last executing test programs: 1.365855201s ago: executing program 3 (id=1052): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) close(r2) 1.300715612s ago: executing program 2 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r0) 1.300481372s ago: executing program 3 (id=1056): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r2, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4005, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e000000120081a2040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029002d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.300140282s ago: executing program 3 (id=1057): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.269943932s ago: executing program 3 (id=1058): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x1a0, 0x3d0, 0x1a0, 0x300, 0x1a0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x7, 'pimreg1\x00', {0x9}, 0x4}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd6cbdc6f500006cfffc01000000f5ffffffffffffff000040ff020000000000000000000000000001"], 0x0) 1.269600102s ago: executing program 3 (id=1059): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x803) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 1.218183832s ago: executing program 3 (id=1061): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.217950892s ago: executing program 2 (id=1062): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x5, 0x8, 0xfa, 0x7ffc1ffb}]}) syslog(0x2, &(0x7f0000000040)=""/19, 0xe2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 1.182358062s ago: executing program 0 (id=1065): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x6a1c2, 0x50) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x8000}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000000) 1.181976752s ago: executing program 0 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000000f000007"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file1\x00') r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu<\t\t') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 1.181866162s ago: executing program 4 (id=1068): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1.133339573s ago: executing program 0 (id=1069): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x70, 0xa0, 0x8, {0xf400000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x270) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000d00)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="343721f3478659ba3d6743d4aee76cf9a5f33e58d68e1c6034b593d7f4303001160d6867acdef2143d86e877c293d811e4d6ff63e2a31e47300ea4f41e43f6b223399ee1a7208164f4f21291b2422e8202f9856ca1c0903271487512758d05f6a58f2abc78a8d55c71cd057dc1ab7f69e6f86e86546134aa936e1ff794c9be7de70da1", @ANYRESOCT=r1, @ANYBLOB="b045e98432a9bc90ffcea1ec87ca949cb2e43cc65ecd8af7e0a321c21e9c48527b09464c00350084bad89066c457918b94a3ac919c9741704ad7d39ba95a258a1f414203f26d21cabde1ca131648ae968675d19c1164db957864090f2e40d696966bc52331195777f2c5d0b33f56c6f7a17415b2daa6b7208e730c726a1fffb899c0d6724f3347f111d4c25f6d0075647225622734fe6c4714246759e4c771ca0815c25c9873fe946a1d240d07afce17cd", @ANYRES16=r5, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, @fallback=0x46556b34e8e5276f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tkill(r4, 0x12) 1.132840533s ago: executing program 2 (id=1070): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r4, 0x0) 1.052079463s ago: executing program 0 (id=1071): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x141000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000180)=0x8, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x2000, 0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) rt_sigpending(&(0x7f00000006c0), 0x8) rt_sigaction(0xa, &(0x7f00000008c0)={&(0x7f00000004c0)="8f89589b823659000066410f3acfd304420f182942dce6c46161e27416008f296802b000000000660feaf56666420ffa00c4227dbe9be0080000660fdd16", 0xc0000004, &(0x7f0000000840)="c4e1dd5f0bd2690066f3440fa7c043dce8660f383df0c44179dd545d19460f38079000000080f3400faed83b64160dc483517d4c1c03b3", {[0x8]}}, 0x0, 0x8, &(0x7f0000000b40)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 1.037587854s ago: executing program 0 (id=1072): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 950.820524ms ago: executing program 4 (id=1074): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0x50) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) vmsplice(r4, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 826.127084ms ago: executing program 0 (id=1076): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x813]}, 0x8, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x24, 0x8, @mcast2}, 0x18) sendmmsg$inet(r1, &(0x7f0000001e80)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4091) readv(r0, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000600)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(r0, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 824.759934ms ago: executing program 2 (id=1078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x1080, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 429.368857ms ago: executing program 1 (id=1082): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020000000"], 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000600)={[], [{@fowner_eq={'fowner', 0x3d, 0xee01}}]}, 0x3, 0x531, &(0x7f0000000640)="$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") r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 363.934587ms ago: executing program 1 (id=1083): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) fsmount(r1, 0x0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x7}, @timestamp, @mss={0x2, 0x3}, @timestamp, @timestamp, @mss={0x2, 0xb5}, @timestamp, @window={0x3, 0xdee, 0x4}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xe501, 0x3, 0x4e8, 0x450, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x450, 0x230, 0x230, 0x450, 0x223, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @local, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x53}, 0x0, 0x358, 0x378, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x30}, {}, {}, {0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@local, [0xff000000, 0xff, 0xff000000, 0xff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0x0, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, [0xffffffff, 0xff000000, 0xff0000ff, 0xff], @ipv4=@loopback, [0xff, 0x0, 0xffffff00, 0xff], 0x6, 0x1, 0x5c, 0x4e23, 0x4e24, 0x4e21, 0x4e21, 0x100, 0x4}, 0x0, 0x5c}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x548) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 363.571117ms ago: executing program 1 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x169042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x6000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) 253.819248ms ago: executing program 2 (id=1085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ffac4187e960499809e34de099eedf5ca5b19e5e6f1b25", 0x3b}], 0x1) 253.133408ms ago: executing program 1 (id=1095): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 218.018918ms ago: executing program 1 (id=1086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0, 0x0, 0x4}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) mount(0x0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 149.120139ms ago: executing program 2 (id=1087): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x44fd, 0x3, 0x1, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) rt_sigsuspend(&(0x7f0000000400), 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) 128.883129ms ago: executing program 1 (id=1088): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x49e, &(0x7f0000000bc0)="$eJzs3Mtv3MQfAPCvvXn0nfz6K48+oIGCiCgkTVqgByQEAqkXJCQ4wDGkoSpNW9QEiVYVbREqR8RfAByR+As4wQUBJxBXuCOkCvXSwgEtstdOnGwatptuNnQ/H8mbGXtsz3g88diz3gB61kj2kURsi4hfImKoEa0kGMwTZeluXr84/ef1i9NJ1Ouv/jGYp7tx/eJ0mbRcb2sRGU0j0g+T2LvCfufOXzg1NTs7c66Ij8+ffmd87vyFJ0+enjoxc2LmzOTRo0cOTzzz9ORTd6ScWblu7Hn/7L7dx9745OXperz5/ZdZfrcVy6vlaBhe8z5HYiTq9Xo9XTJ3IP98dM1b31i2R8SVIpz0dTkztKwWEVl19eftfyhqsVh5Q/HSB13NHNBR2fVpsGlurfFnIJJs+aZKWuBukmjX0KPKK352/1tO69b52ACuPZ99zuTlv1lMjSV9kd23J8ONO/Zah/a/LSJev/zXp9kUKz6HAAC4s77O+j9PrNT/S+PeSrodxRjKcEQcjIidEfH/iNgVEfdE5Gnvi4j7b3P/+fjTlcV4c//np81tF64FWf/v2WJsa2n/b2HUZrhWxLbn5e9P3jo5O3OoOCaj0T+YxSdW2cc3L/788a2WjVT6f9mU7b/sCxb5+L1v2QO641PzU2spc9W1KxF7+lYqf7IwEpBExO6I2NPG9rNjdvLxL/Zl4R1bm5f/e/lXc7mNHC1V/zzisUb9X45l5S8ljSGSW41Pjm+K2ZlD4+VZ0eyHH6++Uo33V8JrK//aZfW/ZcXzvyh/2QzK8dq5Fjc8sBi8+utHxTabm3K75/9A8tqS3bw3NT9/biJiYCia508urlvGy/RZ+UcPRFwtBoKr7X9nxN+fFevtjYjsJH4gIh6MiP1F3h+KiIcj4sAqh+K7Fx55e/WD1d36P75a/UcMJ9Xx+jYCtVPfflVubKEqi38urdX/kTw0Wsxp5f9fqxm8E8cQAAAANro0H4NO0rGFcJqOjTW+w78rtqSzZ+fmD47Eu2eON8aqh6M/LZ90DVWeh04Uz4bL+OSy+OGI+F/+TaPNeXxs+uzs9m4XHnrc1lu0/80R8VunvvQCbBy39b5W0rl8AOsqf7fH+5rQu1pu//2dzQew/lz/oXdp/9C7Vmr/lyJudiErwDq7rev/c53LB7D+Vmv/HvnB3c39P/Qu7R96UvMr8eVvNLTzpv9iYOexNa3eQ4Fah7Yc1R/t6EAg0q4fuvYD6UbIxv4iMBgRra51qaN1uvz8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+O/7JwAA///M09j9") sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r1, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) 51.954469ms ago: executing program 4 (id=1089): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 51.780989ms ago: executing program 4 (id=1090): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x40010) 27.833139ms ago: executing program 4 (id=1091): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setgid(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r1 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r3) 0s ago: executing program 4 (id=1092): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 25.124456][ T29] audit: type=1400 audit(1762202510.059:62): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.147503][ T29] audit: type=1400 audit(1762202510.079:63): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.148298][ T3299] cgroup: Unknown subsys name 'net' [ 25.175156][ T29] audit: type=1400 audit(1762202510.109:64): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.293766][ T3299] cgroup: Unknown subsys name 'cpuset' [ 25.300011][ T3299] cgroup: Unknown subsys name 'rlimit' [ 25.431398][ T29] audit: type=1400 audit(1762202510.359:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.454883][ T29] audit: type=1400 audit(1762202510.359:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.475467][ T29] audit: type=1400 audit(1762202510.359:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.495825][ T29] audit: type=1400 audit(1762202510.359:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.503893][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.516082][ T29] audit: type=1400 audit(1762202510.379:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.549479][ T29] audit: type=1400 audit(1762202510.379:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.572844][ T29] audit: type=1400 audit(1762202510.459:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.616742][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.704834][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.725536][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.823136][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.830325][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.837499][ T3316] bridge_slave_0: entered allmulticast mode [ 26.843998][ T3316] bridge_slave_0: entered promiscuous mode [ 26.854842][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.861948][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.869243][ T3313] bridge_slave_0: entered allmulticast mode [ 26.875726][ T3313] bridge_slave_0: entered promiscuous mode [ 26.882276][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.889406][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.896577][ T3316] bridge_slave_1: entered allmulticast mode [ 26.902987][ T3316] bridge_slave_1: entered promiscuous mode [ 26.909144][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.925089][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.932138][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.939289][ T3313] bridge_slave_1: entered allmulticast mode [ 26.945635][ T3313] bridge_slave_1: entered promiscuous mode [ 26.961517][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.970613][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 26.994246][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.004490][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.016441][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.065155][ T3316] team0: Port device team_slave_0 added [ 27.073694][ T3313] team0: Port device team_slave_0 added [ 27.088922][ T3316] team0: Port device team_slave_1 added [ 27.099664][ T3313] team0: Port device team_slave_1 added [ 27.142279][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.149375][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.156537][ T3312] bridge_slave_0: entered allmulticast mode [ 27.162820][ T3312] bridge_slave_0: entered promiscuous mode [ 27.176469][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.183424][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.209393][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.224629][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.231641][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.257583][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.268596][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.275665][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.282913][ T3312] bridge_slave_1: entered allmulticast mode [ 27.289471][ T3312] bridge_slave_1: entered promiscuous mode [ 27.295627][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 27.304854][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.311790][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.337760][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.348427][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.355499][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.362561][ T3317] bridge_slave_0: entered allmulticast mode [ 27.369003][ T3317] bridge_slave_0: entered promiscuous mode [ 27.375723][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.382711][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.408618][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.437796][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.444978][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.452158][ T3317] bridge_slave_1: entered allmulticast mode [ 27.458577][ T3317] bridge_slave_1: entered promiscuous mode [ 27.473444][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.497082][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.510070][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.546594][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.556369][ T3312] team0: Port device team_slave_0 added [ 27.577456][ T3316] hsr_slave_0: entered promiscuous mode [ 27.583547][ T3316] hsr_slave_1: entered promiscuous mode [ 27.594689][ T3312] team0: Port device team_slave_1 added [ 27.602314][ T3313] hsr_slave_0: entered promiscuous mode [ 27.608360][ T3313] hsr_slave_1: entered promiscuous mode [ 27.614220][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.619931][ T3313] Cannot create hsr debugfs directory [ 27.625507][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.632542][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.639669][ T3323] bridge_slave_0: entered allmulticast mode [ 27.646065][ T3323] bridge_slave_0: entered promiscuous mode [ 27.652831][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.659888][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.667120][ T3323] bridge_slave_1: entered allmulticast mode [ 27.673586][ T3323] bridge_slave_1: entered promiscuous mode [ 27.680280][ T3317] team0: Port device team_slave_0 added [ 27.694624][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.701554][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.727467][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.749460][ T3317] team0: Port device team_slave_1 added [ 27.764270][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.771200][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.797110][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.821650][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.828665][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.854619][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.875554][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.889693][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.896699][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.922646][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.945371][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.983346][ T3317] hsr_slave_0: entered promiscuous mode [ 27.989336][ T3317] hsr_slave_1: entered promiscuous mode [ 27.995200][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 28.000924][ T3317] Cannot create hsr debugfs directory [ 28.013242][ T3323] team0: Port device team_slave_0 added [ 28.020825][ T3312] hsr_slave_0: entered promiscuous mode [ 28.026911][ T3312] hsr_slave_1: entered promiscuous mode [ 28.032739][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 28.038598][ T3312] Cannot create hsr debugfs directory [ 28.056366][ T3323] team0: Port device team_slave_1 added [ 28.104995][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.111940][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.138007][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.158270][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.165240][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.191177][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.247391][ T3323] hsr_slave_0: entered promiscuous mode [ 28.253373][ T3323] hsr_slave_1: entered promiscuous mode [ 28.259159][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 28.264918][ T3323] Cannot create hsr debugfs directory [ 28.333581][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.342319][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.352915][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.361374][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.401245][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.418441][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.428808][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.437290][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.462233][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.486330][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.495259][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.504063][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.517788][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.526884][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.535935][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.548389][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.557466][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.589136][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.606496][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.613564][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.622717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.629802][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.648176][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.660336][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.669285][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.683410][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.693970][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.717125][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.736419][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.743478][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.760775][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.767840][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.804807][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.814429][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.829753][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.840271][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.860060][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.880233][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.893059][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.910872][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.917926][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.926636][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.933758][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.956074][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.967994][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.975047][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.988314][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.002296][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.009599][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.023580][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.030615][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.045099][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.052159][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.069450][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.076529][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.135172][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.148348][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.165399][ T3316] veth0_vlan: entered promiscuous mode [ 29.179550][ T3316] veth1_vlan: entered promiscuous mode [ 29.208030][ T3316] veth0_macvtap: entered promiscuous mode [ 29.227455][ T3316] veth1_macvtap: entered promiscuous mode [ 29.248859][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.270807][ T3317] veth0_vlan: entered promiscuous mode [ 29.286716][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.303062][ T3317] veth1_vlan: entered promiscuous mode [ 29.320931][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.343075][ T3317] veth0_macvtap: entered promiscuous mode [ 29.351785][ T3312] veth0_vlan: entered promiscuous mode [ 29.361358][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.369908][ T3317] veth1_macvtap: entered promiscuous mode [ 29.381249][ T3312] veth1_vlan: entered promiscuous mode [ 29.394304][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.401608][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.416526][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.430141][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.441822][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.465121][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.481928][ T3313] veth0_vlan: entered promiscuous mode [ 29.489123][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.505781][ T3313] veth1_vlan: entered promiscuous mode [ 29.520719][ T3312] veth0_macvtap: entered promiscuous mode [ 29.527847][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.528287][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.551915][ T3312] veth1_macvtap: entered promiscuous mode [ 29.566321][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.579965][ T3313] veth0_macvtap: entered promiscuous mode [ 29.599985][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.609270][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.625948][ T3313] veth1_macvtap: entered promiscuous mode [ 29.634375][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.646732][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.658623][ T3323] veth0_vlan: entered promiscuous mode [ 29.676733][ T3323] veth1_vlan: entered promiscuous mode [ 29.682786][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.704227][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.720721][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.739833][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.756940][ T3323] veth0_macvtap: entered promiscuous mode [ 29.776891][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.794096][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.804469][ T3323] veth1_macvtap: entered promiscuous mode [ 29.837534][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.851024][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.867741][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.886783][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 29.912920][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.923035][ T3496] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 29.923094][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.947358][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.966266][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.985501][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.007263][ C0] hrtimer: interrupt took 37572 ns [ 30.019507][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.042380][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.155039][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 30.155054][ T29] audit: type=1400 audit(1762202515.089:120): avc: denied { bind } for pid=3510 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.225167][ T3514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12'. [ 30.226588][ T29] audit: type=1400 audit(1762202515.119:121): avc: denied { listen } for pid=3510 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.253540][ T29] audit: type=1400 audit(1762202515.119:122): avc: denied { write } for pid=3510 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.352103][ T3517] loop3: detected capacity change from 0 to 1024 [ 30.364990][ T3517] EXT4-fs: Ignoring removed bh option [ 30.378062][ T3517] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 30.407894][ T3517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.438475][ T29] audit: type=1400 audit(1762202515.369:123): avc: denied { mount } for pid=3516 comm="syz.3.13" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.481671][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.487290][ T29] audit: type=1400 audit(1762202515.379:124): avc: denied { mounton } for pid=3516 comm="syz.3.13" path="/5/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.513575][ T29] audit: type=1400 audit(1762202515.379:125): avc: denied { mount } for pid=3516 comm="syz.3.13" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.535593][ T29] audit: type=1400 audit(1762202515.399:126): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.555445][ T29] audit: type=1400 audit(1762202515.399:127): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.575663][ T29] audit: type=1400 audit(1762202515.399:128): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.621755][ T29] audit: type=1400 audit(1762202515.549:129): avc: denied { write } for pid=3524 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.826486][ T3547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 31.067915][ T3591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26'. [ 31.098119][ T3591] syz.2.26 (3591) used greatest stack depth: 10344 bytes left [ 32.082625][ T3778] tipc: Started in network mode [ 32.087650][ T3778] tipc: Node identity ac1414aa, cluster identity 4711 [ 32.094976][ T3778] tipc: Enabled bearer , priority 10 [ 32.164687][ T3782] loop0: detected capacity change from 0 to 512 [ 32.172938][ T3782] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.186043][ T3782] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.202733][ T3782] EXT4-fs (loop0): 1 truncate cleaned up [ 32.209143][ T3782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.246550][ T3782] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.253996][ T3782] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.363608][ T3782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.429070][ T3786] geneve2: entered promiscuous mode [ 32.454908][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.535842][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.647638][ T3806] process 'syz.0.41' launched './file0' with NULL argv: empty string added [ 32.866987][ T3821] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.50'. [ 32.876574][ T3821] netlink: zone id is out of range [ 32.881700][ T3821] netlink: zone id is out of range [ 32.887381][ T3821] netlink: zone id is out of range [ 32.892561][ T3821] netlink: zone id is out of range [ 32.898223][ T3821] netlink: del zone limit has 8 unknown bytes [ 33.218136][ T3831] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 33.241661][ T3394] tipc: Node number set to 2886997162 [ 33.341544][ T3841] loop1: detected capacity change from 0 to 512 [ 33.355025][ T3841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.368227][ T3841] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.384432][ T3841] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.58: corrupted xattr block 33: bad e_name length [ 33.398007][ T3841] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 33.407109][ T3841] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.58: corrupted xattr block 33: bad e_name length [ 33.420571][ T3841] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 33.429753][ T3841] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.58: corrupted xattr block 33: bad e_name length [ 33.443629][ T3841] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.58: corrupted xattr block 33: bad e_name length [ 33.457119][ T3841] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 33.466547][ T3841] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.58: corrupted inode contents [ 33.486440][ T3841] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.58: mark_inode_dirty error [ 33.503512][ T3841] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.58: corrupted inode contents [ 33.515274][ T3841] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.58: mark_inode_dirty error [ 33.526886][ T3841] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.58: Failed to acquire dquot type 1 [ 33.559838][ T3851] loop0: detected capacity change from 0 to 128 [ 33.572493][ T3851] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.593599][ T3845] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.58: corrupted xattr block 33: bad e_name length [ 33.607885][ T3851] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.616712][ T3845] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 33.629785][ T3846] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 33.655274][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.655438][ T3841] syz.1.58 (3841) used greatest stack depth: 10144 bytes left [ 33.695297][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.733905][ T3859] loop0: detected capacity change from 0 to 128 [ 33.761568][ T3859] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.804502][ T3859] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.867440][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 33.879839][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.282555][ T3889] Zero length message leads to an empty skb [ 34.373868][ T3877] Set syz1 is full, maxelem 65536 reached [ 34.659809][ T3904] infiniband syz!: set active [ 34.664558][ T3904] infiniband syz!: added team_slave_0 [ 34.683091][ T3904] RDS/IB: syz!: added [ 34.687248][ T3904] smc: adding ib device syz! with port count 1 [ 34.701446][ T3904] smc: ib device syz! port 1 has no pnetid [ 34.753627][ T3913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 34.877565][ T3920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 35.080258][ T3931] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3931 comm=syz.4.91 [ 35.099642][ T3931] lo speed is unknown, defaulting to 1000 [ 35.105514][ T3931] lo speed is unknown, defaulting to 1000 [ 35.111659][ T3931] lo speed is unknown, defaulting to 1000 [ 35.120074][ T3931] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.130794][ T3931] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 35.157244][ T3931] lo speed is unknown, defaulting to 1000 [ 35.169359][ T3931] lo speed is unknown, defaulting to 1000 [ 35.185372][ T3931] lo speed is unknown, defaulting to 1000 [ 35.206481][ T3931] lo speed is unknown, defaulting to 1000 [ 35.246650][ T3931] lo speed is unknown, defaulting to 1000 [ 35.259369][ T3931] lo speed is unknown, defaulting to 1000 [ 35.319135][ T3940] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 35.421188][ T3948] syz.2.97 uses obsolete (PF_INET,SOCK_PACKET) [ 35.427983][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 35.428028][ T29] audit: type=1400 audit(1762202520.359:254): avc: denied { ioctl } for pid=3947 comm="syz.2.97" path="socket:[5490]" dev="sockfs" ino=5490 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.527229][ T29] audit: type=1400 audit(1762202520.459:255): avc: denied { bind } for pid=3950 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.568553][ T29] audit: type=1400 audit(1762202520.489:256): avc: denied { setopt } for pid=3950 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.568998][ T3951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.650735][ T3955] netlink: 'syz.2.99': attribute type 10 has an invalid length. [ 35.659135][ T3953] bridge_slave_0: left allmulticast mode [ 35.664843][ T3953] bridge_slave_0: left promiscuous mode [ 35.670525][ T3953] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.673331][ T29] audit: type=1400 audit(1762202520.599:257): avc: denied { setopt } for pid=3956 comm="syz.1.100" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.699411][ T3953] bridge_slave_1: left allmulticast mode [ 35.705124][ T3953] bridge_slave_1: left promiscuous mode [ 35.705451][ T3958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 35.710846][ T3953] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.729046][ T3953] bond0: (slave bond_slave_0): Releasing backup interface [ 35.738902][ T3953] bond0: (slave bond_slave_1): Releasing backup interface [ 35.758265][ T3961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.764008][ T29] audit: type=1400 audit(1762202520.689:258): avc: denied { read write } for pid=3960 comm="syz.0.101" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.768527][ T3961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.789981][ T29] audit: type=1400 audit(1762202520.689:259): avc: denied { open } for pid=3960 comm="syz.0.101" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.820857][ T29] audit: type=1400 audit(1762202520.689:260): avc: denied { ioctl } for pid=3960 comm="syz.0.101" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.844062][ T3961] capability: warning: `syz.0.101' uses deprecated v2 capabilities in a way that may be insecure [ 35.864404][ T3953] team0: Port device team_slave_0 removed [ 35.877967][ T3953] team0: Port device team_slave_1 removed [ 35.885066][ T3953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.890438][ T3961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.892456][ T3953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.900950][ T3961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.917853][ T3953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.920280][ T3967] loop3: detected capacity change from 0 to 128 [ 35.925289][ T3953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.939322][ T3967] vfat: Unknown parameter '0177777777777777777777701777777777777777777777" 9)&7ީV1Kg |sdS:ӳW@q'h{Հ4E> #Nr Rb' [ 35.941682][ T3953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 35.959819][ T29] audit: type=1326 audit(1762202520.889:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 35.998967][ T3968] pimreg: entered allmulticast mode [ 36.019539][ T3955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.036922][ T3955] team0: Port device bond0 added [ 36.042589][ T29] audit: type=1326 audit(1762202520.939:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 36.065863][ T29] audit: type=1326 audit(1762202520.939:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 36.091894][ T3951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.109466][ T3958] team0 (unregistering): Port device bond0 removed [ 36.118677][ T3959] syz_tun: entered allmulticast mode [ 36.127654][ T3956] syz_tun: left allmulticast mode [ 36.146303][ T3951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.193433][ T3974] loop1: detected capacity change from 0 to 2048 [ 36.225999][ T3974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.241426][ T3951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.253018][ T3974] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.291584][ T3680] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.302801][ T3680] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.313921][ T3680] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.325742][ T3680] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.346489][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.411832][ T3982] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 36.493506][ T3987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 36.500734][ T3987] IPv6: NLM_F_CREATE should be set when creating new route [ 36.507948][ T3987] IPv6: NLM_F_CREATE should be set when creating new route [ 36.527526][ T3986] mmap: syz.3.105 (3986) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.553357][ T3987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 36.575229][ T3994] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 36.622645][ T3996] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.111'. [ 36.646529][ T3996] netlink: zone id is out of range [ 36.651765][ T3996] netlink: zone id is out of range [ 36.658441][ T3996] netlink: zone id is out of range [ 36.709950][ T3998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 37.194215][ T4029] loop3: detected capacity change from 0 to 512 [ 37.201027][ T4015] lo speed is unknown, defaulting to 1000 [ 37.212409][ T4029] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 37.423886][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 37.455616][ T4051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 37.749263][ T4058] lo speed is unknown, defaulting to 1000 [ 39.198266][ T4105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.207176][ T4105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.270120][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 39.270749][ T4114] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.291372][ T4115] hsr_slave_0: left promiscuous mode [ 39.313453][ T4115] hsr_slave_1: left promiscuous mode [ 39.345062][ T4114] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.406159][ T4114] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.418344][ T4119] lo speed is unknown, defaulting to 1000 [ 39.456091][ T4114] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.544859][ T4134] netlink: 'syz.0.165': attribute type 12 has an invalid length. [ 39.565466][ T3615] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.577108][ T3615] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.594591][ T3615] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.613186][ T3615] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.799262][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 39.812379][ T4155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 39.840910][ T4156] loop4: detected capacity change from 0 to 512 [ 39.888036][ T4158] lo speed is unknown, defaulting to 1000 [ 39.917370][ T4156] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #15: comm syz.4.173: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 39.945026][ T4156] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.173: Bad quota inode: 15, type: 2 [ 39.962219][ T4156] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 39.992423][ T4156] EXT4-fs (loop4): mount failed [ 40.095016][ T4174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 40.114988][ T4176] veth1_macvtap: left promiscuous mode [ 40.124220][ T4176] macsec0: entered promiscuous mode [ 40.205033][ T4180] wg2: entered promiscuous mode [ 40.209934][ T4180] wg2: entered allmulticast mode [ 40.377687][ T4189] netlink: 240 bytes leftover after parsing attributes in process `syz.2.186'. [ 40.433174][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 40.433189][ T29] audit: type=1326 audit(1762202525.359:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faaa2086567 code=0x7ffc0000 [ 40.462929][ T29] audit: type=1326 audit(1762202525.369:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faaa202b779 code=0x7ffc0000 [ 40.486214][ T29] audit: type=1326 audit(1762202525.369:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7faaa208f6c9 code=0x7ffc0000 [ 40.509603][ T29] audit: type=1326 audit(1762202525.369:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faaa2086567 code=0x7ffc0000 [ 40.532797][ T29] audit: type=1326 audit(1762202525.379:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faaa202b779 code=0x7ffc0000 [ 40.556007][ T29] audit: type=1326 audit(1762202525.379:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7faaa208f6c9 code=0x7ffc0000 [ 40.579291][ T29] audit: type=1326 audit(1762202525.379:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faaa2086567 code=0x7ffc0000 [ 40.602567][ T29] audit: type=1326 audit(1762202525.389:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faaa202b779 code=0x7ffc0000 [ 40.625761][ T29] audit: type=1326 audit(1762202525.389:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7faaa208f6c9 code=0x7ffc0000 [ 40.649864][ T29] audit: type=1326 audit(1762202525.389:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4183 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faaa2086567 code=0x7ffc0000 [ 40.846383][ T4195] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 40.934316][ T4197] loop4: detected capacity change from 0 to 764 [ 40.943190][ T4197] iso9660: Unknown parameter 'wid' [ 40.997350][ T4201] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 41.020547][ T4201] bond1: entered promiscuous mode [ 41.026380][ T4201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.045454][ T4206] syzkaller0: entered promiscuous mode [ 41.050958][ T4206] syzkaller0: entered allmulticast mode [ 41.062071][ T4201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.069566][ T4201] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 41.080189][ T4201] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 41.093016][ T4201] bond1: (slave wireguard0): making interface the new active one [ 41.100801][ T4201] wireguard0: entered promiscuous mode [ 41.107629][ T4208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.114888][ T4208] IPv6: NLM_F_CREATE should be set when creating new route [ 41.122139][ T4208] IPv6: NLM_F_CREATE should be set when creating new route [ 41.131452][ T4201] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 41.141074][ T4208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.156203][ T4208] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 41.204419][ T4208] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 41.467019][ T4224] lo speed is unknown, defaulting to 1000 [ 41.683381][ T4240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 41.692294][ T4240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.207'. [ 41.701275][ T4240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.207'. [ 41.714358][ T4240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.207'. [ 42.091489][ T4260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 42.101226][ T4260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 42.347312][ T4280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.223'. [ 42.469321][ T4294] xt_hashlimit: max too large, truncated to 1048576 [ 42.477036][ T4294] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 42.549103][ T4296] loop2: detected capacity change from 0 to 1024 [ 42.568926][ T4296] ======================================================= [ 42.568926][ T4296] WARNING: The mand mount option has been deprecated and [ 42.568926][ T4296] and is ignored by this kernel. Remove the mand [ 42.568926][ T4296] option from the mount to silence this warning. [ 42.568926][ T4296] ======================================================= [ 42.570475][ T4302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.234'. [ 42.605816][ T4296] EXT4-fs: inline encryption not supported [ 42.659755][ T4305] vhci_hcd: invalid port number 255 [ 42.665017][ T4305] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 42.669573][ T4298] lo speed is unknown, defaulting to 1000 [ 42.684290][ T4296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.732914][ T4316] netlink: 'syz.1.238': attribute type 3 has an invalid length. [ 42.740982][ T4316] netlink: 'syz.1.238': attribute type 3 has an invalid length. [ 42.750255][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.475540][ T4452] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.515104][ T4452] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.595730][ T4452] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.628152][ T4458] netlink: 168 bytes leftover after parsing attributes in process `syz.2.243'. [ 43.674786][ T4452] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.730331][ T3680] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.744732][ T3680] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.756009][ T3680] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.777843][ T3680] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.812411][ T4470] syzkaller0: entered promiscuous mode [ 43.817942][ T4470] syzkaller0: entered allmulticast mode [ 43.883172][ T4474] veth2: entered promiscuous mode [ 43.888216][ T4474] veth2: entered allmulticast mode [ 44.000932][ T4479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.043601][ T4481] macvlan1: entered promiscuous mode [ 44.061387][ T4481] ipvlan0: entered promiscuous mode [ 44.075061][ T4481] ipvlan0: left promiscuous mode [ 44.080683][ T4481] macvlan1: left promiscuous mode [ 44.092229][ T4479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.154538][ T4479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.250138][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 44.259543][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.272741][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.285018][ T4479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.332950][ T4489] loop1: detected capacity change from 0 to 164 [ 44.342020][ T4489] syz.1.257: attempt to access beyond end of device [ 44.342020][ T4489] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 44.356154][ T4489] syz.1.257: attempt to access beyond end of device [ 44.356154][ T4489] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.400221][ T3680] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.417033][ T3680] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.431704][ T3680] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.441142][ T3680] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.616347][ T4499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4499 comm=syz.0.270 [ 44.807321][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.816320][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.224700][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.256449][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.496560][ T3610] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.520713][ T3610] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.542208][ T3610] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.571714][ T3610] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.676055][ T4529] macvlan1: entered promiscuous mode [ 45.682195][ T4529] ipvlan0: entered promiscuous mode [ 45.713208][ T4529] ipvlan0: left promiscuous mode [ 45.726757][ T4529] macvlan1: left promiscuous mode [ 45.745493][ T29] kauditd_printk_skb: 833 callbacks suppressed [ 45.745507][ T29] audit: type=1326 audit(1762202530.679:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 45.806182][ T29] audit: type=1326 audit(1762202530.719:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 45.829602][ T29] audit: type=1326 audit(1762202530.719:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 45.852929][ T29] audit: type=1326 audit(1762202530.719:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 45.876296][ T29] audit: type=1326 audit(1762202530.719:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 45.899657][ T29] audit: type=1326 audit(1762202530.719:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 45.923149][ T29] audit: type=1326 audit(1762202530.719:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 45.946449][ T29] audit: type=1326 audit(1762202530.719:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 45.969784][ T29] audit: type=1326 audit(1762202530.719:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 45.993090][ T29] audit: type=1326 audit(1762202530.719:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605d8af6c9 code=0x7ffc0000 [ 46.215578][ T4536] net_ratelimit: 2 callbacks suppressed [ 46.215599][ T4536] Set syz0 is full, maxelem 0 reached [ 46.569983][ T4550] lo speed is unknown, defaulting to 1000 [ 47.090584][ T4585] lo speed is unknown, defaulting to 1000 [ 47.171959][ T4588] lo speed is unknown, defaulting to 1000 [ 47.397152][ T4599] lo speed is unknown, defaulting to 1000 [ 47.535438][ T4608] loop3: detected capacity change from 0 to 512 [ 47.554300][ T4608] ------------[ cut here ]------------ [ 47.559796][ T4608] EA inode 11 i_nlink=2 [ 47.560246][ T4608] WARNING: CPU: 1 PID: 4608 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 47.574638][ T4608] Modules linked in: [ 47.578588][ T4608] CPU: 1 UID: 0 PID: 4608 Comm: syz.3.303 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.588307][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.598439][ T4608] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 47.608795][ T4608] Code: 90 49 8d 7e 40 e8 76 fd b8 ff 4d 8b 6e 40 4c 89 e7 e8 8a f8 b8 ff 41 8b 56 48 48 c7 c7 fa cc 55 86 4c 89 ee e8 07 fa 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 88 e7 b5 03 0f 1f 84 00 00 00 00 00 [ 47.628470][ T4608] RSP: 0018:ffffc90000e635a0 EFLAGS: 00010246 [ 47.634598][ T4608] RAX: d6db1810f2f9f100 RBX: ffff88811aaa8eb0 RCX: 0000000000080000 [ 47.642574][ T4608] RDX: ffffc90003125000 RSI: 0000000000003d6d RDI: 0000000000003d6e [ 47.650572][ T4608] RBP: 0000000000000002 R08: 0001c90000e63427 R09: 0000000000000000 [ 47.658603][ T4608] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811aaa8e60 [ 47.666662][ T4608] R13: 000000000000000b R14: ffff88811aaa8e18 R15: 0000000000000001 [ 47.674703][ T4608] FS: 00007f605c30f6c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 47.683790][ T4608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.690386][ T4608] CR2: 00007f33f9b85000 CR3: 00000001218b8000 CR4: 00000000003506f0 [ 47.698397][ T4608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.706401][ T4608] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 47.714460][ T4608] Call Trace: [ 47.717743][ T4608] [ 47.720726][ T4608] ext4_xattr_set_entry+0x77f/0x1020 [ 47.726159][ T4608] ext4_xattr_ibody_set+0x184/0x3c0 [ 47.731394][ T4608] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 47.737262][ T4608] __ext4_expand_extra_isize+0x246/0x280 [ 47.742916][ T4608] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 47.748433][ T4608] ext4_evict_inode+0x80e/0xd90 [ 47.753403][ T4608] ? __pfx_ext4_evict_inode+0x10/0x10 [ 47.758857][ T4608] evict+0x2e3/0x550 [ 47.762761][ T4608] ? __dquot_initialize+0x146/0x7c0 [ 47.768016][ T4608] iput+0x4ed/0x650 [ 47.771849][ T4608] ext4_process_orphan+0x1a9/0x1c0 [ 47.776994][ T4608] ext4_orphan_cleanup+0x6a8/0xa00 [ 47.782132][ T4608] ext4_fill_super+0x3483/0x3810 [ 47.787108][ T4608] ? snprintf+0x86/0xb0 [ 47.791300][ T4608] ? set_blocksize+0x1a8/0x310 [ 47.796092][ T4608] ? sb_set_blocksize+0xe3/0x100 [ 47.801107][ T4608] ? setup_bdev_super+0x30e/0x370 [ 47.806181][ T4608] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.811630][ T4608] get_tree_bdev_flags+0x291/0x300 [ 47.816813][ T4608] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.822116][ T4608] get_tree_bdev+0x1f/0x30 [ 47.826593][ T4608] ext4_get_tree+0x1c/0x30 [ 47.831016][ T4608] vfs_get_tree+0x57/0x1d0 [ 47.835502][ T4608] do_new_mount+0x24d/0x660 [ 47.840072][ T4608] path_mount+0x4a5/0xb70 [ 47.844700][ T4608] ? user_path_at+0x109/0x130 [ 47.849556][ T4608] __se_sys_mount+0x28c/0x2e0 [ 47.854408][ T4608] ? do_mkdirat+0x3ac/0x3f0 [ 47.858933][ T4608] __x64_sys_mount+0x67/0x80 [ 47.863585][ T4608] x64_sys_call+0x2b51/0x3000 [ 47.868300][ T4608] do_syscall_64+0xd2/0x200 [ 47.872811][ T4608] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.878943][ T4608] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.884765][ T4608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.890767][ T4608] RIP: 0033:0x7f605d8b0e6a [ 47.895211][ T4608] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.914850][ T4608] RSP: 002b:00007f605c30ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.923344][ T4608] RAX: ffffffffffffffda RBX: 00007f605c30eef0 RCX: 00007f605d8b0e6a [ 47.931326][ T4608] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f605c30eeb0 [ 47.939341][ T4608] RBP: 0000200000000180 R08: 00007f605c30eef0 R09: 0000000000800700 [ 47.947346][ T4608] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 47.955348][ T4608] R13: 00007f605c30eeb0 R14: 000000000000046f R15: 000000000000002c [ 47.963352][ T4608] [ 47.966372][ T4608] ---[ end trace 0000000000000000 ]--- [ 47.974442][ T4608] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.303: iget: bad extra_isize 90 (inode size 256) [ 48.000807][ T4608] EXT4-fs (loop3): Remounting filesystem read-only [ 48.008372][ T4608] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 48.033169][ T4608] EXT4-fs (loop3): 1 orphan inode deleted [ 48.039356][ T4608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.074949][ T4621] __nla_validate_parse: 6 callbacks suppressed [ 48.074966][ T4621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 48.104686][ T4621] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4621 comm=syz.1.308 [ 48.118335][ T4621] netlink: 'syz.1.308': attribute type 1 has an invalid length. [ 48.136487][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.190817][ T4624] loop3: detected capacity change from 0 to 512 [ 48.213681][ T4624] EXT4-fs: Ignoring removed bh option [ 48.235304][ T4624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 48.259303][ T4624] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.336021][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 48.377063][ T4630] veth0_to_team: entered promiscuous mode [ 48.404625][ T4632] netlink: 'syz.0.306': attribute type 27 has an invalid length. [ 48.423235][ T4632] geneve2: left promiscuous mode [ 48.439499][ T3614] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.484912][ T4632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.492477][ T4641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.315'. [ 48.503905][ T4632] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.514514][ T4632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.514520][ T4643] netlink: 'syz.0.306': attribute type 27 has an invalid length. [ 48.557431][ T3614] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.565991][ T4641] IPVS: Error connecting to the multicast addr [ 48.583043][ T3614] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.591962][ T3614] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.675293][ T4658] netlink: 56 bytes leftover after parsing attributes in process `syz.0.321'. [ 48.728270][ T4662] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.841119][ T4662] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.910229][ T4662] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.966815][ T4662] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.985316][ T4671] lo speed is unknown, defaulting to 1000 [ 49.061693][ T3613] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.084103][ T3610] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.110614][ T4682] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 49.127730][ T3415] IPVS: starting estimator thread 0... [ 49.144258][ T3613] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.154458][ T3613] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.223870][ T4684] IPVS: using max 2736 ests per chain, 136800 per kthread [ 49.262008][ T4694] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.288575][ T4692] loop2: detected capacity change from 0 to 2048 [ 49.339828][ T4694] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.365673][ T4692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.394259][ T4692] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.416762][ T4694] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.513507][ T4694] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.543115][ T4702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.551560][ T4702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.575341][ T3661] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.588635][ T3661] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.604966][ T3661] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.618467][ T4702] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.333: bg 0: block 345: padding at end of block bitmap is not set [ 49.624345][ T3661] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.652314][ T4702] EXT4-fs (loop2): Remounting filesystem read-only [ 49.795930][ T4710] loop1: detected capacity change from 0 to 512 [ 49.819210][ T4710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.831968][ T4710] ext4 filesystem being mounted at /72/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.854174][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.895660][ T4717] loop1: detected capacity change from 0 to 512 [ 49.904670][ T4717] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.905752][ T4719] tipc: Enabling of bearer rejected, failed to enable media [ 49.929932][ T4717] EXT4-fs (loop1): 1 truncate cleaned up [ 49.937369][ T4717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.992444][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.241021][ T4734] macvlan1: entered promiscuous mode [ 50.247959][ T4734] ipvlan0: entered promiscuous mode [ 50.254302][ T4734] ipvlan0: left promiscuous mode [ 50.254428][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.268330][ T4734] macvlan1: left promiscuous mode [ 50.532370][ T4738] loop2: detected capacity change from 0 to 2048 [ 50.750103][ T4738] loop2: p2 p3 p7 [ 51.053440][ T4751] tipc: Enabling of bearer rejected, failed to enable media [ 51.198515][ T29] kauditd_printk_skb: 710 callbacks suppressed [ 51.198531][ T29] audit: type=1326 audit(1762202536.119:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76737f6c9 code=0x7ffc0000 [ 51.228064][ T29] audit: type=1326 audit(1762202536.119:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe76737f6c9 code=0x7ffc0000 [ 51.251499][ T29] audit: type=1326 audit(1762202536.119:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76737f6c9 code=0x7ffc0000 [ 51.274790][ T29] audit: type=1326 audit(1762202536.119:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76737f6c9 code=0x7ffc0000 [ 51.298104][ T29] audit: type=1326 audit(1762202536.119:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe76737f6c9 code=0x7ffc0000 [ 51.321573][ T29] audit: type=1326 audit(1762202536.119:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76737f6c9 code=0x7ffc0000 [ 51.345404][ T29] audit: type=1326 audit(1762202536.119:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76737f6c9 code=0x7ffc0000 [ 51.448279][ T4033] udevd[4033]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 51.459096][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 51.469897][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 51.740409][ T29] audit: type=1326 audit(1762202536.299:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe76737f6c9 code=0x7ffc0000 [ 51.767967][ T29] audit: type=1326 audit(1762202536.299:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76737f6c9 code=0x7ffc0000 [ 51.791282][ T29] audit: type=1326 audit(1762202536.299:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76737f6c9 code=0x7ffc0000 [ 52.019673][ T4768] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.239205][ T4778] loop2: detected capacity change from 0 to 512 [ 52.260113][ T4778] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.322585][ T4778] EXT4-fs (loop2): 1 truncate cleaned up [ 52.329093][ T4778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.419766][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.524253][ T4785] loop9: detected capacity change from 0 to 7 [ 52.551936][ T4785] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.566297][ T4785] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.574226][ T4785] loop9: unable to read partition table [ 52.580203][ T4785] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 52.580203][ T4785] ) failed (rc=-5) [ 52.594412][ T4757] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.605273][ T4757] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.623512][ T4757] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.631464][ T4757] Buffer I/O error on dev loop9, logical block 0, async page read [ 52.675638][ T4757] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.069008][ T4801] loop4: detected capacity change from 0 to 1024 [ 53.127890][ T4801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.986585][ T4801] syz.4.373 (4801) used greatest stack depth: 7048 bytes left [ 54.006285][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.169044][ T4848] sctp: [Deprecated]: syz.4.388 (pid 4848) Use of int in max_burst socket option. [ 54.169044][ T4848] Use struct sctp_assoc_value instead [ 54.261522][ T4852] syzkaller0: entered promiscuous mode [ 54.267141][ T4852] syzkaller0: entered allmulticast mode [ 54.295593][ T4854] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.384761][ T4854] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.397873][ T4859] loop1: detected capacity change from 0 to 128 [ 54.414623][ T4861] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 54.423946][ T4859] syz.1.393: attempt to access beyond end of device [ 54.423946][ T4859] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 54.439692][ T4854] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.454683][ T4859] syz.1.393: attempt to access beyond end of device [ 54.454683][ T4859] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 54.468051][ T4859] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 54.477581][ T4859] syz.1.393: attempt to access beyond end of device [ 54.477581][ T4859] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 54.491021][ T4859] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 54.501651][ T4854] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.513410][ T4859] syz.1.393: attempt to access beyond end of device [ 54.513410][ T4859] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 54.527662][ T4859] syz.1.393: attempt to access beyond end of device [ 54.527662][ T4859] loop1: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 54.541084][ T4859] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 54.550871][ T4859] syz.1.393: attempt to access beyond end of device [ 54.550871][ T4859] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 54.565015][ T4859] syz.1.393: attempt to access beyond end of device [ 54.565015][ T4859] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 54.590130][ T3631] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.606730][ T3631] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.615563][ T4859] syz.1.393: attempt to access beyond end of device [ 54.615563][ T4859] loop1: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 54.629425][ T3631] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.648931][ T3631] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.663508][ T4859] syz.1.393: attempt to access beyond end of device [ 54.663508][ T4859] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 54.681232][ T4874] netlink: 'syz.4.398': attribute type 27 has an invalid length. [ 54.683544][ T4859] syz.1.393: attempt to access beyond end of device [ 54.683544][ T4859] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 54.726365][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.796537][ T4882] netlink: 'syz.4.398': attribute type 27 has an invalid length. [ 54.815915][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.819274][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.862921][ T4874] bond1: left promiscuous mode [ 54.862938][ T4874] wireguard0: left promiscuous mode [ 54.865840][ T3405] lo speed is unknown, defaulting to 1000 [ 54.865872][ T3405] syz2: Port: 1 Link DOWN [ 54.908936][ T4875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.988693][ T4887] binfmt_misc: register: failed to install interpreter file ./file2 [ 55.003764][ T4875] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.051391][ T4875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.246401][ T3631] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.254912][ T4876] lo speed is unknown, defaulting to 1000 [ 55.264592][ T4885] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.318194][ T4876] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.325831][ T2967] lo speed is unknown, defaulting to 1000 [ 55.331715][ T3631] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.344556][ T3631] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.362817][ T3631] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.373540][ T4885] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.384643][ T4876] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.434617][ T4885] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.453602][ T4903] netlink: 96 bytes leftover after parsing attributes in process `syz.4.410'. [ 55.484802][ T4885] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.505506][ T4899] fido_id[4899]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.549777][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.566840][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.592875][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.614815][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.806549][ T4922] syz_tun: entered allmulticast mode [ 55.812571][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 55.823783][ T4922] syz_tun (unregistering): left allmulticast mode [ 56.619891][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 56.619906][ T29] audit: type=1326 audit(1762202541.549:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96607f6c9 code=0x7ffc0000 [ 56.662328][ T29] audit: type=1326 audit(1762202541.589:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff96607f6c9 code=0x7ffc0000 [ 56.685883][ T29] audit: type=1326 audit(1762202541.589:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96607f6c9 code=0x7ffc0000 [ 56.709215][ T29] audit: type=1326 audit(1762202541.589:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96607f6c9 code=0x7ffc0000 [ 56.732584][ T29] audit: type=1326 audit(1762202541.589:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff96607f6c9 code=0x7ffc0000 [ 56.755803][ T29] audit: type=1326 audit(1762202541.589:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96607f6c9 code=0x7ffc0000 [ 56.779102][ T29] audit: type=1326 audit(1762202541.589:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96607f6c9 code=0x7ffc0000 [ 56.802413][ T29] audit: type=1326 audit(1762202541.589:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7ff96607f6c9 code=0x7ffc0000 [ 56.825647][ T29] audit: type=1326 audit(1762202541.589:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96607f6c9 code=0x7ffc0000 [ 56.849000][ T29] audit: type=1326 audit(1762202541.589:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4938 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96607f6c9 code=0x7ffc0000 [ 57.054459][ T4945] lo speed is unknown, defaulting to 1000 [ 57.185366][ T4975] ip6t_rpfilter: unknown options [ 57.199471][ T4977] netlink: 'syz.2.442': attribute type 7 has an invalid length. [ 57.207349][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 58.197947][ T5028] binfmt_misc: register: failed to install interpreter file ./file2 [ 58.745750][ T5053] netlink: 'syz.3.475': attribute type 27 has an invalid length. [ 58.769561][ T5053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.777921][ T5053] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.787386][ T5053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.818330][ T5053] netlink: 'syz.3.475': attribute type 27 has an invalid length. [ 59.432493][ T5090] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 60.394052][ T5146] lo speed is unknown, defaulting to 1000 [ 61.049022][ T5179] netlink: 'syz.1.534': attribute type 4 has an invalid length. [ 61.086316][ T5179] netlink: 'syz.1.534': attribute type 4 has an invalid length. [ 61.205072][ T5199] netlink: 'syz.1.544': attribute type 4 has an invalid length. [ 61.215502][ T5199] netlink: 'syz.1.544': attribute type 4 has an invalid length. [ 61.241260][ T5201] bond0: (slave bond_slave_1): Releasing backup interface [ 61.538691][ T5225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'. [ 61.656543][ T5239] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 61.664317][ T5239] netlink: 'syz.3.561': attribute type 4 has an invalid length. [ 61.671946][ T5239] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.561'. [ 61.728202][ T29] kauditd_printk_skb: 927 callbacks suppressed [ 61.728217][ T29] audit: type=1400 audit(1762202546.659:3382): avc: denied { map_create } for pid=5242 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.753677][ T29] audit: type=1400 audit(1762202546.659:3383): avc: denied { map_create } for pid=5242 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.772825][ T29] audit: type=1400 audit(1762202546.659:3384): avc: denied { prog_load } for pid=5242 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.792065][ T29] audit: type=1400 audit(1762202546.659:3385): avc: denied { prog_load } for pid=5242 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.811176][ T29] audit: type=1400 audit(1762202546.659:3386): avc: denied { prog_load } for pid=5242 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.830188][ T29] audit: type=1400 audit(1762202546.659:3387): avc: denied { map_create } for pid=5242 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.849431][ T29] audit: type=1400 audit(1762202546.659:3388): avc: denied { map_create } for pid=5242 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.868610][ T29] audit: type=1400 audit(1762202546.659:3389): avc: denied { prog_load } for pid=5242 comm="syz.0.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.888072][ T29] audit: type=1400 audit(1762202546.709:3390): avc: denied { map_create } for pid=5244 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 61.907188][ T29] audit: type=1400 audit(1762202546.709:3391): avc: denied { create } for pid=5244 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 62.431235][ T5269] netlink: 'syz.1.573': attribute type 12 has an invalid length. [ 63.274294][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 63.483390][ T5346] veth2: entered promiscuous mode [ 63.488532][ T5346] veth2: entered allmulticast mode [ 63.587523][ T5352] netlink: 3 bytes leftover after parsing attributes in process `syz.2.613'. [ 63.604036][ T5352] 0X: renamed from caif0 [ 63.615312][ T5352] 0X: entered allmulticast mode [ 63.620598][ T5352] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 64.518302][ T5408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.636'. [ 64.530784][ T5410] netlink: 'syz.1.637': attribute type 12 has an invalid length. [ 64.666148][ T5436] netlink: 80 bytes leftover after parsing attributes in process `syz.0.650'. [ 64.689854][ T5442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.653'. [ 64.705136][ T5442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5442 comm=syz.0.653 [ 65.166626][ T5476] lo speed is unknown, defaulting to 1000 [ 65.309658][ T5501] lo speed is unknown, defaulting to 1000 [ 65.458562][ T5524] netlink: 'syz.0.687': attribute type 30 has an invalid length. [ 66.312329][ T5603] lo speed is unknown, defaulting to 1000 [ 66.457801][ T5618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.727'. [ 66.466721][ T5618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.727'. [ 66.616080][ T5650] netlink: 168 bytes leftover after parsing attributes in process `syz.1.742'. [ 66.680361][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 66.701371][ T5660] bridge_slave_0: left allmulticast mode [ 66.707056][ T5660] bridge_slave_0: left promiscuous mode [ 66.712850][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.720923][ T5660] bridge_slave_1: left allmulticast mode [ 66.726704][ T5660] bridge_slave_1: left promiscuous mode [ 66.732472][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.745097][ T5660] bond0: (slave bond_slave_0): Releasing backup interface [ 66.753511][ T29] kauditd_printk_skb: 1056 callbacks suppressed [ 66.753527][ T29] audit: type=1400 audit(1762202551.689:4448): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.774263][ T5664] netlink: 36 bytes leftover after parsing attributes in process `syz.0.748'. [ 66.788273][ T29] audit: type=1400 audit(1762202551.689:4449): avc: denied { prog_load } for pid=5659 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 66.811823][ T29] audit: type=1400 audit(1762202551.689:4450): avc: denied { prog_load } for pid=5659 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 66.830867][ T29] audit: type=1400 audit(1762202551.689:4451): avc: denied { prog_load } for pid=5659 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 66.849851][ T29] audit: type=1400 audit(1762202551.699:4452): avc: denied { map_create } for pid=5661 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 66.868965][ T29] audit: type=1400 audit(1762202551.709:4453): avc: denied { create } for pid=5661 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 66.888373][ T29] audit: type=1400 audit(1762202551.709:4454): avc: denied { create } for pid=5661 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 66.907826][ T29] audit: type=1400 audit(1762202551.709:4455): avc: denied { map_create } for pid=5661 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 66.927062][ T29] audit: type=1400 audit(1762202551.709:4456): avc: denied { map_create } for pid=5661 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 66.946102][ T29] audit: type=1400 audit(1762202551.709:4457): avc: denied { prog_load } for pid=5661 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 66.965501][ T5660] bond0: (slave bond_slave_1): Releasing backup interface [ 66.978602][ T5660] team0: Port device team_slave_0 removed [ 66.985293][ T5660] team0: Port device team_slave_1 removed [ 66.991320][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.001105][ T5660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.013583][ T5660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.238449][ T5710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 67.443523][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 67.453004][ T5725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'. [ 67.531551][ T5727] lo speed is unknown, defaulting to 1000 [ 67.592675][ T5733] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 67.610476][ T5733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 67.624699][ T5733] bond1: (slave geneve2): making interface the new active one [ 67.632473][ T5733] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 67.641205][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.655315][ T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.665231][ T5736] netlink: 'syz.2.780': attribute type 10 has an invalid length. [ 67.675482][ T5736] netlink: 'syz.2.780': attribute type 10 has an invalid length. [ 67.685185][ T5736] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.703130][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.711608][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.908570][ T5768] netlink: 'syz.3.790': attribute type 8 has an invalid length. [ 67.916608][ T5768] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 68.080539][ T5792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.806'. [ 68.474236][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.827'. [ 68.489631][ T5844] netlink: 76 bytes leftover after parsing attributes in process `syz.0.829'. [ 68.503019][ T5841] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 68.511778][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.520438][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.530440][ T5841] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 68.544512][ T5841] bond1 (unregistering): Released all slaves [ 68.560712][ T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.573179][ T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 68.696218][ T5859] lo speed is unknown, defaulting to 1000 [ 68.790887][ T5880] xfrm0: entered promiscuous mode [ 68.796303][ T5880] xfrm0: entered allmulticast mode [ 69.002029][ T5906] netlink: 'syz.4.857': attribute type 7 has an invalid length. [ 69.604658][ T5968] veth8: entered promiscuous mode [ 69.609753][ T5968] veth8: entered allmulticast mode [ 69.670964][ T5972] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 69.704338][ T5972] team0: Port device dummy0 added [ 69.721796][ T5976] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 69.731377][ T5976] team0: Port device dummy0 removed [ 69.738746][ T5976] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.925392][ T5982] lo speed is unknown, defaulting to 1000 [ 70.025506][ T5985] lo speed is unknown, defaulting to 1000 [ 70.166281][ T6009] netlink: 'syz.1.900': attribute type 12 has an invalid length. [ 70.264463][ T6024] team1: entered promiscuous mode [ 70.269566][ T6024] team1: entered allmulticast mode [ 70.581220][ T6061] bond0: (slave dummy0): Releasing backup interface [ 70.610233][ T6061] bond1: (slave geneve2): Releasing active interface [ 70.620086][ T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 70.634167][ T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 70.670806][ T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 70.694602][ T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 71.003325][ T6101] netlink: 'syz.1.944': attribute type 12 has an invalid length. [ 71.123708][ T6117] syzkaller0: entered promiscuous mode [ 71.209790][ T6124] pim6reg1: entered promiscuous mode [ 71.215206][ T6124] pim6reg1: entered allmulticast mode [ 71.345635][ T6126] lo speed is unknown, defaulting to 1000 [ 71.416864][ T6133] veth5: entered promiscuous mode [ 71.421965][ T6133] veth5: entered allmulticast mode [ 71.766335][ T29] kauditd_printk_skb: 1440 callbacks suppressed [ 71.766351][ T29] audit: type=1400 audit(1762203068.701:5898): avc: denied { prog_load } for pid=6152 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 71.854037][ T29] audit: type=1400 audit(1762203068.791:5899): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 71.867779][ T6156] block device autoloading is deprecated and will be removed. [ 71.883464][ T29] audit: type=1400 audit(1762203068.791:5900): avc: denied { create } for pid=6155 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 71.906052][ T29] audit: type=1400 audit(1762203068.791:5901): avc: denied { open } for pid=6155 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 71.925207][ T29] audit: type=1400 audit(1762203068.791:5902): avc: denied { open } for pid=6155 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 71.944375][ T29] audit: type=1400 audit(1762203068.791:5903): avc: denied { map_create } for pid=6155 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 71.963638][ T29] audit: type=1400 audit(1762203068.791:5904): avc: denied { prog_load } for pid=6155 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 71.982678][ T29] audit: type=1400 audit(1762203068.791:5905): avc: denied { prog_load } for pid=6155 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 72.001667][ T29] audit: type=1400 audit(1762203068.791:5906): avc: denied { prog_load } for pid=6155 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 72.006536][ T6162] __nla_validate_parse: 9 callbacks suppressed [ 72.006554][ T6162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.970'. [ 72.033286][ T29] audit: type=1400 audit(1762203068.841:5907): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 72.073049][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'. [ 72.176780][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 72.191859][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 72.414437][ T6196] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.981'. [ 72.583284][ T6224] netlink: 'syz.3.995': attribute type 27 has an invalid length. [ 72.605610][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.613534][ T6224] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.622540][ T6224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.657373][ T6228] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 72.675301][ T6228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.996'. [ 72.688949][ T6228] bond1: (slave geneve3): making interface the new active one [ 72.696741][ T6228] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 72.705491][ T3673] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 72.714196][ T3673] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 72.722533][ T3673] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 72.731558][ T3673] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 72.745762][ T6235] erspan0: entered promiscuous mode [ 72.751031][ T6235] vlan2: entered promiscuous mode [ 73.254575][ T6262] : renamed from team_slave_1 [ 73.366494][ T6270] lo speed is unknown, defaulting to 1000 [ 74.444712][ T6369] netlink: 'syz.3.1056': attribute type 41 has an invalid length. [ 74.454976][ T6362] lo speed is unknown, defaulting to 1000 [ 74.589341][ T6394] $H: renamed from bond0 [ 74.604177][ T6394] $H: entered promiscuous mode [ 74.717544][ T6404] lo speed is unknown, defaulting to 1000 [ 74.739005][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 74.844684][ T6415] veth6: entered promiscuous mode [ 74.849840][ T6415] veth6: entered allmulticast mode [ 75.360832][ T6438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.713194][ T6452] lo speed is unknown, defaulting to 1000 [ 75.843238][ T23] ================================================================== [ 75.851428][ T23] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 75.858443][ T23] [ 75.860754][ T23] read-write to 0xffff888237c29de4 of 4 bytes by task 9 on cpu 0: [ 75.868537][ T23] wq_worker_running+0x95/0x120 [ 75.873377][ T23] schedule_timeout+0xb7/0x170 [ 75.878127][ T23] msleep+0x50/0x90 [ 75.881930][ T23] nsim_fib_event_work+0x42e6/0x4790 [ 75.887206][ T23] process_scheduled_works+0x4ce/0x9d0 [ 75.892665][ T23] worker_thread+0x582/0x770 [ 75.897243][ T23] kthread+0x489/0x510 [ 75.901300][ T23] ret_from_fork+0x122/0x1b0 [ 75.905881][ T23] ret_from_fork_asm+0x1a/0x30 [ 75.910635][ T23] [ 75.912943][ T23] read to 0xffff888237c29de4 of 4 bytes by task 23 on cpu 1: [ 75.920293][ T23] kick_pool+0x49/0x2d0 [ 75.924434][ T23] __queue_work+0x8cb/0xb50 [ 75.928938][ T23] queue_work_on+0xd1/0x160 [ 75.933428][ T23] wg_packet_encrypt_worker+0xc0a/0xe10 [ 75.938964][ T23] process_scheduled_works+0x4ce/0x9d0 [ 75.944417][ T23] worker_thread+0x582/0x770 [ 75.948990][ T23] kthread+0x489/0x510 [ 75.953048][ T23] ret_from_fork+0x122/0x1b0 [ 75.957623][ T23] ret_from_fork_asm+0x1a/0x30 [ 75.962375][ T23] [ 75.964680][ T23] value changed: 0x00000000 -> 0x00000001 [ 75.970377][ T23] [ 75.972697][ T23] Reported by Kernel Concurrency Sanitizer on: [ 75.978835][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.990018][ T23] Tainted: [W]=WARN [ 75.993806][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 76.003849][ T23] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 76.010347][ T23] ==================================================================