T29] audit: type=1400 audit(1749034422.985:136): avc: denied { write } for pid=3475 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.033009][ T29] audit: type=1400 audit(1749034422.985:137): avc: denied { read } for pid=3475 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.055425][ T29] audit: type=1400 audit(1749034422.995:138): avc: denied { write } for pid=3482 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.169277][ T3488] loop1: detected capacity change from 0 to 1024 [ 30.210151][ T3488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.304853][ T3488] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 30.320301][ T3488] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 30.332720][ T3488] EXT4-fs (loop1): This should not happen!! Data will be lost [ 30.332720][ T3488] [ 30.342487][ T3488] EXT4-fs (loop1): Total free blocks count 0 [ 30.348493][ T3488] EXT4-fs (loop1): Free/Dirty block details [ 30.354439][ T3488] EXT4-fs (loop1): free_blocks=68451041280 [ 30.360377][ T3488] EXT4-fs (loop1): dirty_blocks=64 [ 30.365575][ T3488] EXT4-fs (loop1): Block reservation details [ 30.371647][ T3488] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 30.407221][ T3488] syz.1.12 (3488) used greatest stack depth: 9512 bytes left [ 30.453684][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.515259][ T3506] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 30.563728][ T3510] loop2: detected capacity change from 0 to 1024 [ 30.584950][ T3510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.599359][ T3512] loop0: detected capacity change from 0 to 1024 [ 30.609696][ T3512] EXT4-fs: Ignoring removed i_version option [ 30.651340][ T3512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.719637][ T3510] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.22: Allocating blocks 449-513 which overlap fs metadata [ 30.753612][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.787309][ T3509] EXT4-fs (loop2): pa ffff888106a4c070: logic 48, phys. 177, len 21 [ 30.795617][ T3509] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 30.850906][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.877997][ T3540] process 'syz.0.30' launched './file0' with NULL argv: empty string added [ 31.223232][ T3579] bond1: entered promiscuous mode [ 31.228349][ T3579] bond1: entered allmulticast mode [ 31.241624][ T3579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 31.273295][ T3579] bond1 (unregistering): Released all slaves [ 31.294608][ T3586] netlink: 'syz.2.51': attribute type 11 has an invalid length. [ 31.410482][ T3592] tipc: Can't bind to reserved service type 2 [ 31.662118][ T3622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 31.788723][ T3636] loop2: detected capacity change from 0 to 2048 [ 31.828614][ T3638] netlink: 'syz.1.71': attribute type 16 has an invalid length. [ 31.836358][ T3638] netlink: 'syz.1.71': attribute type 17 has an invalid length. [ 31.873496][ T3521] Alternate GPT is invalid, using primary GPT. [ 31.879905][ T3521] loop2: p2 p3 p7 [ 31.897848][ T3636] Alternate GPT is invalid, using primary GPT. [ 31.904250][ T3636] loop2: p2 p3 p7 [ 31.970105][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 31.972098][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 31.988121][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 32.009190][ T3646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 32.043267][ T3638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.245859][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 32.256971][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 32.268249][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 32.367916][ T3650] netlink: 'syz.2.76': attribute type 1 has an invalid length. [ 32.413365][ T3650] syz_tun: entered allmulticast mode [ 32.481268][ T3654] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 32.530542][ T3654] SELinux: failed to load policy [ 32.565183][ T3660] netlink: 'syz.0.79': attribute type 4 has an invalid length. [ 32.582420][ T3654] netlink: 'syz.1.77': attribute type 10 has an invalid length. [ 32.590119][ T3654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.77'. [ 32.607442][ T3660] netlink: 'syz.0.79': attribute type 4 has an invalid length. [ 32.631067][ T3654] dummy0: entered promiscuous mode [ 32.636851][ T3654] bridge0: port 3(dummy0) entered blocking state [ 32.643316][ T3654] bridge0: port 3(dummy0) entered disabled state [ 32.650111][ T3654] dummy0: entered allmulticast mode [ 32.657111][ T3654] bridge0: port 3(dummy0) entered blocking state [ 32.660401][ T3662] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 32.663583][ T3654] bridge0: port 3(dummy0) entered forwarding state [ 32.678872][ T3662] ref_ctr increment failed for inode: 0x7d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88811ac25080 [ 32.749039][ T3664] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 32.761094][ T3391] IPVS: starting estimator thread 0... [ 32.803834][ T3673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 32.812618][ T3673] netlink: 'syz.3.83': attribute type 5 has an invalid length. [ 32.820265][ T3673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'. [ 32.861164][ T3667] IPVS: using max 2352 ests per chain, 117600 per kthread [ 32.869701][ T3673] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 32.878460][ T3673] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 32.887243][ T3673] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 32.895908][ T3673] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 32.917990][ T3673] geneve2: entered promiscuous mode [ 32.923331][ T3673] geneve2: entered allmulticast mode [ 33.020662][ T3685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 33.031349][ T3681] wg2: entered promiscuous mode [ 33.037190][ T3681] wg2: entered allmulticast mode [ 33.167849][ T3694] loop4: detected capacity change from 0 to 128 [ 33.179029][ T3694] FAT-fs (loop4): error, invalid access to FAT (entry 0x0ffffff6) [ 33.191474][ T3696] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.245128][ T3696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.268360][ T3702] loop4: detected capacity change from 0 to 1024 [ 33.284481][ T3702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.299789][ T3696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.356272][ T3696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.417374][ T3696] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.430056][ T3696] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.444192][ T3696] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.459215][ T3696] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.493432][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.873376][ T3723] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.934039][ T3723] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.984736][ T3723] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.048791][ T3723] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.123407][ T3736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 34.140289][ T3736] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.149160][ T3736] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.157906][ T3736] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.166644][ T3736] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.176265][ T3736] vxlan0: entered promiscuous mode [ 34.497348][ T3744] loop4: detected capacity change from 0 to 128 [ 34.566151][ T3746] capability: warning: `syz.4.110' uses deprecated v2 capabilities in a way that may be insecure [ 34.613749][ T3750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 34.622647][ T3750] netlink: 'syz.4.112': attribute type 30 has an invalid length. [ 34.632650][ T3750] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.641532][ T3750] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.650249][ T3750] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.659187][ T3750] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.670176][ T3750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 34.678998][ T3750] netlink: 'syz.4.112': attribute type 30 has an invalid length. [ 34.731191][ T3750] Zero length message leads to an empty skb [ 34.754492][ T3753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3753 comm=syz.4.113 [ 34.784660][ T3755] geneve2: entered promiscuous mode [ 34.789980][ T3755] geneve2: entered allmulticast mode [ 34.880074][ T3758] loop0: detected capacity change from 0 to 128 [ 34.887757][ T3758] FAT-fs (loop0): error, invalid access to FAT (entry 0x0ffffff6) [ 34.961554][ T3764] loop1: detected capacity change from 0 to 1024 [ 34.974045][ T3764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.999960][ T3764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 35.022433][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.084971][ T3774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 35.192644][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 35.192660][ T29] audit: type=1400 audit(1749034428.295:357): avc: denied { create } for pid=3778 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.230709][ T29] audit: type=1400 audit(1749034428.325:358): avc: denied { connect } for pid=3778 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.294062][ T29] audit: type=1400 audit(1749034428.395:359): avc: denied { bind } for pid=3778 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.313234][ T29] audit: type=1400 audit(1749034428.395:360): avc: denied { read } for pid=3778 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.345594][ T29] audit: type=1400 audit(1749034428.445:361): avc: denied { write } for pid=3778 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.391924][ T3781] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 35.412939][ T3787] syz.0.127 uses obsolete (PF_INET,SOCK_PACKET) [ 35.426786][ T3787] tipc: Started in network mode [ 35.431820][ T3787] tipc: Node identity ac14140f, cluster identity 4711 [ 35.438967][ T3787] tipc: New replicast peer: 0.0.255.255 [ 35.444680][ T3787] tipc: Enabled bearer , priority 10 [ 35.778368][ T3798] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 35.799474][ T3798] SELinux: failed to load policy [ 35.817522][ T3798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.131'. [ 35.839634][ T3798] dummy0: entered promiscuous mode [ 35.840359][ T3796] Set syz1 is full, maxelem 65536 reached [ 35.851436][ T3798] bridge0: port 3(dummy0) entered blocking state [ 35.857857][ T3798] bridge0: port 3(dummy0) entered disabled state [ 35.864432][ T3798] dummy0: entered allmulticast mode [ 35.870732][ T3798] bridge0: port 3(dummy0) entered blocking state [ 35.877168][ T3798] bridge0: port 3(dummy0) entered forwarding state [ 35.953334][ T3800] futex_wake_op: syz.4.132 tries to shift op by -1; fix this program [ 36.032813][ T3804] loop0: detected capacity change from 0 to 1024 [ 36.060870][ T3804] EXT4-fs: Ignoring removed bh option [ 36.066489][ T3804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.092146][ T3804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.116145][ T29] audit: type=1400 audit(1749034429.215:362): avc: denied { read open } for pid=3803 comm="syz.0.134" path="/27/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.160549][ T29] audit: type=1400 audit(1749034429.215:363): avc: denied { write } for pid=3803 comm="syz.0.134" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.320051][ T3816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 36.329293][ T3816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 36.338240][ T3816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.362189][ T3816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.519612][ T3818] loop3: detected capacity change from 0 to 512 [ 36.533061][ T3818] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.546259][ T3818] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.561048][ T3392] tipc: Node number set to 2886997007 [ 36.649423][ T3818] EXT4-fs (loop3): 1 truncate cleaned up [ 36.655618][ T3818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.704147][ T3821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 36.808997][ T3824] mmap: syz.1.141 (3824) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.914544][ T29] audit: type=1400 audit(1749034430.005:364): avc: denied { read write } for pid=3827 comm="syz.4.142" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 36.938829][ T29] audit: type=1400 audit(1749034430.005:365): avc: denied { open } for pid=3827 comm="syz.4.142" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 37.118085][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.251178][ T29] audit: type=1400 audit(1749034430.345:366): avc: denied { create } for pid=3838 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 37.600023][ T3860] loop0: detected capacity change from 0 to 256 [ 37.609003][ T3860] FAT-fs (loop0): bogus number of FAT sectors [ 37.615257][ T3860] FAT-fs (loop0): Can't find a valid FAT filesystem [ 37.627328][ T3723] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.669264][ T3723] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.710770][ T3723] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.748608][ T3723] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.795225][ T3878] loop0: detected capacity change from 0 to 128 [ 37.797420][ T3818] syz.3.139 (3818) used greatest stack depth: 4832 bytes left [ 37.836670][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.951699][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 37.958281][ T3894] validate_nla: 3 callbacks suppressed [ 37.958324][ T3894] netlink: 'syz.3.167': attribute type 11 has an invalid length. [ 38.117056][ T3910] ALSA: seq fatal error: cannot create timer (-19) [ 38.358016][ T3929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.187'. [ 38.457215][ T3933] 9pnet: p9_errstr2errno: server reported unknown error @L O!L8iHѡ [ 38.472550][ T3934] loop2: detected capacity change from 0 to 128 [ 38.703960][ T3949] loop2: detected capacity change from 0 to 256 [ 38.711930][ T3949] FAT-fs (loop2): bogus number of FAT sectors [ 38.718044][ T3949] FAT-fs (loop2): Can't find a valid FAT filesystem [ 38.871605][ T3962] hub 9-0:1.0: USB hub found [ 38.887023][ T3962] hub 9-0:1.0: 8 ports detected [ 39.137627][ T3998] loop4: detected capacity change from 0 to 512 [ 39.186195][ T3998] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.229626][ T3998] EXT4-fs (loop4): 1 truncate cleaned up [ 39.237627][ T3998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.315013][ T4013] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.225'. [ 39.563921][ T4029] loop3: detected capacity change from 0 to 1024 [ 39.592617][ T4029] EXT4-fs: Ignoring removed nobh option [ 39.598231][ T4029] EXT4-fs: Ignoring removed nobh option [ 39.676683][ T4029] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 39.701215][ T4029] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.228: inode #4294967295: comm syz.3.228: iget: illegal inode # [ 39.715352][ T4029] EXT4-fs (loop3): no journal found [ 39.720578][ T4029] EXT4-fs (loop3): can't get journal size [ 39.734151][ T4029] EXT4-fs (loop3): failed to initialize system zone (-22) [ 39.747357][ T4029] EXT4-fs (loop3): mount failed [ 39.774556][ T4042] vcan0: entered allmulticast mode [ 39.779872][ T4042] vcan0: left allmulticast mode [ 40.048801][ T4039] syzkaller0: entered promiscuous mode [ 40.055103][ T4039] syzkaller0: entered allmulticast mode [ 40.068839][ T4046] tipc: Started in network mode [ 40.073832][ T4046] tipc: Node identity ac1414aa, cluster identity 4711 [ 40.080997][ T4046] tipc: Enabled bearer , priority 10 [ 40.087310][ T4049] tipc: Disabling bearer [ 40.096114][ T4050] pim6reg1: entered promiscuous mode [ 40.101501][ T4050] pim6reg1: entered allmulticast mode [ 40.209885][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.236583][ T4061] loop3: detected capacity change from 0 to 512 [ 40.255914][ T4061] EXT4-fs: Ignoring removed orlov option [ 40.282307][ T4070] ALSA: seq fatal error: cannot create timer (-22) [ 40.295487][ T4061] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 40.311809][ T4061] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 40.352886][ T4061] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.243: corrupted in-inode xattr: e_value size too large [ 40.385441][ T4080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 40.402716][ T4061] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.243: couldn't read orphan inode 15 (err -117) [ 40.443500][ T4061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.548464][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.570382][ T4085] loop2: detected capacity change from 0 to 512 [ 40.577364][ T4085] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.605196][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 40.605261][ T29] audit: type=1326 audit(1749034433.705:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27b31e929 code=0x7ffc0000 [ 40.634920][ T29] audit: type=1326 audit(1749034433.705:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27b31e929 code=0x7ffc0000 [ 40.701066][ T4085] EXT4-fs (loop2): 1 truncate cleaned up [ 40.707215][ T4085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.723447][ T29] audit: type=1326 audit(1749034433.705:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa27b31e929 code=0x7ffc0000 [ 40.746815][ T29] audit: type=1326 audit(1749034433.705:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27b31e929 code=0x7ffc0000 [ 40.770120][ T29] audit: type=1326 audit(1749034433.705:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa27b31e929 code=0x7ffc0000 [ 40.793384][ T29] audit: type=1326 audit(1749034433.705:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27b31e929 code=0x7ffc0000 [ 40.816717][ T29] audit: type=1326 audit(1749034433.705:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa27b31e929 code=0x7ffc0000 [ 40.839902][ T29] audit: type=1326 audit(1749034433.705:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4088 comm="syz.0.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27b31e929 code=0x7ffc0000 [ 40.972533][ T29] audit: type=1400 audit(1749034433.965:556): avc: denied { create } for pid=4084 comm="syz.2.251" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.992689][ T29] audit: type=1400 audit(1749034434.005:557): avc: denied { write } for pid=4104 comm="syz.3.258" name="tcp6" dev="proc" ino=4026532476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 41.077580][ T4114] loop3: detected capacity change from 0 to 1024 [ 41.116607][ T4114] ext4: Unknown parameter 'mask' [ 41.476426][ T4164] loop3: detected capacity change from 0 to 2048 [ 41.634859][ T4164] loop3: p1 < > p3 [ 41.641958][ T4164] loop3: p3 size 134217728 extends beyond EOD, truncated [ 41.681830][ T4149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 41.747897][ T4179] loop3: detected capacity change from 0 to 1024 [ 41.755796][ T4179] EXT4-fs: Ignoring removed bh option [ 41.761259][ T4179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.768992][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.780886][ T4179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.982625][ T4200] wg2: entered promiscuous mode [ 41.987556][ T4200] wg2: entered allmulticast mode [ 42.150196][ T4207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 42.264393][ T4209] pim6reg1: entered promiscuous mode [ 42.269795][ T4209] pim6reg1: entered allmulticast mode [ 42.388467][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 42.395168][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 42.402248][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 42.409187][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 42.416227][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 42.423222][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 42.432486][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 42.440203][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 42.448160][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 42.456704][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 42.485716][ T4179] ================================================================== [ 42.493857][ T4179] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 42.501892][ T4179] [ 42.504227][ T4179] write to 0xffff888106bbf254 of 4 bytes by task 4189 on cpu 0: [ 42.511879][ T4179] xas_set_mark+0x12b/0x140 [ 42.516419][ T4179] __folio_start_writeback+0x1dd/0x440 [ 42.521905][ T4179] ext4_bio_write_folio+0x5ad/0x9f0 [ 42.527130][ T4179] mpage_submit_folio+0xe4/0x170 [ 42.532112][ T4179] mpage_process_page_bufs+0x39b/0x4a0 [ 42.537610][ T4179] mpage_prepare_extent_to_map+0x741/0xaa0 [ 42.543450][ T4179] ext4_do_writepages+0xa1a/0x21c0 [ 42.548578][ T4179] ext4_writepages+0x176/0x300 [ 42.553352][ T4179] do_writepages+0x1c3/0x310 [ 42.558057][ T4179] file_write_and_wait_range+0x156/0x2c0 [ 42.563684][ T4179] generic_buffers_fsync_noflush+0x45/0x120 [ 42.569577][ T4179] ext4_sync_file+0x1ab/0x690 [ 42.574236][ T4179] vfs_fsync_range+0x10d/0x130 [ 42.578981][ T4179] ext4_buffered_write_iter+0x34f/0x3c0 [ 42.584522][ T4179] ext4_file_write_iter+0x383/0xf00 [ 42.589698][ T4179] iter_file_splice_write+0x5f2/0x970 [ 42.595052][ T4179] direct_splice_actor+0x153/0x2a0 [ 42.600149][ T4179] splice_direct_to_actor+0x30f/0x680 [ 42.605506][ T4179] do_splice_direct+0xda/0x150 [ 42.610250][ T4179] do_sendfile+0x380/0x650 [ 42.614648][ T4179] __x64_sys_sendfile64+0x105/0x150 [ 42.619847][ T4179] x64_sys_call+0xb39/0x2fb0 [ 42.624417][ T4179] do_syscall_64+0xd2/0x200 [ 42.628903][ T4179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.634775][ T4179] [ 42.637081][ T4179] read to 0xffff888106bbf254 of 4 bytes by task 4179 on cpu 1: [ 42.644599][ T4179] __writeback_single_inode+0x1f9/0x7c0 [ 42.650127][ T4179] writeback_single_inode+0x167/0x3e0 [ 42.655481][ T4179] sync_inode_metadata+0x5b/0x90 [ 42.660400][ T4179] generic_buffers_fsync_noflush+0xd9/0x120 [ 42.666278][ T4179] ext4_sync_file+0x1ab/0x690 [ 42.670937][ T4179] vfs_fsync_range+0x10d/0x130 [ 42.675780][ T4179] ext4_buffered_write_iter+0x34f/0x3c0 [ 42.681321][ T4179] ext4_file_write_iter+0x383/0xf00 [ 42.686526][ T4179] iter_file_splice_write+0x5f2/0x970 [ 42.691892][ T4179] direct_splice_actor+0x153/0x2a0 [ 42.697009][ T4179] splice_direct_to_actor+0x30f/0x680 [ 42.702373][ T4179] do_splice_direct+0xda/0x150 [ 42.707157][ T4179] do_sendfile+0x380/0x650 [ 42.711567][ T4179] __x64_sys_sendfile64+0x105/0x150 [ 42.716869][ T4179] x64_sys_call+0xb39/0x2fb0 [ 42.721449][ T4179] do_syscall_64+0xd2/0x200 [ 42.725974][ T4179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.731857][ T4179] [ 42.734174][ T4179] value changed: 0x0a000021 -> 0x04000021 [ 42.739868][ T4179] [ 42.742179][ T4179] Reported by Kernel Concurrency Sanitizer on: [ 42.748320][ T4179] CPU: 1 UID: 0 PID: 4179 Comm: syz.3.280 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(voluntary) [ 42.760285][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.770319][ T4179] ================================================================== [ 42.799602][ T4222] netlink: '+}[@': attribute type 12 has an invalid length. [ 42.980592][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.