last executing test programs: 1.396716162s ago: executing program 4 (id=1520): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 1.206219806s ago: executing program 3 (id=1525): socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.205499376s ago: executing program 3 (id=1527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf51, 0x10000, 0x4002, 0x2031f}, &(0x7f00000000c0), &(0x7f00000003c0)) io_uring_enter(r1, 0x3f84, 0xd9f9, 0x3, 0x0, 0x0) io_uring_enter(r1, 0x5148, 0xe93c, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.168873627s ago: executing program 2 (id=1528): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000042010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) 1.138012908s ago: executing program 0 (id=1529): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x597, &(0x7f0000000dc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.137318888s ago: executing program 2 (id=1530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendfile(r2, r2, 0x0, 0x800000009) 1.133033337s ago: executing program 0 (id=1531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 1.113353888s ago: executing program 2 (id=1532): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='mm_page_free\x00', r1, 0x0, 0x80}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 1.112722338s ago: executing program 0 (id=1533): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) 989.23236ms ago: executing program 2 (id=1535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000f0000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 937.856531ms ago: executing program 2 (id=1536): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) shutdown(r1, 0x1) 937.312461ms ago: executing program 0 (id=1537): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=';', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) 776.034915ms ago: executing program 0 (id=1538): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 775.551464ms ago: executing program 2 (id=1539): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) 757.008275ms ago: executing program 3 (id=1540): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 743.760065ms ago: executing program 0 (id=1541): socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) 696.044036ms ago: executing program 3 (id=1542): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x597, &(0x7f0000000dc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 646.221017ms ago: executing program 3 (id=1543): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r1) 538.500319ms ago: executing program 4 (id=1544): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r1, 0x409, 0xb) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) 484.0446ms ago: executing program 3 (id=1545): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x7}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 343.569323ms ago: executing program 4 (id=1548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 282.700534ms ago: executing program 4 (id=1549): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0x0, 0x0) 215.464275ms ago: executing program 1 (id=1550): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x12, 0x200, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) dup2(r1, r0) 184.121266ms ago: executing program 1 (id=1551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 166.100196ms ago: executing program 4 (id=1552): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x122d, &(0x7f0000003540)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 107.926717ms ago: executing program 1 (id=1553): r0 = socket(0x28, 0x5, 0x0) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 90.606318ms ago: executing program 1 (id=1554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 73.793058ms ago: executing program 4 (id=1555): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 49.137729ms ago: executing program 1 (id=1556): socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1557): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0xfffffffffffffdf4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. [ 23.543621][ T29] audit: type=1400 audit(1757103238.583:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.544449][ T3291] cgroup: Unknown subsys name 'net' [ 23.566432][ T29] audit: type=1400 audit(1757103238.583:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.594331][ T29] audit: type=1400 audit(1757103238.613:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.770472][ T3291] cgroup: Unknown subsys name 'cpuset' [ 23.776553][ T3291] cgroup: Unknown subsys name 'rlimit' [ 23.925735][ T29] audit: type=1400 audit(1757103238.963:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.949864][ T29] audit: type=1400 audit(1757103238.963:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.970372][ T29] audit: type=1400 audit(1757103238.963:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.990790][ T29] audit: type=1400 audit(1757103238.963:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.997575][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.011109][ T29] audit: type=1400 audit(1757103238.973:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.044539][ T29] audit: type=1400 audit(1757103238.973:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.067902][ T29] audit: type=1400 audit(1757103239.063:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.101949][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.883927][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 25.946645][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 25.986810][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 26.002319][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 26.021736][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.028831][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.036339][ T3301] bridge_slave_0: entered allmulticast mode [ 26.042897][ T3301] bridge_slave_0: entered promiscuous mode [ 26.053766][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.067085][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.074228][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.081417][ T3301] bridge_slave_1: entered allmulticast mode [ 26.087625][ T3301] bridge_slave_1: entered promiscuous mode [ 26.138681][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.145846][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.153078][ T3302] bridge_slave_0: entered allmulticast mode [ 26.159417][ T3302] bridge_slave_0: entered promiscuous mode [ 26.168886][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.179269][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.195250][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.202446][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.209689][ T3302] bridge_slave_1: entered allmulticast mode [ 26.216071][ T3302] bridge_slave_1: entered promiscuous mode [ 26.255589][ T3301] team0: Port device team_slave_0 added [ 26.262078][ T3301] team0: Port device team_slave_1 added [ 26.272565][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.279691][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.286940][ T3306] bridge_slave_0: entered allmulticast mode [ 26.293511][ T3306] bridge_slave_0: entered promiscuous mode [ 26.300277][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.307842][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.315270][ T3306] bridge_slave_1: entered allmulticast mode [ 26.321546][ T3306] bridge_slave_1: entered promiscuous mode [ 26.332693][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.339821][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.347025][ T3305] bridge_slave_0: entered allmulticast mode [ 26.353524][ T3305] bridge_slave_0: entered promiscuous mode [ 26.378487][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.387852][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.395006][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.402437][ T3305] bridge_slave_1: entered allmulticast mode [ 26.408877][ T3305] bridge_slave_1: entered promiscuous mode [ 26.419228][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.426256][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.452189][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.462925][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.470405][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.477598][ T3311] bridge_slave_0: entered allmulticast mode [ 26.483932][ T3311] bridge_slave_0: entered promiscuous mode [ 26.494764][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.508947][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.515993][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.542085][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.560136][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.567255][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.574445][ T3311] bridge_slave_1: entered allmulticast mode [ 26.580767][ T3311] bridge_slave_1: entered promiscuous mode [ 26.587734][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.602359][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.621178][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.635734][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.647098][ T3301] hsr_slave_0: entered promiscuous mode [ 26.653221][ T3301] hsr_slave_1: entered promiscuous mode [ 26.667944][ T3302] team0: Port device team_slave_0 added [ 26.682730][ T3305] team0: Port device team_slave_0 added [ 26.689345][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.703576][ T3306] team0: Port device team_slave_0 added [ 26.709941][ T3302] team0: Port device team_slave_1 added [ 26.716645][ T3305] team0: Port device team_slave_1 added [ 26.723248][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.736947][ T3306] team0: Port device team_slave_1 added [ 26.768020][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.775055][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.800954][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.820852][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.827813][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.853764][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.864930][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.872218][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.898185][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.918015][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.924987][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.950945][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.961915][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.968850][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.994765][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.008194][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.015192][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.041103][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.052435][ T3311] team0: Port device team_slave_0 added [ 27.078931][ T3311] team0: Port device team_slave_1 added [ 27.113850][ T3302] hsr_slave_0: entered promiscuous mode [ 27.119801][ T3302] hsr_slave_1: entered promiscuous mode [ 27.125712][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 27.131521][ T3302] Cannot create hsr debugfs directory [ 27.137369][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.144344][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.170457][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.198022][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.205014][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.231018][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.246068][ T3305] hsr_slave_0: entered promiscuous mode [ 27.252137][ T3305] hsr_slave_1: entered promiscuous mode [ 27.257931][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 27.263695][ T3305] Cannot create hsr debugfs directory [ 27.275521][ T3306] hsr_slave_0: entered promiscuous mode [ 27.281999][ T3306] hsr_slave_1: entered promiscuous mode [ 27.287751][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 27.293538][ T3306] Cannot create hsr debugfs directory [ 27.335345][ T3311] hsr_slave_0: entered promiscuous mode [ 27.341393][ T3311] hsr_slave_1: entered promiscuous mode [ 27.347234][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.353100][ T3311] Cannot create hsr debugfs directory [ 27.478002][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.496920][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.505191][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.516659][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.547126][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.555813][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.569235][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.581371][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.604684][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.615248][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.631482][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.640650][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.671160][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.687251][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.697272][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.711821][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.720823][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.746735][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.763253][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.776686][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.783818][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.793000][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.810604][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.817749][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.826633][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.836975][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.847676][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.868316][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.882286][ T1778] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.889494][ T1778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.908556][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.921740][ T1778] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.928830][ T1778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.946062][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.959636][ T2492] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.966723][ T2492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.985783][ T2492] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.992901][ T2492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.020872][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.034635][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.055679][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.068824][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.086702][ T1778] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.093853][ T1778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.109140][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.116258][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.144073][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.157540][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.185010][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.204713][ T1778] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.211813][ T1778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.227927][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.235035][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.255497][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.305959][ T3301] veth0_vlan: entered promiscuous mode [ 28.327845][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.359226][ T3301] veth1_vlan: entered promiscuous mode [ 28.378552][ T3305] veth0_vlan: entered promiscuous mode [ 28.393898][ T3305] veth1_vlan: entered promiscuous mode [ 28.416077][ T3301] veth0_macvtap: entered promiscuous mode [ 28.431033][ T3305] veth0_macvtap: entered promiscuous mode [ 28.447925][ T3301] veth1_macvtap: entered promiscuous mode [ 28.461262][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.468784][ T3305] veth1_macvtap: entered promiscuous mode [ 28.493824][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.502977][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.512453][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.521997][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.539722][ T3306] veth0_vlan: entered promiscuous mode [ 28.551200][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.565296][ T3302] veth0_vlan: entered promiscuous mode [ 28.581726][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.590537][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.606648][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.616566][ T3306] veth1_vlan: entered promiscuous mode [ 28.625832][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.639698][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 28.639710][ T29] audit: type=1400 audit(1757103243.673:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.ca21AW/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.676097][ T29] audit: type=1400 audit(1757103243.683:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.680213][ T3302] veth1_vlan: entered promiscuous mode [ 28.698162][ T29] audit: type=1400 audit(1757103243.683:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.ca21AW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.720320][ T3306] veth0_macvtap: entered promiscuous mode [ 28.728647][ T29] audit: type=1400 audit(1757103243.683:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.737823][ T3306] veth1_macvtap: entered promiscuous mode [ 28.756067][ T29] audit: type=1400 audit(1757103243.683:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.ca21AW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.764829][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.788281][ T29] audit: type=1400 audit(1757103243.683:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.ca21AW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.802718][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.824277][ T29] audit: type=1400 audit(1757103243.683:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.833768][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.850952][ T29] audit: type=1400 audit(1757103243.713:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.875274][ T3302] veth0_macvtap: entered promiscuous mode [ 28.882282][ T29] audit: type=1400 audit(1757103243.713:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=3652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.898399][ T3311] veth0_vlan: entered promiscuous mode [ 28.917536][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.921925][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.942891][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.950890][ T3302] veth1_macvtap: entered promiscuous mode [ 28.959221][ T29] audit: type=1400 audit(1757103243.983:90): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.985164][ T3311] veth1_vlan: entered promiscuous mode [ 29.004114][ T1778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.016141][ T1778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.029009][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.046501][ T3311] veth0_macvtap: entered promiscuous mode [ 29.055782][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.069365][ T1778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.101543][ T1778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.114605][ T1778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.123762][ T1778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.142415][ T3311] veth1_macvtap: entered promiscuous mode [ 29.157365][ T1778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.196487][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.205515][ T1778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.205662][ T3478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 29.251317][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.293366][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.320776][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.350829][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.372547][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.383356][ T3490] SELinux: ebitmap: truncated map [ 29.389348][ T3490] SELinux: failed to load policy [ 29.526327][ T3511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.560891][ T3511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.742573][ T3506] syz.2.16 (3506) used greatest stack depth: 10896 bytes left [ 29.866310][ T3538] process 'syz.2.28' launched './file1' with NULL argv: empty string added [ 29.930022][ T3540] mmap: syz.0.29 (3540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.951922][ T3542] loop2: detected capacity change from 0 to 1024 [ 29.963166][ T3542] ======================================================= [ 29.963166][ T3542] WARNING: The mand mount option has been deprecated and [ 29.963166][ T3542] and is ignored by this kernel. Remove the mand [ 29.963166][ T3542] option from the mount to silence this warning. [ 29.963166][ T3542] ======================================================= [ 30.029527][ T3542] EXT4-fs: Ignoring removed bh option [ 30.041414][ T3544] netlink: 96 bytes leftover after parsing attributes in process `syz.0.31'. [ 30.085000][ T3542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.157440][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.181964][ T3557] syz.3.35 (3557) used greatest stack depth: 10816 bytes left [ 30.251546][ T3511] syz.4.18 (3511) used greatest stack depth: 10584 bytes left [ 30.319620][ T3577] netlink: 'syz.0.44': attribute type 39 has an invalid length. [ 30.327992][ T3573] SELinux: failed to load policy [ 30.356696][ T3581] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.445339][ T3590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 30.492674][ T3597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 30.498786][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.510554][ T3377] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 30.864811][ T3636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3636 comm=syz.2.72 [ 30.927676][ T3646] futex_wake_op: syz.1.77 tries to shift op by -1; fix this program [ 31.089098][ T3668] loop1: detected capacity change from 0 to 512 [ 31.096684][ T3668] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.109781][ T3668] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.136634][ T3668] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.166626][ T3668] EXT4-fs (loop1): 1 truncate cleaned up [ 31.189677][ T3668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.232526][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.310740][ T3686] loop1: detected capacity change from 0 to 1024 [ 31.337316][ T3686] EXT4-fs: Ignoring removed orlov option [ 31.354125][ T3686] EXT4-fs: dax option not supported [ 31.480320][ T3695] syz.4.95 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.798577][ T3726] capability: warning: `syz.3.106' uses deprecated v2 capabilities in a way that may be insecure [ 33.657678][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 33.657713][ T29] audit: type=1400 audit(1757103248.693:390): avc: denied { connect } for pid=3855 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 33.756456][ T3861] syz.1.138 uses obsolete (PF_INET,SOCK_PACKET) [ 33.766007][ T29] audit: type=1400 audit(1757103248.693:391): avc: denied { write } for pid=3855 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 33.872380][ T3871] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.139'. [ 33.881639][ T3871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 33.903252][ T29] audit: type=1400 audit(1757103248.933:392): avc: denied { setopt } for pid=3870 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 34.199385][ T3892] netlink: 36 bytes leftover after parsing attributes in process `syz.2.150'. [ 34.285223][ T29] audit: type=1400 audit(1757103249.323:393): avc: denied { create } for pid=3893 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.348428][ T3896] ref_ctr increment failed for inode: 0xa3 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005f300 [ 34.360653][ T3895] uprobe: syz.1.152:3895 failed to unregister, leaking uprobe [ 34.383480][ C0] hrtimer: interrupt took 28488 ns [ 34.410236][ T29] audit: type=1400 audit(1757103249.453:394): avc: denied { name_connect } for pid=3904 comm="syz.3.155" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 34.445978][ T29] audit: type=1400 audit(1757103249.483:395): avc: denied { read } for pid=3906 comm="syz.2.157" dev="nsfs" ino=4026532691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.467218][ T29] audit: type=1400 audit(1757103249.483:396): avc: denied { open } for pid=3906 comm="syz.2.157" path="net:[4026532691]" dev="nsfs" ino=4026532691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.490323][ T29] audit: type=1400 audit(1757103249.483:397): avc: denied { create } for pid=3906 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 34.518390][ T29] audit: type=1326 audit(1757103249.553:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 34.541944][ T29] audit: type=1326 audit(1757103249.553:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 34.612249][ T3911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 34.659802][ T3923] loop0: detected capacity change from 0 to 2048 [ 34.673036][ T3923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.727707][ T3933] loop4: detected capacity change from 0 to 512 [ 34.737903][ T3933] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.751573][ T3933] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.762566][ T3933] EXT4-fs (loop4): 1 truncate cleaned up [ 34.768559][ T3933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.929083][ T3939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 34.950469][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.002358][ T3945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 35.345569][ T3981] loop2: detected capacity change from 0 to 512 [ 35.387170][ T3981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.423562][ T3981] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.424805][ T3994] loop3: detected capacity change from 0 to 764 [ 35.441656][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 35.473390][ T3994] rock: directory entry would overflow storage [ 35.479582][ T3994] rock: sig=0x4f50, size=4, remaining=3 [ 35.485202][ T3994] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 35.501327][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.547102][ T4010] loop0: detected capacity change from 0 to 764 [ 35.679984][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.702354][ T4026] syzkaller0: refused to change device tx_queue_len [ 35.877235][ T4041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4041 comm=syz.4.197 [ 35.919612][ T4046] loop1: detected capacity change from 0 to 128 [ 35.926563][ T4046] msdos: Unknown parameter 'dot–' [ 36.166671][ T4071] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.179196][ T4071] Zero length message leads to an empty skb [ 36.355770][ T4097] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 36.617434][ T4127] loop2: detected capacity change from 0 to 1024 [ 36.637524][ T4127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.673123][ T4127] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.223: Allocating blocks 449-513 which overlap fs metadata [ 36.724855][ T4126] EXT4-fs (loop2): pa ffff88810048c0e0: logic 48, phys. 177, len 21 [ 36.732984][ T4126] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 36.787442][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.988422][ T4171] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 37.016939][ T4172] syzkaller0: entered allmulticast mode [ 37.028293][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 37.064498][ T4179] ref_ctr increment failed for inode: 0xeb offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888100059140 [ 37.076695][ T4179] ref_ctr increment failed for inode: 0xeb offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888100059140 [ 37.089413][ T4175] uprobe: syz.4.243:4175 failed to unregister, leaking uprobe [ 37.098453][ T4172] syzkaller0 (unregistering): left allmulticast mode [ 37.264709][ T4175] uprobe: syz.4.243:4175 failed to unregister, leaking uprobe [ 37.267598][ T4191] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 37.286917][ T4191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.314127][ T4191] bond1: (slave veth3): Enslaving as an active interface with a down link [ 37.333391][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 37.341544][ T4191] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 37.865205][ T4237] loop3: detected capacity change from 0 to 128 [ 38.042196][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 38.096217][ T4259] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 38.096217][ T4259] program syz.2.276 not setting count and/or reply_len properly [ 38.315014][ T4284] syz.3.288 (4284) used greatest stack depth: 10528 bytes left [ 38.366388][ T4290] loop1: detected capacity change from 0 to 1024 [ 38.373329][ T4290] EXT4-fs: Ignoring removed nobh option [ 38.378899][ T4290] EXT4-fs: Ignoring removed bh option [ 38.395913][ T4290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.424227][ T4290] EXT4-fs (loop1): shut down requested (2) [ 38.432935][ T4290] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 38.443149][ T4290] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 38.452214][ T4290] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 38.461357][ T4290] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 38.478033][ T4290] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 38.486968][ T4290] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 38.510314][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.611563][ T4316] netlink: 'syz.3.301': attribute type 12 has an invalid length. [ 38.911268][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 38.911282][ T29] audit: type=1400 audit(1757103253.953:552): avc: denied { mount } for pid=4337 comm="syz.3.311" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 38.962167][ T29] audit: type=1400 audit(1757103253.983:553): avc: denied { search } for pid=4337 comm="syz.3.311" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.962197][ T29] audit: type=1400 audit(1757103253.983:554): avc: denied { search } for pid=4337 comm="syz.3.311" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.962218][ T29] audit: type=1400 audit(1757103253.983:555): avc: denied { read open } for pid=4337 comm="syz.3.311" path="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.962240][ T29] audit: type=1400 audit(1757103253.993:556): avc: denied { search } for pid=4337 comm="syz.3.311" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.054570][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 39.082743][ T4347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'. [ 39.091768][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 39.113749][ T4347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.314'. [ 39.122698][ T4347] netlink: 'syz.3.314': attribute type 6 has an invalid length. [ 39.145016][ T29] audit: type=1400 audit(1757103254.173:557): avc: denied { create } for pid=4350 comm="syz.4.315" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.165616][ T29] audit: type=1326 audit(1757103254.173:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 39.188952][ T29] audit: type=1326 audit(1757103254.173:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 39.212506][ T29] audit: type=1400 audit(1757103254.173:560): avc: denied { write } for pid=4350 comm="syz.4.315" name="file0" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.234856][ T29] audit: type=1326 audit(1757103254.173:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 39.333533][ T4362] loop0: detected capacity change from 0 to 164 [ 39.351470][ T4362] Unable to read rock-ridge attributes [ 39.358401][ T4362] Unable to read rock-ridge attributes [ 39.539755][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.547346][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.554868][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.562496][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.569944][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.577323][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.584819][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.592455][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.599917][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.607309][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.731513][ T4385] __nla_validate_parse: 1 callbacks suppressed [ 39.731538][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 39.759616][ T4385] bridge_slave_1: left allmulticast mode [ 39.765357][ T4385] bridge_slave_1: left promiscuous mode [ 39.771298][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.841577][ T4385] bridge_slave_0: left allmulticast mode [ 39.847310][ T4385] bridge_slave_0: left promiscuous mode [ 39.853039][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.885250][ T3377] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.889155][ T4383] syz.4.330 (4383) used greatest stack depth: 10176 bytes left [ 39.988201][ T4388] fido_id[4388]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.063171][ T4382] Set syz1 is full, maxelem 65536 reached [ 40.116052][ T4394] futex_wake_op: syz.0.334 tries to shift op by -1; fix this program [ 40.171833][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 40.681147][ T4434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'. [ 41.076146][ T4450] loop4: detected capacity change from 0 to 512 [ 41.146224][ T4450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.211383][ T4450] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.231873][ T4463] loop2: detected capacity change from 0 to 128 [ 41.262141][ T4463] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 41.293740][ T4463] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.340049][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.408570][ T4474] loop1: detected capacity change from 0 to 512 [ 41.479591][ T4474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.500278][ T4474] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.511826][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.523483][ T4474] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.366: corrupted inode contents [ 41.537677][ T4474] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.366: mark_inode_dirty error [ 41.561067][ T4474] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.366: corrupted inode contents [ 41.580069][ T4474] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.366: mark_inode_dirty error [ 41.668538][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.714987][ T4493] sd 0:0:1:0: device reset [ 41.924495][ T4505] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 41.940023][ T4505] SELinux: failed to load policy [ 42.336509][ T4531] loop2: detected capacity change from 0 to 512 [ 42.394935][ T4531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.445910][ T4531] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.545943][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.804733][ T4559] syzkaller0: entered allmulticast mode [ 42.832481][ T4559] syzkaller0 (unregistering): left allmulticast mode [ 42.884196][ T4563] netlink: 'syz.4.400': attribute type 39 has an invalid length. [ 42.917346][ T4568] random: crng reseeded on system resumption [ 42.935025][ T4565] loop2: detected capacity change from 0 to 2048 [ 42.962288][ T4565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.133165][ T4581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.408'. [ 43.135116][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.186022][ T4583] netlink: 96 bytes leftover after parsing attributes in process `syz.2.409'. [ 43.197319][ T4580] netlink: 'syz.3.408': attribute type 2 has an invalid length. [ 43.198046][ T4585] SELinux: ebitmap: truncated map [ 43.211417][ T4585] SELinux: failed to load policy [ 43.286451][ T4587] netlink: 256 bytes leftover after parsing attributes in process `syz.2.411'. [ 43.374533][ T4606] random: crng reseeded on system resumption [ 43.422357][ T4610] syzkaller0: entered allmulticast mode [ 43.447343][ T4610] syzkaller0 (unregistering): left allmulticast mode [ 43.511269][ T4617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.424'. [ 43.543890][ T4617] netlink: 'syz.2.424': attribute type 2 has an invalid length. [ 43.555950][ T4622] netlink: 96 bytes leftover after parsing attributes in process `syz.1.426'. [ 43.763169][ T4670] syzkaller0: entered allmulticast mode [ 43.773616][ T4670] syzkaller0 (unregistering): left allmulticast mode [ 44.096249][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 44.096264][ T29] audit: type=1326 audit(1757103259.133:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4700 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 44.129278][ T29] audit: type=1326 audit(1757103259.163:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4700 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 44.152570][ T29] audit: type=1326 audit(1757103259.163:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4700 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 44.175860][ T29] audit: type=1326 audit(1757103259.163:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4700 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 44.200371][ T29] audit: type=1326 audit(1757103259.233:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4700 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 44.223672][ T29] audit: type=1326 audit(1757103259.243:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4700 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 44.247106][ T29] audit: type=1326 audit(1757103259.243:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4700 comm="syz.3.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 44.278584][ T4705] ref_ctr increment failed for inode: 0x20a offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888104629140 [ 44.298088][ T4704] uprobe: syz.2.461:4704 failed to unregister, leaking uprobe [ 44.424037][ T4712] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 44.459494][ T4712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.494631][ T4712] bond1: (slave veth5): Enslaving as an active interface with a down link [ 44.555809][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 44.565298][ T4712] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 44.595029][ T29] audit: type=1326 audit(1757103259.633:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 44.618592][ T29] audit: type=1326 audit(1757103259.633:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 44.641899][ T29] audit: type=1326 audit(1757103259.633:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.0.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 44.759491][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 44.768579][ T4734] bridge_slave_1: left allmulticast mode [ 44.774245][ T4734] bridge_slave_1: left promiscuous mode [ 44.779994][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.788419][ T4734] bridge_slave_0: left allmulticast mode [ 44.794218][ T4734] bridge_slave_0: left promiscuous mode [ 44.799972][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.884265][ T4743] loop4: detected capacity change from 0 to 512 [ 44.939765][ T4743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.952457][ T4743] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.979220][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.370183][ T4787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.444682][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 45.491209][ T4807] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.508'. [ 45.702410][ T4846] netlink: 52 bytes leftover after parsing attributes in process `syz.2.534'. [ 45.766855][ T4851] netlink: 'syz.3.524': attribute type 13 has an invalid length. [ 45.993344][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.000566][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.022646][ T4875] netlink: 'syz.0.539': attribute type 39 has an invalid length. [ 46.056098][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.066281][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.118673][ T4873] tipc: Started in network mode [ 46.123853][ T4873] tipc: Node identity ac14140f, cluster identity 4711 [ 46.133602][ T4873] tipc: New replicast peer: 255.255.255.255 [ 46.139734][ T4873] tipc: Enabled bearer , priority 10 [ 46.146832][ T4875] veth1_macvtap: left promiscuous mode [ 46.157472][ T3765] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.166772][ T3765] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.176712][ T3765] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.188370][ T3765] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.202390][ T4880] ref_ctr increment failed for inode: 0x246 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810462ed40 [ 46.214058][ T4879] uprobe: syz.1.541:4879 failed to unregister, leaking uprobe [ 46.218005][ T4883] netlink: 52 bytes leftover after parsing attributes in process `syz.0.543'. [ 46.247984][ T4885] syz.3.544: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 46.262560][ T4885] CPU: 0 UID: 0 PID: 4885 Comm: syz.3.544 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.262662][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.262713][ T4885] Call Trace: [ 46.262719][ T4885] [ 46.262727][ T4885] __dump_stack+0x1d/0x30 [ 46.262785][ T4885] dump_stack_lvl+0xe8/0x140 [ 46.262904][ T4885] dump_stack+0x15/0x1b [ 46.262920][ T4885] warn_alloc+0x12b/0x1a0 [ 46.262955][ T4885] __vmalloc_node_range_noprof+0x9c/0xe00 [ 46.263099][ T4885] ? __futex_wait+0x1ff/0x260 [ 46.263134][ T4885] ? __pfx_futex_wake_mark+0x10/0x10 [ 46.263166][ T4885] ? __rcu_read_unlock+0x4f/0x70 [ 46.263189][ T4885] ? avc_has_perm_noaudit+0x1b1/0x200 [ 46.263293][ T4885] ? should_fail_ex+0x30/0x280 [ 46.263317][ T4885] ? xskq_create+0x36/0xe0 [ 46.263345][ T4885] vmalloc_user_noprof+0x7d/0xb0 [ 46.263458][ T4885] ? xskq_create+0x80/0xe0 [ 46.263502][ T4885] xskq_create+0x80/0xe0 [ 46.263574][ T4885] xsk_init_queue+0x95/0xf0 [ 46.263642][ T4885] xsk_setsockopt+0x477/0x640 [ 46.263671][ T4885] ? __pfx_xsk_setsockopt+0x10/0x10 [ 46.263731][ T4885] __sys_setsockopt+0x184/0x200 [ 46.263762][ T4885] __x64_sys_setsockopt+0x64/0x80 [ 46.263792][ T4885] x64_sys_call+0x20ec/0x2ff0 [ 46.263870][ T4885] do_syscall_64+0xd2/0x200 [ 46.263949][ T4885] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.263974][ T4885] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.264002][ T4885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.264023][ T4885] RIP: 0033:0x7f667f21ebe9 [ 46.264055][ T4885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.264073][ T4885] RSP: 002b:00007f667dc87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 46.264097][ T4885] RAX: ffffffffffffffda RBX: 00007f667f455fa0 RCX: 00007f667f21ebe9 [ 46.264120][ T4885] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 46.264133][ T4885] RBP: 00007f667f2a1e19 R08: 0000000000000004 R09: 0000000000000000 [ 46.264151][ T4885] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 46.264168][ T4885] R13: 00007f667f456038 R14: 00007f667f455fa0 R15: 00007ffcbc11ab88 [ 46.264246][ T4885] [ 46.264264][ T4885] Mem-Info: [ 46.488968][ T4885] active_anon:3384 inactive_anon:1 isolated_anon:0 [ 46.488968][ T4885] active_file:8428 inactive_file:2447 isolated_file:0 [ 46.488968][ T4885] unevictable:0 dirty:309 writeback:0 [ 46.488968][ T4885] slab_reclaimable:3129 slab_unreclaimable:45626 [ 46.488968][ T4885] mapped:28780 shmem:192 pagetables:904 [ 46.488968][ T4885] sec_pagetables:0 bounce:0 [ 46.488968][ T4885] kernel_misc_reclaimable:0 [ 46.488968][ T4885] free:1868778 free_pcp:11716 free_cma:0 [ 46.533801][ T4885] Node 0 active_anon:13536kB inactive_anon:4kB active_file:33712kB inactive_file:9788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115120kB dirty:1236kB writeback:0kB shmem:768kB kernel_stack:3968kB pagetables:3616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 46.561398][ T4885] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 46.590191][ T4885] lowmem_reserve[]: 0 2883 7862 7862 [ 46.595690][ T4885] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 46.626063][ T4885] lowmem_reserve[]: 0 0 4978 4978 [ 46.631275][ T4885] Node 0 Normal free:4510464kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13420kB inactive_anon:20kB active_file:33760kB inactive_file:9720kB unevictable:0kB writepending:1256kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:43112kB local_pcp:13040kB free_cma:0kB [ 46.663477][ T4885] lowmem_reserve[]: 0 0 0 0 [ 46.667989][ T4885] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 46.680777][ T4885] Node 0 DMA32: 4*4kB (M) 5*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 46.696907][ T4885] Node 0 Normal: 898*4kB (UME) 505*8kB (ME) 257*16kB (UME) 134*32kB (UM) 78*64kB (UME) 44*128kB (UM) 19*256kB (UM) 4*512kB (UME) 14*1024kB (UM) 7*2048kB (UME) 1086*4096kB (M) = 4510496kB [ 46.715526][ T4885] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 46.724822][ T4885] 11080 total pagecache pages [ 46.729553][ T4885] 21 pages in swap cache [ 46.733804][ T4885] Free swap = 124912kB [ 46.737974][ T4885] Total swap = 124996kB [ 46.742128][ T4885] 2097051 pages RAM [ 46.745928][ T4885] 0 pages HighMem/MovableOnly [ 46.750593][ T4885] 80446 pages reserved [ 46.822604][ T4902] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.552'. [ 47.054344][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 47.063397][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 47.139928][ T3390] tipc: Node number set to 2886997007 [ 47.181436][ T4929] ref_ctr increment failed for inode: 0x278 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005ed40 [ 47.194123][ T4928] uprobe: syz.3.562:4928 failed to unregister, leaking uprobe [ 47.291752][ T4946] netlink: 'syz.2.569': attribute type 13 has an invalid length. [ 47.379326][ T4946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.389169][ T4946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.454581][ T41] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.474355][ T41] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.485042][ T41] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.494496][ T41] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.598901][ T4971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.581'. [ 47.789569][ T4997] block device autoloading is deprecated and will be removed. [ 48.029384][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118d84400: rx timeout, send abort [ 48.038206][ T5023] SELinux: ebitmap: truncated map [ 48.044485][ T5023] SELinux: failed to load policy [ 48.110545][ T5032] netlink: 'syz.0.605': attribute type 10 has an invalid length. [ 48.158987][ T5032] team0: Port device dummy0 added [ 48.191734][ T5036] netlink: 'syz.0.605': attribute type 10 has an invalid length. [ 48.202462][ T5036] team0: Port device dummy0 removed [ 48.210451][ T5036] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.241485][ T5041] Driver unsupported XDP return value 0 on prog (id 513) dev N/A, expect packet loss! [ 48.428050][ T5055] tipc: Started in network mode [ 48.433106][ T5055] tipc: Node identity ac14140f, cluster identity 4711 [ 48.440431][ T5055] tipc: New replicast peer: 255.255.255.255 [ 48.446475][ T5055] tipc: Enabled bearer , priority 10 [ 48.538424][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118d84400: abort rx timeout. Force session deactivation [ 48.613786][ T5066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.622852][ T5066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.651721][ T5069] pim6reg: entered allmulticast mode [ 48.657573][ T5069] pim6reg: left allmulticast mode [ 48.767445][ T5080] loop0: detected capacity change from 0 to 2048 [ 48.791836][ T5080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.808258][ T5080] tipc: Started in network mode [ 48.813247][ T5080] tipc: Node identity ac14140f, cluster identity 4711 [ 48.822364][ T5080] tipc: New replicast peer: 255.255.255.255 [ 48.828489][ T5080] tipc: Enabled bearer , priority 10 [ 48.847384][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.035268][ T5104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.637'. [ 49.106341][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 49.106354][ T29] audit: type=1326 audit(1757103264.143:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 49.143417][ T29] audit: type=1326 audit(1757103264.183:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 49.166788][ T29] audit: type=1326 audit(1757103264.183:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 49.190198][ T29] audit: type=1326 audit(1757103264.183:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 49.213605][ T29] audit: type=1326 audit(1757103264.183:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 49.252097][ T29] audit: type=1326 audit(1757103264.183:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 49.275614][ T29] audit: type=1326 audit(1757103264.183:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 49.299098][ T29] audit: type=1326 audit(1757103264.183:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 49.322428][ T29] audit: type=1326 audit(1757103264.183:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 49.345824][ T29] audit: type=1326 audit(1757103264.183:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5110 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 49.436764][ T5114] netlink: 'syz.0.641': attribute type 13 has an invalid length. [ 49.463188][ T5119] SELinux: ebitmap: truncated map [ 49.472257][ T5119] SELinux: failed to load policy [ 49.485761][ T5123] netlink: 'syz.3.646': attribute type 10 has an invalid length. [ 49.536446][ T5126] netlink: 'syz.3.646': attribute type 10 has an invalid length. [ 49.563968][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.571365][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.579946][ T36] tipc: Node number set to 2886997007 [ 49.667838][ T5114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.678761][ T5114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.749378][ T5123] team0: Port device dummy0 added [ 49.766727][ T5126] team0: Port device dummy0 removed [ 49.785340][ T3824] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.794463][ T3824] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.803866][ T3824] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.813554][ T5123] syz.3.646 (5123) used greatest stack depth: 10112 bytes left [ 49.826934][ T3824] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.939894][ T3377] tipc: Node number set to 2886997007 [ 49.956322][ T5140] block device autoloading is deprecated and will be removed. [ 49.981575][ T5142] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.655'. [ 50.035606][ T3377] hid_parser_main: 16 callbacks suppressed [ 50.035623][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.049005][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.056448][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.074897][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.082575][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.090108][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.097510][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.104959][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.112371][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.119754][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.135443][ T3377] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 50.194707][ T5154] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 50.313398][ T5165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.665'. [ 50.358935][ T5172] netlink: 96 bytes leftover after parsing attributes in process `syz.3.667'. [ 50.454621][ T5189] netlink: 48 bytes leftover after parsing attributes in process `syz.0.675'. [ 50.517165][ T5196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 50.568903][ T5202] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 50.981519][ T5227] loop2: detected capacity change from 0 to 1024 [ 50.990908][ T5227] EXT4-fs: Ignoring removed bh option [ 50.999370][ T5227] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.015136][ T5227] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 51.024895][ T5227] System zones: 0-1, 3-12 [ 51.038677][ T5227] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.694: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.054946][ T5227] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.694: Failed to acquire dquot type 0 [ 51.067867][ T5227] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.694: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.083135][ T5227] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.694: Invalid inode bitmap blk 0 in block_group 0 [ 51.097157][ T5227] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 51.107202][ T3765] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.123434][ T5227] EXT4-fs (loop2): 1 orphan inode deleted [ 51.132256][ T5227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.137376][ T3765] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 0 [ 51.166527][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.227147][ T5240] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.234874][ T5240] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 51.260504][ T5242] loop2: detected capacity change from 0 to 1024 [ 51.271520][ T5242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.284741][ T5242] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.337372][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 393: padding at end of block bitmap is not set [ 51.352616][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 51.365255][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.365255][ T12] [ 51.391019][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.414485][ T5246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.703'. [ 51.423509][ T5246] netem: change failed [ 51.656211][ T5273] bond0: (slave dummy0): Releasing backup interface [ 51.672375][ T5273] bridge_slave_0: left allmulticast mode [ 51.678055][ T5273] bridge_slave_0: left promiscuous mode [ 51.683870][ T5273] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.694153][ T5273] bridge_slave_1: left allmulticast mode [ 51.699897][ T5273] bridge_slave_1: left promiscuous mode [ 51.705653][ T5273] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.715620][ T5281] netlink: 'syz.0.714': attribute type 10 has an invalid length. [ 51.723431][ T5281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.714'. [ 51.737520][ T5273] bond0: (slave bond_slave_0): Releasing backup interface [ 51.746414][ T5273] bond0: (slave bond_slave_1): Releasing backup interface [ 51.755432][ T5273] team0: Port device team_slave_0 removed [ 51.762254][ T5273] team0: Port device team_slave_1 removed [ 51.768477][ T5273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.776503][ T5273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.784942][ T5273] bond1: (slave veth3): Releasing active interface [ 51.793003][ T5281] veth1_vlan: left promiscuous mode [ 51.799706][ T5281] batman_adv: batadv0: Adding interface: veth1_vlan [ 51.806480][ T5281] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.832945][ T5281] batman_adv: batadv0: Interface activated: veth1_vlan [ 51.846700][ T5283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.866822][ T5288] netlink: 96 bytes leftover after parsing attributes in process `syz.0.720'. [ 51.908593][ T5283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.953280][ T5283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.013053][ T5283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.067919][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.106008][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.129440][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.147181][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.458894][ T5324] syzkaller0: entered allmulticast mode [ 52.468983][ T5324] syzkaller0 (unregistering): left allmulticast mode [ 52.532713][ T5326] netlink: 'syz.4.737': attribute type 6 has an invalid length. [ 53.464483][ T5414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.081502][ T5448] bridge2: entered allmulticast mode [ 54.267600][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 54.267614][ T29] audit: type=1326 audit(1757103269.303:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.4.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 54.323974][ T29] audit: type=1326 audit(1757103269.303:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.4.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 54.347401][ T29] audit: type=1326 audit(1757103269.303:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.4.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 54.370802][ T29] audit: type=1326 audit(1757103269.303:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.4.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 54.557018][ T29] audit: type=1326 audit(1757103269.593:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 54.580378][ T29] audit: type=1326 audit(1757103269.593:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5487 comm="syz.4.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 54.638184][ T5494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5494 comm=syz.1.785 [ 54.697973][ T29] audit: type=1400 audit(1757103269.613:1705): avc: denied { bind } for pid=5489 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.717346][ T29] audit: type=1400 audit(1757103269.613:1706): avc: denied { listen } for pid=5489 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.736879][ T29] audit: type=1400 audit(1757103269.613:1707): avc: denied { setopt } for pid=5489 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.756423][ T29] audit: type=1400 audit(1757103269.613:1708): avc: denied { write } for pid=5489 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.811850][ T5518] loop2: detected capacity change from 0 to 1024 [ 54.836921][ T5518] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 54.846735][ T5518] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 54.857686][ T5518] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 54.868577][ T5518] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #32: comm syz.2.823: iget: special inode unallocated [ 54.893632][ T5518] EXT4-fs (loop2): no journal found [ 54.898854][ T5518] EXT4-fs (loop2): can't get journal size [ 54.924775][ T5536] IPv4: Oversized IP packet from 127.202.26.0 [ 54.933642][ T5518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.970234][ T5518] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.2.823: path /188/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 55.033536][ T5549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.054850][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.067121][ T5549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.182954][ T5570] netlink: 'syz.3.845': attribute type 39 has an invalid length. [ 55.272707][ T5575] netlink: 'syz.4.847': attribute type 10 has an invalid length. [ 55.284164][ T5575] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.311314][ T5577] netlink: 'syz.4.848': attribute type 13 has an invalid length. [ 55.342804][ T5581] __nla_validate_parse: 18 callbacks suppressed [ 55.342818][ T5581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.850'. [ 55.369861][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.377107][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.393413][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 55.419184][ T5577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.429543][ T5577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.481648][ T5581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.518131][ T51] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.526632][ T51] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.535939][ T51] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.548619][ T51] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.560151][ T5593] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.853'. [ 55.569272][ T5593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.853'. [ 55.585817][ T5595] $Hÿ: renamed from bond0 [ 55.595494][ T5595] $Hÿ: entered promiscuous mode [ 55.600635][ T5595] bond_slave_0: entered promiscuous mode [ 55.606543][ T5595] bond_slave_1: entered promiscuous mode [ 55.614810][ T5597] bridge2: entered allmulticast mode [ 55.757852][ T5620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 55.772341][ T5620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.784562][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 56.364405][ T5633] loop0: detected capacity change from 0 to 1024 [ 56.381528][ T5633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.394117][ T5633] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.416187][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.826412][ T5677] loop2: detected capacity change from 0 to 512 [ 56.857049][ T5681] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.873063][ T5677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.885933][ T5677] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.903150][ T5677] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 56.914114][ T5677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.945970][ T5691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.896'. [ 56.957738][ T5695] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 56.966824][ T5695] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.145153][ T5727] SELinux: Context @ is not valid (left unmapped). [ 57.174232][ T5729] loop0: detected capacity change from 0 to 512 [ 57.202897][ T5729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.218592][ T5729] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.237107][ T5729] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 57.261694][ T5729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.291898][ T5738] block device autoloading is deprecated and will be removed. [ 57.305599][ T5740] sch_fq: defrate 4294967295 ignored. [ 57.926838][ T5772] loop1: detected capacity change from 0 to 512 [ 57.927303][ T5773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.928'. [ 57.962026][ T5772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.976214][ T5772] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.998702][ T5772] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.009386][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.287077][ T5808] openvswitch: netlink: Message has 6 unknown bytes. [ 58.793925][ T5835] veth0: entered promiscuous mode [ 58.799523][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 58.812550][ T5835] veth0 (unregistering): left promiscuous mode [ 59.336606][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 59.348269][ T5875] ip6gre1: entered allmulticast mode [ 59.368164][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 59.368177][ T29] audit: type=1400 audit(1757103274.403:2019): avc: denied { connect } for pid=5876 comm="syz.1.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.398754][ T29] audit: type=1400 audit(1757103274.433:2020): avc: denied { write } for pid=5876 comm="syz.1.975" path="socket:[14038]" dev="sockfs" ino=14038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 60.325243][ T5924] loop4: detected capacity change from 0 to 8192 [ 60.345770][ T5924] msdos: Unknown parameter 'A' [ 60.388898][ T5936] syzkaller0: entered allmulticast mode [ 60.438965][ T5936] syzkaller0 (unregistering): left allmulticast mode [ 60.521979][ T5948] __nla_validate_parse: 5 callbacks suppressed [ 60.521993][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1002'. [ 60.538868][ T5948] netem: change failed [ 60.799682][ T29] audit: type=1326 audit(1757103275.833:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 60.824149][ T29] audit: type=1326 audit(1757103275.833:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 60.847979][ T29] audit: type=1326 audit(1757103275.843:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 60.871463][ T29] audit: type=1326 audit(1757103275.843:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 60.895126][ T29] audit: type=1326 audit(1757103275.843:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 60.918760][ T29] audit: type=1326 audit(1757103275.843:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 60.942451][ T29] audit: type=1326 audit(1757103275.863:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 60.966694][ T29] audit: type=1326 audit(1757103275.863:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.0.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f04571914a5 code=0x7ffc0000 [ 61.172370][ T5992] veth0: entered promiscuous mode [ 61.180114][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 61.206192][ T5992] veth0 (unregistering): left promiscuous mode [ 61.844079][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 61.853071][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'. [ 61.862098][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 61.894341][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'. [ 61.903417][ T6014] netlink: 'syz.1.1026': attribute type 6 has an invalid length. [ 62.028651][ T6021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.113323][ T6021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.174858][ T6021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.232645][ T6021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.285577][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.296781][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.307435][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.318606][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.387605][ T6035] netlink: 'syz.3.1034': attribute type 30 has an invalid length. [ 62.402724][ T6037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1036'. [ 62.865963][ T6082] loop4: detected capacity change from 0 to 2048 [ 62.896488][ T6082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.978505][ T6094] sch_fq: defrate 4294967295 ignored. [ 63.032573][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.278868][ T6121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1070'. [ 63.469615][ T6131] netlink: 'syz.2.1076': attribute type 30 has an invalid length. [ 63.567753][ T6139] syzkaller0: entered allmulticast mode [ 63.578341][ T6139] syzkaller0 (unregistering): left allmulticast mode [ 63.601413][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 63.631914][ T6141] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1080'. [ 63.641700][ T6145] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 63.712467][ T6156] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.771680][ T6156] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.830581][ T6156] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.890073][ T6156] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.424266][ T3824] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.434950][ T3824] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.446132][ T3824] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.456261][ T3824] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.779032][ T6198] loop4: detected capacity change from 0 to 1024 [ 66.810548][ T6198] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 66.819072][ T6198] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.830020][ T6198] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 66.941807][ T6198] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.970378][ T6198] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #17: comm syz.4.1105: iget: bad i_size value: 4398046511204 [ 66.994163][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 66.994178][ T29] audit: type=1400 audit(1757103282.033:2173): avc: denied { mount } for pid=6209 comm="syz.2.1111" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.027079][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 67.036662][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 67.045909][ T6198] EXT4-fs (loop4): no journal found [ 67.087539][ T29] audit: type=1326 audit(1757103282.123:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 67.130062][ T29] audit: type=1326 audit(1757103282.123:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 67.153541][ T29] audit: type=1326 audit(1757103282.153:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 67.177066][ T29] audit: type=1326 audit(1757103282.153:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 67.202257][ T29] audit: type=1326 audit(1757103282.173:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 67.225680][ T29] audit: type=1326 audit(1757103282.173:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 67.249362][ T29] audit: type=1326 audit(1757103282.173:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 67.272992][ T29] audit: type=1326 audit(1757103282.173:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 67.296493][ T29] audit: type=1326 audit(1757103282.173:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667f21ebe9 code=0x7ffc0000 [ 67.441566][ T6243] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1124'. [ 67.702037][ T36] IPVS: starting estimator thread 0... [ 67.801179][ T6267] IPVS: using max 3072 ests per chain, 153600 per kthread [ 67.832624][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 68.057343][ T6301] loop4: detected capacity change from 0 to 2048 [ 68.120442][ T6301] loop4: p1 < > p4 [ 68.129914][ T6301] loop4: p4 size 8388608 extends beyond EOD, truncated [ 68.214885][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'. [ 68.293172][ T3377] IPVS: starting estimator thread 0... [ 68.322409][ T6320] veth0: entered promiscuous mode [ 68.327861][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 68.338529][ T6320] veth0 (unregistering): left promiscuous mode [ 68.352279][ T6326] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.380005][ T6318] IPVS: using max 2976 ests per chain, 148800 per kthread [ 68.402048][ T6334] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.442648][ T6334] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.540676][ T6334] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.554793][ T6347] ÿÿÿÿÿÿ: renamed from vlan1 [ 68.584476][ T6334] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.773935][ T6445] netlink: 'syz.4.1212': attribute type 1 has an invalid length. [ 69.788255][ T6445] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 69.800662][ T6445] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 69.811012][ T6445] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 69.992555][ T6458] loop4: detected capacity change from 0 to 164 [ 70.009232][ T6458] Unsupported NM flag settings (8) [ 70.162401][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 70.548617][ T6522] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1245'. [ 70.631602][ T6536] loop4: detected capacity change from 0 to 512 [ 70.671291][ T6536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.686183][ T6536] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.712451][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.749327][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.777404][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.816995][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.830242][ T6536] syz.4.1251 (6536) used greatest stack depth: 10064 bytes left [ 70.850014][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1262'. [ 70.890482][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.928147][ T6577] netlink: 'syz.0.1255': attribute type 30 has an invalid length. [ 70.961712][ T6576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1256'. [ 71.132020][ T6615] macvtap0: refused to change device tx_queue_len [ 71.297041][ T6656] tipc: New replicast peer: 255.255.255.83 [ 71.303123][ T6656] tipc: Enabled bearer , priority 10 [ 72.064981][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 72.064994][ T29] audit: type=1400 audit(1757103287.103:2653): avc: denied { watch } for pid=6765 comm="syz.4.1290" path="/197/file0" dev="cgroup2" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 72.100718][ T29] audit: type=1400 audit(1757103287.103:2654): avc: denied { associate } for pid=6765 comm="syz.4.1290" name="syz4" dev="cgroup2" ino=97 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 72.308339][ T29] audit: type=1326 audit(1757103287.343:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 72.331877][ T29] audit: type=1326 audit(1757103287.343:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 72.332114][ T6790] __nla_validate_parse: 9 callbacks suppressed [ 72.332140][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 72.355296][ T29] audit: type=1326 audit(1757103287.343:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 72.355325][ T29] audit: type=1326 audit(1757103287.343:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 72.400013][ T29] audit: type=1326 audit(1757103287.403:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 72.400044][ T29] audit: type=1326 audit(1757103287.403:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 72.695453][ T6819] netlink: 'syz.2.1314': attribute type 30 has an invalid length. [ 72.710879][ T29] audit: type=1400 audit(1757103287.743:2661): avc: denied { read } for pid=6816 comm="syz.4.1313" path="socket:[20392]" dev="sockfs" ino=20392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.744262][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1315'. [ 72.818957][ T29] audit: type=1326 audit(1757103287.853:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045715ebe9 code=0x7ffc0000 [ 72.962499][ T6858] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1325'. [ 72.976056][ T6858] batadv1: entered promiscuous mode [ 72.981319][ T6858] batadv1: entered allmulticast mode [ 73.001970][ T6861] openvswitch: netlink: Message has 6 unknown bytes. [ 73.213991][ T6876] netlink: 'syz.1.1329': attribute type 1 has an invalid length. [ 73.285945][ T6848] Set syz1 is full, maxelem 65536 reached [ 73.291942][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 73.313342][ T6876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.344985][ T6880] bond1 (unregistering): Released all slaves [ 73.756709][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 73.821691][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 73.843479][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 73.901856][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 73.927425][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 73.946890][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 74.604888][ T7079] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 74.612697][ T7079] netlink: 'syz.0.1368': attribute type 4 has an invalid length. [ 74.622484][ T7079] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 74.630281][ T7079] netlink: 'syz.0.1368': attribute type 4 has an invalid length. [ 74.693558][ T7090] Set syz1 is full, maxelem 65536 reached [ 75.438060][ T7144] batadv1: entered promiscuous mode [ 75.443471][ T7144] batadv1: entered allmulticast mode [ 75.602848][ T7158] tmpfs: Unsupported parameter 'huge' [ 76.475271][ T7182] batadv1: entered promiscuous mode [ 76.480544][ T7182] batadv1: entered allmulticast mode [ 76.747186][ T7220] serio: Serial port ptm0 [ 76.835080][ T7232] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 76.842942][ T7232] netlink: 'syz.1.1415': attribute type 4 has an invalid length. [ 76.852252][ T7232] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 76.860076][ T7232] netlink: 'syz.1.1415': attribute type 4 has an invalid length. [ 77.001791][ T7256] bond0: (slave bond_slave_0): Releasing backup interface [ 77.026214][ T7268] netlink: 'syz.1.1422': attribute type 10 has an invalid length. [ 77.041315][ T7256] bond0: (slave bond_slave_1): Releasing backup interface [ 77.053233][ T7256] team0: Port device team_slave_0 removed [ 77.063456][ T7256] team0: Port device team_slave_1 removed [ 77.070372][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.077778][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.087285][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.094787][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.153555][ T7268] batman_adv: batadv0: Adding interface: veth1_vlan [ 77.160259][ T7268] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.203102][ T7286] netlink: 'syz.3.1425': attribute type 1 has an invalid length. [ 77.218624][ T7268] batman_adv: batadv0: Interface activated: veth1_vlan [ 77.242964][ T7286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.266673][ T7286] bond2 (unregistering): Released all slaves [ 77.636061][ T7363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7363 comm=syz.4.1437 [ 77.727659][ T7380] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 77.732725][ T7383] loop4: detected capacity change from 0 to 128 [ 77.764384][ T7383] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.786470][ T7380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 77.786472][ T7391] __nla_validate_parse: 16 callbacks suppressed [ 77.786483][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 77.793347][ T7383] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.856890][ T7391] bond3 (unregistering): Released all slaves [ 77.925645][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.992692][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 77.992775][ T29] audit: type=1400 audit(1757103293.003:3267): avc: denied { override_creds } for pid=7403 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.324216][ T29] audit: type=1326 audit(1757103293.363:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 78.347670][ T29] audit: type=1326 audit(1757103293.363:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 78.371864][ T29] audit: type=1326 audit(1757103293.413:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 78.395321][ T29] audit: type=1326 audit(1757103293.413:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 78.418851][ T29] audit: type=1326 audit(1757103293.413:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.1.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70902aebe9 code=0x7ffc0000 [ 78.625289][ T7435] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1457'. [ 78.717738][ T7439] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1460'. [ 78.771634][ T7443] ref_ctr_offset mismatch. inode: 0x646 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 79.150556][ T7447] Set syz1 is full, maxelem 65536 reached [ 79.220061][ T29] audit: type=1400 audit(1757103294.253:3273): avc: denied { read } for pid=7464 comm="syz.1.1473" name="file0" dev="tmpfs" ino=1566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.339644][ T29] audit: type=1400 audit(1757103294.313:3274): avc: denied { create } for pid=7467 comm="syz.0.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 79.937411][ T29] audit: type=1326 audit(1757103294.973:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 79.965297][ T29] audit: type=1326 audit(1757103294.973:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7484 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442ce2ebe9 code=0x7ffc0000 [ 80.503487][ T7520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7520 comm=syz.1.1496 [ 80.620782][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 80.697156][ T7533] loop4: detected capacity change from 0 to 8192 [ 80.750093][ T7533] loop4: p1 p2 p3 p4 [ 80.756179][ T7533] loop4: p2 start 151000334 is beyond EOD, truncated [ 80.763012][ T7533] loop4: p3 start 331777 is beyond EOD, truncated [ 80.769437][ T7533] loop4: p4 size 263168 extends beyond EOD, truncated [ 80.790358][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1501'. [ 80.848895][ T7543] loop4: detected capacity change from 0 to 512 [ 80.866016][ T7543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.879035][ T7543] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.913462][ T7549] @: renamed from vlan0 [ 80.937855][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.343572][ T7581] netlink: zone id is out of range [ 81.349111][ T7581] netlink: zone id is out of range [ 81.354489][ T7581] netlink: zone id is out of range [ 81.359625][ T7581] netlink: zone id is out of range [ 81.364896][ T7581] netlink: zone id is out of range [ 81.370678][ T7581] netlink: zone id is out of range [ 81.375849][ T7581] netlink: zone id is out of range [ 81.381036][ T7581] netlink: zone id is out of range [ 81.386220][ T7581] netlink: zone id is out of range [ 81.999776][ T7637] tipc: Enabling of bearer rejected, failed to enable media [ 82.257761][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'. [ 82.505117][ T7661] @: renamed from vlan0 (while UP) [ 82.541549][ T7659] loop4: detected capacity change from 0 to 8192 [ 82.646418][ T7668] ================================================================== [ 82.654533][ T7668] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 82.661489][ T7668] [ 82.663808][ T7668] read-write to 0xffff88811a5a68ac of 4 bytes by task 7665 on cpu 0: [ 82.671868][ T7668] fifo_open+0x86/0x5d0 [ 82.676033][ T7668] do_dentry_open+0x646/0xa20 [ 82.680725][ T7668] vfs_open+0x37/0x1e0 [ 82.684806][ T7668] path_openat+0x1c5e/0x2170 [ 82.689390][ T7668] do_filp_open+0x109/0x230 [ 82.693888][ T7668] do_sys_openat2+0xa6/0x110 [ 82.698494][ T7668] __x64_sys_openat+0xf2/0x120 [ 82.703283][ T7668] x64_sys_call+0x2e9c/0x2ff0 [ 82.707979][ T7668] do_syscall_64+0xd2/0x200 [ 82.712490][ T7668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.718386][ T7668] [ 82.720706][ T7668] read to 0xffff88811a5a68ac of 4 bytes by task 7668 on cpu 1: [ 82.728247][ T7668] wait_for_partner+0xb5/0x1c0 [ 82.733015][ T7668] fifo_open+0x462/0x5d0 [ 82.737253][ T7668] do_dentry_open+0x646/0xa20 [ 82.741945][ T7668] vfs_open+0x37/0x1e0 [ 82.746015][ T7668] path_openat+0x1c5e/0x2170 [ 82.750598][ T7668] do_filp_open+0x109/0x230 [ 82.755084][ T7668] do_sys_openat2+0xa6/0x110 [ 82.759673][ T7668] __x64_sys_open+0xe6/0x110 [ 82.764291][ T7668] x64_sys_call+0x1457/0x2ff0 [ 82.768960][ T7668] do_syscall_64+0xd2/0x200 [ 82.773552][ T7668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.779447][ T7668] [ 82.781754][ T7668] value changed: 0x00000001 -> 0x00000002 [ 82.787451][ T7668] [ 82.789755][ T7668] Reported by Kernel Concurrency Sanitizer on: [ 82.795885][ T7668] CPU: 1 UID: 0 PID: 7668 Comm: syz.4.1555 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.805593][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.815637][ T7668] ==================================================================