last executing test programs: 25.308272719s ago: executing program 1 (id=20): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 25.204478222s ago: executing program 1 (id=21): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 24.837994679s ago: executing program 1 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 24.74925083s ago: executing program 1 (id=26): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) inotify_init1(0x800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 24.664648092s ago: executing program 1 (id=27): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) close_range(r2, 0xffffffffffffffff, 0x0) 23.924496377s ago: executing program 1 (id=46): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) close(0x3) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) 23.924377777s ago: executing program 32 (id=46): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) close(0x3) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) 1.623242178s ago: executing program 4 (id=556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x28}}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.513788641s ago: executing program 4 (id=562): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 1.478110971s ago: executing program 4 (id=563): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.377125323s ago: executing program 0 (id=569): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1.139356128s ago: executing program 0 (id=574): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$evdev(0x0, 0x2, 0x903d01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0xb4b, 0x9, 0x9, 0x1, 0x400002}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@remote, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x200000000002f1b, 0xfffffffffffffffe, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in6=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 1.01581805s ago: executing program 2 (id=576): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.00688267s ago: executing program 4 (id=577): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 957.185081ms ago: executing program 4 (id=578): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 910.151722ms ago: executing program 0 (id=579): faccessat(0xffffffffffffffff, 0x0, 0x5) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getpeername(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000015c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3002c8cc}, 0x0) 893.803183ms ago: executing program 0 (id=580): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000005280), 0x10) r2 = dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000230800"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x2710], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x0) 864.585513ms ago: executing program 2 (id=581): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b00000000060014"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) syz_emit_ethernet(0x0, 0x0, 0x0) 852.665473ms ago: executing program 0 (id=582): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000140)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 844.816593ms ago: executing program 2 (id=583): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x20000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000ad00000000000000bf91200000000000b7020000020000008500000008000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) read(r4, &(0x7f0000000200)=""/209, 0xd1) 788.482455ms ago: executing program 0 (id=584): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 788.127134ms ago: executing program 2 (id=585): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 579.131568ms ago: executing program 5 (id=587): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket(0x11, 0x80a, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 499.97069ms ago: executing program 5 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x0) 416.060762ms ago: executing program 5 (id=589): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000580)={r4, 0x7}, 0x8) 380.544313ms ago: executing program 2 (id=591): bpf$MAP_CREATE(0x0, 0x0, 0x48) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='module_request\x00', r3}, 0x18) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) 316.395743ms ago: executing program 5 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) splice(r1, 0x0, r2, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 315.510273ms ago: executing program 3 (id=593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 290.537214ms ago: executing program 3 (id=594): add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x42, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 280.924864ms ago: executing program 2 (id=595): socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000280)='netlink_extack\x00', r0, 0x0, 0xffffffffffffd306}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xaf, 0x70, 0x10, 0x2357, 0x100, 0x8ea6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xdd860000, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x28, 0x16}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 205.026756ms ago: executing program 3 (id=596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x2, 0x2) 179.593366ms ago: executing program 3 (id=597): ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000780)=ANY=[@ANYBLOB="308c000001"]) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000003060500000000000000000000000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 148.941547ms ago: executing program 3 (id=598): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)='F', 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0) 103.224348ms ago: executing program 4 (id=599): openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x7}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0xfffffffffffffd57, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x10000, 0x0) 72.207048ms ago: executing program 3 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1, 0xfffffffd}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 71.376318ms ago: executing program 5 (id=610): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) creat(0x0, 0x4b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 0s ago: executing program 5 (id=601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2218804, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000008c0)="3bf58d7d45d32cfe", 0x8) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 27.419558][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 27.419575][ T29] audit: type=1400 audit(1758648768.886:57): avc: denied { transition } for pid=3284 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.448718][ T29] audit: type=1400 audit(1758648768.886:58): avc: denied { noatsecure } for pid=3284 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.468414][ T29] audit: type=1400 audit(1758648768.896:59): avc: denied { write } for pid=3284 comm="sh" path="pipe:[487]" dev="pipefs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 27.490410][ T29] audit: type=1400 audit(1758648768.896:60): avc: denied { rlimitinh } for pid=3284 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.509168][ T29] audit: type=1400 audit(1758648768.896:61): avc: denied { siginh } for pid=3284 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. [ 35.740802][ T29] audit: type=1400 audit(1758648777.216:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.742004][ T3294] cgroup: Unknown subsys name 'net' [ 35.763635][ T29] audit: type=1400 audit(1758648777.216:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.791005][ T29] audit: type=1400 audit(1758648777.236:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.941091][ T3294] cgroup: Unknown subsys name 'cpuset' [ 35.947531][ T3294] cgroup: Unknown subsys name 'rlimit' [ 36.058617][ T29] audit: type=1400 audit(1758648777.526:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.082165][ T29] audit: type=1400 audit(1758648777.526:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.102757][ T29] audit: type=1400 audit(1758648777.526:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.123266][ T29] audit: type=1400 audit(1758648777.526:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.143672][ T29] audit: type=1400 audit(1758648777.526:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.153075][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.168505][ T29] audit: type=1400 audit(1758648777.526:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.200397][ T29] audit: type=1400 audit(1758648777.656:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.270654][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.489981][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 37.529785][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 37.586777][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.593930][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.601368][ T3304] bridge_slave_0: entered allmulticast mode [ 37.607741][ T3304] bridge_slave_0: entered promiscuous mode [ 37.616869][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.624045][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.631212][ T3304] bridge_slave_1: entered allmulticast mode [ 37.637550][ T3304] bridge_slave_1: entered promiscuous mode [ 37.662698][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 37.681325][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.688419][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.696157][ T3308] bridge_slave_0: entered allmulticast mode [ 37.702523][ T3308] bridge_slave_0: entered promiscuous mode [ 37.728368][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.739013][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.748336][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.755512][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.762807][ T3308] bridge_slave_1: entered allmulticast mode [ 37.769354][ T3308] bridge_slave_1: entered promiscuous mode [ 37.797009][ T3304] team0: Port device team_slave_0 added [ 37.814265][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 37.826141][ T3304] team0: Port device team_slave_1 added [ 37.832952][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.859779][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.876639][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.883732][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.909828][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.923655][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.930672][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.956806][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.972732][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.979814][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.987062][ T3305] bridge_slave_0: entered allmulticast mode [ 37.993546][ T3305] bridge_slave_0: entered promiscuous mode [ 38.021526][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.028598][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.035825][ T3305] bridge_slave_1: entered allmulticast mode [ 38.042481][ T3305] bridge_slave_1: entered promiscuous mode [ 38.048669][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 38.058180][ T3308] team0: Port device team_slave_0 added [ 38.064916][ T3308] team0: Port device team_slave_1 added [ 38.108249][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.130816][ T3304] hsr_slave_0: entered promiscuous mode [ 38.136845][ T3304] hsr_slave_1: entered promiscuous mode [ 38.143443][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.150639][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.176588][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.193624][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.210754][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.217789][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.243850][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.259613][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.266735][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.274028][ T3311] bridge_slave_0: entered allmulticast mode [ 38.280533][ T3311] bridge_slave_0: entered promiscuous mode [ 38.297363][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.304548][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.311702][ T3311] bridge_slave_1: entered allmulticast mode [ 38.318049][ T3311] bridge_slave_1: entered promiscuous mode [ 38.339292][ T3305] team0: Port device team_slave_0 added [ 38.361157][ T3305] team0: Port device team_slave_1 added [ 38.374547][ T3308] hsr_slave_0: entered promiscuous mode [ 38.380717][ T3308] hsr_slave_1: entered promiscuous mode [ 38.386683][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 38.392458][ T3308] Cannot create hsr debugfs directory [ 38.407791][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.414933][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.422186][ T3315] bridge_slave_0: entered allmulticast mode [ 38.428502][ T3315] bridge_slave_0: entered promiscuous mode [ 38.446406][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.453396][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.479421][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.491631][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.502021][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.513771][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.520945][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.528216][ T3315] bridge_slave_1: entered allmulticast mode [ 38.534606][ T3315] bridge_slave_1: entered promiscuous mode [ 38.546153][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.553298][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.579251][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.628160][ T3311] team0: Port device team_slave_0 added [ 38.635239][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.657584][ T3311] team0: Port device team_slave_1 added [ 38.669419][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.697429][ T3305] hsr_slave_0: entered promiscuous mode [ 38.703759][ T3305] hsr_slave_1: entered promiscuous mode [ 38.709818][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 38.715609][ T3305] Cannot create hsr debugfs directory [ 38.732464][ T3315] team0: Port device team_slave_0 added [ 38.748166][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.755175][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.781256][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.792891][ T3315] team0: Port device team_slave_1 added [ 38.807583][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.814694][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.840684][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.889674][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.896695][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.922845][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.934139][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.941130][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.967074][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.012006][ T3311] hsr_slave_0: entered promiscuous mode [ 39.018245][ T3311] hsr_slave_1: entered promiscuous mode [ 39.024240][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 39.029967][ T3311] Cannot create hsr debugfs directory [ 39.055496][ T3315] hsr_slave_0: entered promiscuous mode [ 39.061662][ T3315] hsr_slave_1: entered promiscuous mode [ 39.067575][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 39.073459][ T3315] Cannot create hsr debugfs directory [ 39.124397][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.150233][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.168458][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.182015][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.234152][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.247584][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.260946][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.271757][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.292743][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.302119][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.311197][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.331295][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.363530][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.385103][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.394200][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.403974][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.420013][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.447436][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.461146][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.468318][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.478271][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.498189][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.507535][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.517832][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.532352][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.539443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.569904][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.597797][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.623300][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.633888][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.652533][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.666145][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.673351][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.682432][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.689484][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.707863][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.715164][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.732604][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.739833][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.754888][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.771875][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.799689][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.814863][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.829206][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.836487][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.847355][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.854452][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.866164][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.874736][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.881832][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.903867][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.911095][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.952982][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.963430][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.986397][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.996903][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.044337][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.070945][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.132367][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.163218][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.281947][ T3304] veth0_vlan: entered promiscuous mode [ 40.293086][ T3308] veth0_vlan: entered promiscuous mode [ 40.303977][ T3304] veth1_vlan: entered promiscuous mode [ 40.311438][ T3305] veth0_vlan: entered promiscuous mode [ 40.319314][ T3308] veth1_vlan: entered promiscuous mode [ 40.334372][ T3305] veth1_vlan: entered promiscuous mode [ 40.358786][ T3315] veth0_vlan: entered promiscuous mode [ 40.366046][ T3311] veth0_vlan: entered promiscuous mode [ 40.379540][ T3304] veth0_macvtap: entered promiscuous mode [ 40.391421][ T3315] veth1_vlan: entered promiscuous mode [ 40.400663][ T3308] veth0_macvtap: entered promiscuous mode [ 40.407428][ T3311] veth1_vlan: entered promiscuous mode [ 40.414715][ T3305] veth0_macvtap: entered promiscuous mode [ 40.422641][ T3308] veth1_macvtap: entered promiscuous mode [ 40.429212][ T3304] veth1_macvtap: entered promiscuous mode [ 40.442856][ T3305] veth1_macvtap: entered promiscuous mode [ 40.454892][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.466459][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.482722][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.494560][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.504465][ T3315] veth0_macvtap: entered promiscuous mode [ 40.513023][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.526004][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.536118][ T3311] veth0_macvtap: entered promiscuous mode [ 40.542717][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.556745][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.564986][ T3315] veth1_macvtap: entered promiscuous mode [ 40.573718][ T3311] veth1_macvtap: entered promiscuous mode [ 40.580892][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.589689][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.609640][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.628487][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.635893][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.646198][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.654126][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.669658][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.681638][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.695247][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.705671][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.730151][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.739562][ T310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.755010][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.771324][ T310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.784834][ T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.795317][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 40.795333][ T29] audit: type=1400 audit(1758648782.266:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.825663][ T29] audit: type=1400 audit(1758648782.266:91): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.870809][ T29] audit: type=1400 audit(1758648782.266:92): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.880955][ T310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.896369][ T29] audit: type=1400 audit(1758648782.326:93): avc: denied { map_create } for pid=3476 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.923768][ T29] audit: type=1400 audit(1758648782.326:94): avc: denied { bpf } for pid=3476 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.943944][ T29] audit: type=1400 audit(1758648782.326:95): avc: denied { map_read map_write } for pid=3476 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.965737][ T29] audit: type=1400 audit(1758648782.326:96): avc: denied { prog_load } for pid=3476 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.984577][ T29] audit: type=1400 audit(1758648782.326:97): avc: denied { perfmon } for pid=3476 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.005157][ T29] audit: type=1400 audit(1758648782.326:98): avc: denied { prog_run } for pid=3476 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.050277][ T310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.072001][ T3479] loop0: detected capacity change from 0 to 512 [ 41.079850][ T29] audit: type=1400 audit(1758648782.546:99): avc: denied { create } for pid=3488 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.090656][ T310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.113132][ T310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.122834][ T310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.132585][ T310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.145556][ T310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.178568][ T3479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.228559][ T3479] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.244772][ T3500] process 'syz.2.6' launched '/dev/fd/3' with NULL argv: empty string added [ 41.265708][ T3479] syz.0.1 (3479) used greatest stack depth: 10552 bytes left [ 41.305347][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.509603][ T3521] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.14'. [ 41.718867][ T3534] loop0: detected capacity change from 0 to 1024 [ 41.740520][ T3534] ======================================================= [ 41.740520][ T3534] WARNING: The mand mount option has been deprecated and [ 41.740520][ T3534] and is ignored by this kernel. Remove the mand [ 41.740520][ T3534] option from the mount to silence this warning. [ 41.740520][ T3534] ======================================================= [ 41.822674][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.917505][ T3534] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.19: Allocating blocks 449-513 which overlap fs metadata [ 41.967778][ T3533] EXT4-fs (loop0): pa ffff888106e180e0: logic 48, phys. 177, len 21 [ 41.975934][ T3533] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 42.061588][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.108271][ T3546] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 42.176636][ T3551] serio: Serial port ptm0 [ 42.249554][ T3556] loop1: detected capacity change from 0 to 128 [ 42.272748][ T3556] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.294888][ T3556] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.356896][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.584217][ T3564] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 42.604855][ T3564] vhci_hcd: invalid port number 96 [ 42.610002][ T3564] vhci_hcd: default hub control req: 0017 vfffc i0060 l0 [ 42.825112][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 42.875675][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 42.894887][ T3587] team1: entered promiscuous mode [ 42.900004][ T3587] team1: entered allmulticast mode [ 42.906896][ T3587] Zero length message leads to an empty skb [ 42.940768][ T3591] loop3: detected capacity change from 0 to 1024 [ 42.968972][ T3594] loop2: detected capacity change from 0 to 512 [ 42.969118][ T3591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.981718][ C1] hrtimer: interrupt took 65777 ns [ 43.053470][ T3594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.067285][ T3594] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.145443][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.427886][ T3620] loop2: detected capacity change from 0 to 512 [ 43.482013][ T3603] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 43.499647][ T3603] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 43.512165][ T3603] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.512165][ T3603] [ 43.521842][ T3603] EXT4-fs (loop3): Total free blocks count 0 [ 43.527882][ T3603] EXT4-fs (loop3): Free/Dirty block details [ 43.533847][ T3603] EXT4-fs (loop3): free_blocks=68451041280 [ 43.539759][ T3603] EXT4-fs (loop3): dirty_blocks=16400 [ 43.544756][ T3620] EXT4-fs (loop2): too many log groups per flexible block group [ 43.545245][ T3603] EXT4-fs (loop3): Block reservation details [ 43.552932][ T3620] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 43.558854][ T3603] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 43.593590][ T3620] EXT4-fs (loop2): mount failed [ 43.632681][ T3603] syz.3.40 (3603) used greatest stack depth: 10136 bytes left [ 43.649453][ T3629] loop4: detected capacity change from 0 to 512 [ 43.673565][ T3629] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.686692][ T3629] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.703179][ T3441] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 43.793022][ T3629] EXT4-fs (loop4): 1 truncate cleaned up [ 43.795996][ T3605] chnl_net:caif_netlink_parms(): no params data found [ 43.799250][ T3629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.860520][ T3639] pim6reg: entered allmulticast mode [ 43.867839][ T3639] pim6reg: left allmulticast mode [ 43.891195][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.911181][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.918264][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.944685][ T3605] bridge_slave_0: entered allmulticast mode [ 43.951752][ T3605] bridge_slave_0: entered promiscuous mode [ 43.959407][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.966585][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.966865][ T3649] loop4: detected capacity change from 0 to 1024 [ 44.002752][ T3649] EXT4-fs: Ignoring removed orlov option [ 44.004296][ T3605] bridge_slave_1: entered allmulticast mode [ 44.015543][ T3605] bridge_slave_1: entered promiscuous mode [ 44.028299][ T3649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.048883][ T3654] bridge_slave_1: left allmulticast mode [ 44.054639][ T3654] bridge_slave_1: left promiscuous mode [ 44.060393][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.075724][ T3654] bridge_slave_0: left allmulticast mode [ 44.081656][ T3654] bridge_slave_0: left promiscuous mode [ 44.087424][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.155183][ T310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.188905][ T3605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.205781][ T3605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.262167][ T310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.285020][ T3605] team0: Port device team_slave_0 added [ 44.291949][ T3605] team0: Port device team_slave_1 added [ 44.335906][ T310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.349859][ T3605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.356895][ T3605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.383014][ T3605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.398780][ T3605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.406005][ T3605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.432083][ T3605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.473287][ T310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.488004][ T3605] hsr_slave_0: entered promiscuous mode [ 44.495160][ T3605] hsr_slave_1: entered promiscuous mode [ 44.501851][ T3605] debugfs: 'hsr0' already exists in 'hsr' [ 44.507758][ T3605] Cannot create hsr debugfs directory [ 44.699716][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 44.740973][ T310] bridge_slave_1: left allmulticast mode [ 44.746685][ T310] bridge_slave_1: left promiscuous mode [ 44.752515][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.816444][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.826215][ T310] bridge_slave_0: left allmulticast mode [ 44.832113][ T310] bridge_slave_0: left promiscuous mode [ 44.837961][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.889720][ T3715] syz.0.75 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.003117][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.013004][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.022919][ T310] bond0 (unregistering): Released all slaves [ 45.037121][ T3707] tipc: Started in network mode [ 45.042209][ T3707] tipc: Node identity 225752177396, cluster identity 4711 [ 45.049600][ T3707] tipc: Enabled bearer , priority 0 [ 45.084565][ T3702] tipc: Resetting bearer [ 45.139085][ T3686] tipc: Resetting bearer [ 45.162285][ T3686] tipc: Disabling bearer [ 45.173965][ T310] hsr_slave_0: left promiscuous mode [ 45.179781][ T310] hsr_slave_1: left promiscuous mode [ 45.185585][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.193762][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.201727][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.209215][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.232555][ T310] veth1_macvtap: left promiscuous mode [ 45.240362][ T310] veth0_macvtap: left promiscuous mode [ 45.245985][ T310] veth1_vlan: left promiscuous mode [ 45.261584][ T310] veth0_vlan: left promiscuous mode [ 45.372665][ T310] team0 (unregistering): Port device team_slave_1 removed [ 45.392708][ T310] team0 (unregistering): Port device team_slave_0 removed [ 45.546928][ T3605] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.556398][ T3605] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.584471][ T3605] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.598284][ T3751] loop2: detected capacity change from 0 to 4096 [ 45.608773][ T3605] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.644033][ T3751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.720539][ T3605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.752398][ T3605] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.778553][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.785787][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.802845][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.822582][ T2615] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.829807][ T2615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.890922][ T3605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.913773][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 45.913791][ T29] audit: type=1400 audit(1758648787.376:364): avc: denied { shutdown } for pid=3768 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.954417][ T3775] batman_adv: batadv0: Adding interface: dummy0 [ 45.960756][ T3775] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.992065][ T3775] batman_adv: batadv0: Interface activated: dummy0 [ 46.213041][ T3605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.319175][ T29] audit: type=1400 audit(1758648787.786:365): avc: denied { read write } for pid=3812 comm="syz.2.92" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.342784][ T29] audit: type=1400 audit(1758648787.786:366): avc: denied { open } for pid=3812 comm="syz.2.92" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.366215][ T29] audit: type=1400 audit(1758648787.786:367): avc: denied { ioctl } for pid=3812 comm="syz.2.92" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.394743][ T3813] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.447357][ T29] audit: type=1400 audit(1758648787.916:368): avc: denied { ioctl } for pid=3812 comm="syz.2.92" path="socket:[6343]" dev="sockfs" ino=6343 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.458571][ T3821] loop3: detected capacity change from 0 to 1024 [ 46.533571][ T3821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.559214][ T3605] veth0_vlan: entered promiscuous mode [ 46.588809][ T3605] veth1_vlan: entered promiscuous mode [ 46.597557][ T3821] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.93: Allocating blocks 449-513 which overlap fs metadata [ 46.637317][ T3605] veth0_macvtap: entered promiscuous mode [ 46.651800][ T3605] veth1_macvtap: entered promiscuous mode [ 46.685116][ T3605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.697632][ T3821] SELinux: Context @ is not valid (left unmapped). [ 46.704728][ T29] audit: type=1400 audit(1758648788.176:369): avc: denied { relabelto } for pid=3818 comm="syz.3.93" name="cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 46.736509][ T3821] EXT4-fs (loop3): pa ffff888106e18150: logic 48, phys. 177, len 21 [ 46.744744][ T3821] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 46.762696][ T3605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.783818][ T3441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.794574][ T3441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.812341][ T3441] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.823392][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.826643][ T29] audit: type=1400 audit(1758648788.296:370): avc: denied { mounton } for pid=3605 comm="syz-executor" path="/root/syzkaller.Qq8hWZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 46.863268][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.905304][ T3851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.956735][ T3855] loop4: detected capacity change from 0 to 512 [ 46.977020][ T3855] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.981417][ T29] audit: type=1400 audit(1758648788.456:371): avc: denied { block_suspend } for pid=3850 comm="syz.3.95" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.030163][ T3855] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 47.066152][ T29] audit: type=1400 audit(1758648788.536:372): avc: denied { relabelfrom } for pid=3859 comm="syz.5.97" name="NETLINK" dev="sockfs" ino=8017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 47.090058][ T29] audit: type=1400 audit(1758648788.536:373): avc: denied { relabelto } for pid=3859 comm="syz.5.97" name="NETLINK" dev="sockfs" ino=8017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 47.097429][ T3304] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 47.175253][ T3870] loop4: detected capacity change from 0 to 512 [ 47.183600][ T3870] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.192870][ T3870] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.213140][ T3870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 47.239755][ T3870] System zones: 1-12 [ 47.244603][ T3870] EXT4-fs (loop4): 1 truncate cleaned up [ 47.254155][ T3870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.273885][ T3879] loop0: detected capacity change from 0 to 1024 [ 47.285287][ T3879] EXT4-fs: Ignoring removed bh option [ 47.304200][ T3876] loop5: detected capacity change from 0 to 512 [ 47.359367][ T3876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.373558][ T3879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.388513][ T3876] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.473060][ T3605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.538035][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.839923][ T3955] udevd[3955]: failed to send result of seq 8107 to main daemon: Connection refused [ 47.884886][ T3295] udevd[3295]: failed to send result of seq 8105 to main daemon: Transport endpoint is not connected [ 47.917883][ T3298] udevd[3298]: failed to send result of seq 8104 to main daemon: Transport endpoint is not connected [ 48.094066][ T3965] loop0: detected capacity change from 0 to 512 [ 48.129489][ T3965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.173251][ T3965] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.194304][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.267570][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.317342][ T3977] loop0: detected capacity change from 0 to 164 [ 48.330971][ T3977] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.367644][ T3977] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.397164][ T3977] Symlink component flag not implemented [ 48.402907][ T3977] Symlink component flag not implemented [ 48.415197][ T3977] Symlink component flag not implemented (7) [ 48.421275][ T3977] Symlink component flag not implemented (116) [ 48.433209][ T3984] loop5: detected capacity change from 0 to 1024 [ 48.442987][ T3984] EXT4-fs: inline encryption not supported [ 48.463498][ T3984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.543692][ T3993] loop0: detected capacity change from 0 to 512 [ 48.552524][ T3993] EXT4-fs: Ignoring removed oldalloc option [ 48.566348][ T3993] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.122: Parent and EA inode have the same ino 15 [ 48.597606][ T3993] EXT4-fs (loop0): Remounting filesystem read-only [ 48.613059][ T3993] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 48.650353][ T3993] EXT4-fs (loop0): 1 orphan inode deleted [ 48.819502][ T3993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.885793][ T3993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.122'. [ 48.968230][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.165005][ T3605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.219998][ T4013] Driver unsupported XDP return value 0 on prog (id 116) dev N/A, expect packet loss! [ 49.272396][ T4017] loop4: detected capacity change from 0 to 1024 [ 49.282053][ T4017] EXT4-fs: inline encryption not supported [ 49.323327][ T4026] sd 0:0:1:0: device reset [ 49.333450][ T4017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.391001][ T4033] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 49.391020][ T4033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.136'. [ 49.392082][ T4033] batman_adv: batadv0: Adding interface: veth1_vlan [ 49.392095][ T4033] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.392122][ T4033] batman_adv: batadv0: Interface activated: veth1_vlan [ 49.435936][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.745173][ T4045] SELinux: failed to load policy [ 49.879255][ T4061] loop5: detected capacity change from 0 to 2048 [ 49.922012][ T4061] loop5: p1 < > p4 < > [ 49.926248][ T4061] loop5: partition table partially beyond EOD, truncated [ 49.938385][ T4061] loop5: p4 start 42180 is beyond EOD, truncated [ 50.015681][ T4074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.157'. [ 50.039881][ T4074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'. [ 50.135600][ T4081] netlink: 'syz.0.160': attribute type 1 has an invalid length. [ 50.143360][ T4081] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.160'. [ 50.338825][ T4104] netlink: 'syz.0.167': attribute type 7 has an invalid length. [ 50.346604][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 50.538924][ T4112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 50.548621][ T4112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 50.664024][ T4119] loop0: detected capacity change from 0 to 8192 [ 50.745519][ T4126] loop3: detected capacity change from 0 to 2048 [ 50.803309][ T4126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.956819][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 50.956836][ T29] audit: type=1400 audit(1758648792.426:482): avc: denied { mount } for pid=4136 comm="syz.0.180" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.024970][ T29] audit: type=1326 audit(1758648792.426:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.0.180" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa28fb5eec9 code=0x0 [ 51.108788][ T29] audit: type=1400 audit(1758648792.576:484): avc: denied { create } for pid=4146 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.128359][ T29] audit: type=1400 audit(1758648792.576:485): avc: denied { ioctl } for pid=4146 comm="+}[@" path="socket:[8370]" dev="sockfs" ino=8370 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.186156][ T29] audit: type=1400 audit(1758648792.646:486): avc: denied { getopt } for pid=4148 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.230814][ T29] audit: type=1326 audit(1758648792.706:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396ea4eec9 code=0x7ffc0000 [ 51.234777][ T4159] loop4: detected capacity change from 0 to 512 [ 51.254149][ T29] audit: type=1326 audit(1758648792.706:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396ea4eec9 code=0x7ffc0000 [ 51.260543][ T29] audit: type=1326 audit(1758648792.726:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f396ea4eec9 code=0x7ffc0000 [ 51.313222][ T4159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.326188][ T4159] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.389082][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.429724][ T29] audit: type=1326 audit(1758648792.806:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396ea4eec9 code=0x7ffc0000 [ 51.453136][ T29] audit: type=1326 audit(1758648792.806:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.5.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396ea4eec9 code=0x7ffc0000 [ 51.606329][ T4175] hub 9-0:1.0: USB hub found [ 51.615522][ T4175] hub 9-0:1.0: 8 ports detected [ 51.621120][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.805424][ T4193] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 51.813333][ T4193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.203'. [ 51.851345][ T4193] batman_adv: batadv0: Adding interface: veth1_vlan [ 51.858002][ T4193] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.901933][ T4193] batman_adv: batadv0: Interface activated: veth1_vlan [ 51.965295][ T4199] loop0: detected capacity change from 0 to 512 [ 51.990850][ T4199] EXT4-fs: Ignoring removed i_version option [ 51.996924][ T4199] EXT4-fs: Ignoring removed bh option [ 52.012767][ T4199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.035486][ T4199] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.104970][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.412460][ T4224] loop3: detected capacity change from 0 to 128 [ 52.632743][ T4234] pim6reg1: entered promiscuous mode [ 52.638149][ T4234] pim6reg1: entered allmulticast mode [ 52.842990][ T4254] loop0: detected capacity change from 0 to 512 [ 52.887797][ T4254] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.910642][ T4254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.928851][ T4254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.937423][ T4254] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.974490][ T4258] pim6reg1: entered promiscuous mode [ 52.979922][ T4258] pim6reg1: entered allmulticast mode [ 52.993578][ T4254] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.230: Allocating blocks 41-42 which overlap fs metadata [ 53.019691][ T4254] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.230: Allocating blocks 41-42 which overlap fs metadata [ 53.100326][ T4254] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.230: Failed to acquire dquot type 1 [ 53.143571][ T4254] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 53.193276][ T4254] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.230: corrupted inode contents [ 53.235305][ T4254] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #12: comm syz.0.230: mark_inode_dirty error [ 53.270602][ T4254] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.230: corrupted inode contents [ 53.318531][ T4254] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.230: mark_inode_dirty error [ 53.357087][ T4254] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.230: corrupted inode contents [ 53.391479][ T4254] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 53.410754][ T4254] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.230: corrupted inode contents [ 53.451454][ T4254] EXT4-fs error (device loop0): ext4_truncate:4666: inode #12: comm syz.0.230: mark_inode_dirty error [ 53.478698][ T4254] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 53.508589][ T4254] EXT4-fs (loop0): 1 truncate cleaned up [ 53.518919][ T4254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.572832][ T4254] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 53.623584][ T4283] loop5: detected capacity change from 0 to 2048 [ 53.631741][ T4254] syz.0.230 (4254) used greatest stack depth: 10032 bytes left [ 53.659060][ T4283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.700743][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.764777][ T4289] bridge: RTM_NEWNEIGH with invalid ether address [ 53.837125][ T4293] SELinux: failed to load policy [ 53.943781][ T4301] loop4: detected capacity change from 0 to 2048 [ 54.039261][ T4306] loop4: detected capacity change from 0 to 128 [ 54.046569][ T4304] tipc: Started in network mode [ 54.051560][ T4304] tipc: Node identity ba7fe2919f46, cluster identity 4711 [ 54.058897][ T4304] tipc: Enabled bearer , priority 0 [ 54.069674][ T4304] tipc: Disabling bearer [ 54.189688][ T4320] : renamed from bond0 (while UP) [ 54.220010][ T4323] loop9: detected capacity change from 0 to 7 [ 54.227561][ T4322] loop0: detected capacity change from 0 to 1024 [ 54.236653][ T4322] EXT4-fs: Ignoring removed orlov option [ 54.242505][ T4323] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.250738][ T4322] EXT4-fs: Ignoring removed nobh option [ 54.256318][ T4322] EXT4-fs: Ignoring removed bh option [ 54.263564][ T4323] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.271531][ T4323] loop9: unable to read partition table [ 54.278729][ T4322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.300277][ T4323] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 54.300277][ T4323] ) failed (rc=-5) [ 54.324212][ T4330] syzkaller0: entered promiscuous mode [ 54.329705][ T4330] syzkaller0: entered allmulticast mode [ 54.353126][ T4322] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.254: Allocating blocks 481-513 which overlap fs metadata [ 54.430965][ T3605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.513754][ T4333] atomic_op ffff88811157a928 conn xmit_atomic 0000000000000000 [ 54.523652][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.559478][ T4341] vlan0: entered allmulticast mode [ 54.587349][ T4341] dummy0: entered allmulticast mode [ 54.697363][ T4355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.261'. [ 54.795190][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.268'. [ 54.911898][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 54.920778][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 55.007000][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 55.017463][ T4375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 55.074327][ T4378] pim6reg: entered allmulticast mode [ 55.113931][ T4378] pim6reg: left allmulticast mode [ 55.358250][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 55.373515][ T4381] tipc: New replicast peer: 255.255.255.83 [ 55.379634][ T4381] tipc: Enabled bearer , priority 10 [ 55.432745][ T4407] ref_ctr_offset mismatch. inode: 0x12a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 55.483751][ T4413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 55.504869][ T4413] netlink: 256 bytes leftover after parsing attributes in process `syz.3.291'. [ 55.557973][ T4426] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.596201][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 55.823925][ T4453] loop0: detected capacity change from 0 to 512 [ 55.865658][ T4453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.910660][ T4453] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.967748][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 55.967798][ T29] audit: type=1400 audit(1758648797.436:1035): avc: denied { create } for pid=4459 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.995910][ T1037] IPVS: starting estimator thread 0... [ 56.007059][ T29] audit: type=1400 audit(1758648797.436:1036): avc: denied { setopt } for pid=4459 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.093252][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.103467][ T4461] IPVS: using max 2352 ests per chain, 117600 per kthread [ 56.379104][ T4469] loop0: detected capacity change from 0 to 8192 [ 56.425408][ T4469] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.500429][ T29] audit: type=1326 audit(1758648797.816:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eeeceec9 code=0x7ffc0000 [ 56.510639][ T1037] tipc: Node number set to 1371623959 [ 56.523958][ T29] audit: type=1326 audit(1758648797.816:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eeeceec9 code=0x7ffc0000 [ 56.552651][ T29] audit: type=1326 audit(1758648797.826:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3eeeceec9 code=0x7ffc0000 [ 56.576009][ T29] audit: type=1326 audit(1758648797.826:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eeeceec9 code=0x7ffc0000 [ 56.599451][ T29] audit: type=1326 audit(1758648797.826:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa3eeeceec9 code=0x7ffc0000 [ 56.622702][ T29] audit: type=1400 audit(1758648797.826:1042): avc: denied { watch watch_reads } for pid=4477 comm="syz.2.313" path="/70" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.645510][ T29] audit: type=1326 audit(1758648797.826:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3eeeceec9 code=0x7ffc0000 [ 56.668914][ T29] audit: type=1326 audit(1758648797.826:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4477 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3eeeceec9 code=0x7ffc0000 [ 57.348603][ T3888] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.365552][ T3888] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.387505][ T3888] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.401435][ T4525] tipc: New replicast peer: 255.255.255.83 [ 57.407308][ T4525] tipc: Enabled bearer , priority 10 [ 57.421588][ T3888] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.629903][ T4546] loop0: detected capacity change from 0 to 512 [ 57.661225][ T4552] loop3: detected capacity change from 0 to 164 [ 57.681844][ T4552] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.695820][ T4546] EXT4-fs: Ignoring removed orlov option [ 57.703793][ T4546] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 57.714831][ T4552] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.725083][ T4552] rock: directory entry would overflow storage [ 57.731299][ T4552] rock: sig=0x4f50, size=4, remaining=3 [ 57.736946][ T4552] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 57.748828][ T4546] EXT4-fs (loop0): 1 truncate cleaned up [ 57.755351][ T4546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.843290][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.901163][ T4574] loop3: detected capacity change from 0 to 256 [ 57.984464][ T4574] pim6reg: entered allmulticast mode [ 58.007245][ T4584] pim6reg: left allmulticast mode [ 58.025248][ T4587] netlink: 'syz.0.362': attribute type 7 has an invalid length. [ 58.205479][ T4601] team0 (unregistering): Port device team_slave_0 removed [ 58.235649][ T4601] team0 (unregistering): Port device team_slave_1 removed [ 58.540756][ T3392] tipc: Node number set to 624550545 [ 58.726874][ T4656] wg2: entered promiscuous mode [ 58.731943][ T4656] wg2: entered allmulticast mode [ 59.075884][ T4673] netem: change failed [ 59.226016][ T4681] loop0: detected capacity change from 0 to 512 [ 59.239845][ T4681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.264862][ T4681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.277765][ T4681] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.304393][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.344485][ T4689] tipc: Started in network mode [ 59.349519][ T4689] tipc: Node identity ac14140f, cluster identity 4711 [ 59.363149][ T4689] tipc: New replicast peer: 255.255.255.255 [ 59.369225][ T4689] tipc: Enabled bearer , priority 10 [ 59.385557][ T4691] loop0: detected capacity change from 0 to 512 [ 59.413399][ T4694] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.456253][ T4694] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.471243][ T4697] 9pnet_fd: Insufficient options for proto=fd [ 59.508224][ T4694] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.563292][ T4694] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.648202][ T3888] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.667640][ T3888] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.684567][ T3888] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.700563][ T3888] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.827436][ T4714] pim6reg1: entered promiscuous mode [ 59.833517][ T4714] pim6reg1: entered allmulticast mode [ 60.206831][ T4735] loop0: detected capacity change from 0 to 1024 [ 60.218434][ T4735] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.219977][ T4737] loop3: detected capacity change from 0 to 512 [ 60.241356][ T4735] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.265120][ T4735] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 0 [ 60.286386][ T4735] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.301542][ T4735] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0 [ 60.310667][ T4737] EXT4-fs: Ignoring removed oldalloc option [ 60.320665][ T4735] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 60.329772][ T3899] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.351292][ T4735] EXT4-fs (loop0): 1 orphan inode deleted [ 60.366204][ T4737] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.381838][ T4735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.411973][ T3899] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 0 [ 60.427425][ T4737] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 60.468345][ T4735] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.480249][ T23] tipc: Node number set to 2886997007 [ 60.510386][ T4737] EXT4-fs (loop3): 1 truncate cleaned up [ 60.551477][ T4737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.583737][ T4754] loop5: detected capacity change from 0 to 1024 [ 60.607194][ T4754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.610492][ T4756] capability: warning: `syz.0.425' uses deprecated v2 capabilities in a way that may be insecure [ 60.632335][ T4754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 60.642903][ T4754] System zones: 0-1, 3-36 [ 60.662068][ T4754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.701533][ T3605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.712505][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.755730][ T4770] netlink: zone id is out of range [ 60.761985][ T4770] netlink: zone id is out of range [ 60.767270][ T4770] netlink: zone id is out of range [ 60.772445][ T4770] netlink: zone id is out of range [ 60.780351][ T4770] netlink: zone id is out of range [ 60.785752][ T4770] netlink: zone id is out of range [ 60.791990][ T4770] netlink: zone id is out of range [ 60.798170][ T4770] netlink: zone id is out of range [ 60.804013][ T4770] netlink: zone id is out of range [ 60.841173][ T4770] netlink: zone id is out of range [ 60.931800][ T4781] : renamed from bond0 (while UP) [ 61.356547][ T4810] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 61.389809][ T4810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.405264][ T4810] __nla_validate_parse: 7 callbacks suppressed [ 61.405282][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 61.424430][ T4810] bond1 (unregistering): Released all slaves [ 61.556312][ T4827] loop4: detected capacity change from 0 to 4096 [ 61.564420][ T29] kauditd_printk_skb: 980 callbacks suppressed [ 61.564436][ T29] audit: type=1400 audit(1758648803.036:2022): avc: denied { map } for pid=4824 comm="syz.5.454" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.565335][ T4827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.606059][ T4827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.625204][ T29] audit: type=1400 audit(1758648803.096:2023): avc: denied { create } for pid=4829 comm="syz.5.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.648440][ T4830] usb usb8: usbfs: process 4830 (syz.5.455) did not claim interface 0 before use [ 61.829719][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.848683][ T4835] tipc: New replicast peer: 255.255.255.83 [ 61.854708][ T4835] tipc: Enabled bearer , priority 10 [ 61.894028][ T4837] netlink: 76 bytes leftover after parsing attributes in process `syz.4.457'. [ 61.935101][ T29] audit: type=1326 audit(1758648803.406:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4842 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28fb5eec9 code=0x7ffc0000 [ 61.958903][ T29] audit: type=1326 audit(1758648803.406:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4842 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa28fb5eec9 code=0x7ffc0000 [ 61.982703][ T29] audit: type=1326 audit(1758648803.436:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4846 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa28fb91785 code=0x7ffc0000 [ 62.025873][ T4851] loop4: detected capacity change from 0 to 512 [ 62.034431][ T4851] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.463: corrupted in-inode xattr: invalid ea_ino [ 62.048061][ T4851] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.463: couldn't read orphan inode 15 (err -117) [ 62.061079][ T4851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.077702][ T29] audit: type=1400 audit(1758648803.546:2027): avc: denied { create } for pid=4850 comm="syz.4.463" name=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 62.118813][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.131920][ T29] audit: type=1326 audit(1758648803.576:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4846 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa28fb5eec9 code=0x7ffc0000 [ 62.155460][ T29] audit: type=1326 audit(1758648803.576:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4842 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 62.179565][ T29] audit: type=1326 audit(1758648803.576:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4842 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa28fb5eec9 code=0x7ffc0000 [ 62.417321][ T29] audit: type=1400 audit(1758648803.876:2031): avc: denied { cmd } for pid=4863 comm="syz.3.468" path="/82/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 62.889382][ T4886] loop0: detected capacity change from 0 to 1764 [ 63.282555][ T3888] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 63.318498][ T4922] netlink: 'syz.5.489': attribute type 10 has an invalid length. [ 63.326843][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.334029][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.349804][ T4922] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.356971][ T4922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.364497][ T4922] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.371593][ T4922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.382186][ T4925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.489'. [ 63.382775][ T4922] : (slave bridge0): Enslaving as an active interface with an up link [ 63.400034][ T4925] bridge_slave_1: left allmulticast mode [ 63.405909][ T4925] bridge_slave_1: left promiscuous mode [ 63.411725][ T4925] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.441805][ T4925] bridge_slave_0: left allmulticast mode [ 63.447530][ T4925] bridge_slave_0: left promiscuous mode [ 63.453408][ T4925] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.477505][ T4925] : (slave bridge0): Releasing backup interface [ 63.496987][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 63.535898][ T4935] netlink: 'syz.0.495': attribute type 12 has an invalid length. [ 63.540669][ T4932] netlink: 'syz.4.490': attribute type 4 has an invalid length. [ 63.695619][ T4955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.504'. [ 63.738618][ T4949] loop5: detected capacity change from 0 to 512 [ 63.787150][ T4949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.787951][ T4970] smc: net device bond0 applied user defined pnetid SYZ0 [ 63.806312][ T4949] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.809923][ T4970] smc: net device bond0 erased user defined pnetid SYZ0 [ 63.847024][ T4972] loop4: detected capacity change from 0 to 128 [ 63.865697][ T4972] FAT-fs (loop4): Directory bread(block 32) failed [ 63.872390][ T4972] FAT-fs (loop4): Directory bread(block 33) failed [ 63.879059][ T4972] FAT-fs (loop4): Directory bread(block 34) failed [ 63.885756][ T4972] FAT-fs (loop4): Directory bread(block 35) failed [ 63.887577][ T3605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.892602][ T4972] FAT-fs (loop4): Directory bread(block 36) failed [ 63.910476][ T4972] FAT-fs (loop4): Directory bread(block 37) failed [ 63.917063][ T4972] FAT-fs (loop4): Directory bread(block 38) failed [ 63.924936][ T4972] FAT-fs (loop4): Directory bread(block 39) failed [ 63.931766][ T4972] FAT-fs (loop4): Directory bread(block 40) failed [ 63.938299][ T4972] FAT-fs (loop4): Directory bread(block 41) failed [ 63.954088][ T4976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 63.964506][ T4976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.043095][ T4976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.053546][ T4976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.069492][ T4978] wg2: entered promiscuous mode [ 64.074596][ T4978] wg2: entered allmulticast mode [ 64.105041][ T4986] loop4: detected capacity change from 0 to 2048 [ 64.124654][ T4976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.135049][ T4976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.204787][ T4976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.215204][ T4976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.343762][ T5011] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5011 comm=syz.5.524 [ 64.418575][ T3917] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.426869][ T3917] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.470037][ T3917] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.478427][ T3917] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.508462][ T3917] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.516745][ T3917] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.546744][ T3917] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.555097][ T3917] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.953429][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.539'. [ 65.292616][ T5072] vlan0: entered allmulticast mode [ 65.297782][ T5072] dummy0: entered allmulticast mode [ 65.344436][ T5074] netlink: 'syz.4.553': attribute type 4 has an invalid length. [ 65.387519][ T5082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.556'. [ 65.401148][ T5081] loop3: detected capacity change from 0 to 512 [ 65.423392][ T3899] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.430723][ T5081] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.445537][ T3899] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.463988][ T3899] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.478117][ T3899] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.523038][ T5098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.533390][ T5098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.596579][ T3392] IPVS: starting estimator thread 0... [ 65.616151][ T5098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.626546][ T5098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.639756][ T5111] hub 6-0:1.0: USB hub found [ 65.644492][ T5111] hub 6-0:1.0: 8 ports detected [ 65.696951][ T5108] IPVS: using max 1920 ests per chain, 96000 per kthread [ 65.715960][ T5098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.726303][ T5098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.783820][ T5098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.794231][ T5098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.850030][ T3892] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.858320][ T3892] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.872015][ T5128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 65.889772][ T3892] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.898051][ T3892] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.914023][ T3892] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.922374][ T3892] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.931669][ T5128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5128 comm=syz.2.575 [ 65.946291][ T3892] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.954616][ T3892] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.985360][ T5131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'. [ 66.002105][ T5131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.019868][ T5131] vlan0: entered allmulticast mode [ 66.025063][ T5131] bond1: entered allmulticast mode [ 66.167538][ T5149] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.177465][ T5149] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.214099][ T5149] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.224038][ T5149] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.274458][ T5149] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.284349][ T5149] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.350628][ T5149] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.360500][ T5149] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.385690][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'. [ 66.456679][ T5158] ref_ctr increment failed for inode: 0x255 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888119361cc0 [ 66.469561][ T5157] uprobe: syz.5.588:5157 failed to unregister, leaking uprobe [ 66.616231][ T3392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3392 comm=kworker/0:3 [ 66.632321][ T5163] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 66.646763][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 66.646779][ T29] audit: type=1400 audit(1758648808.116:2113): avc: denied { create } for pid=5164 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 66.719958][ T5174] __nla_validate_parse: 1 callbacks suppressed [ 66.719976][ T5174] netlink: 80 bytes leftover after parsing attributes in process `syz.2.595'. [ 66.820421][ T5179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 66.927363][ T5186] netlink: 'syz.5.610': attribute type 1 has an invalid length. [ 66.935194][ T5186] netlink: 'syz.5.610': attribute type 4 has an invalid length. [ 66.943364][ T5186] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.610'. [ 66.954200][ T5186] netlink: 'syz.5.610': attribute type 1 has an invalid length. [ 66.961959][ T5186] netlink: 'syz.5.610': attribute type 4 has an invalid length. [ 66.969729][ T5186] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.610'. [ 67.004515][ T5191] loop5: detected capacity change from 0 to 1024 [ 67.012020][ T5191] EXT4-fs: Ignoring removed bh option [ 67.018860][ T5191] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 67.644895][ T5191] ================================================================== [ 67.653032][ T5191] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 67.661069][ T5191] [ 67.663419][ T5191] write to 0xffff888109001844 of 4 bytes by task 5197 on cpu 0: [ 67.671064][ T5191] xas_set_mark+0x12b/0x140 [ 67.675649][ T5191] tag_pages_for_writeback+0xc2/0x290 [ 67.681056][ T5191] ext4_do_writepages+0x6b2/0x2750 [ 67.686203][ T5191] ext4_writepages+0x176/0x300 [ 67.690998][ T5191] do_writepages+0x1c3/0x310 [ 67.695618][ T5191] filemap_write_and_wait_range+0x144/0x340 [ 67.701546][ T5191] filemap_invalidate_pages+0xa4/0x1a0 [ 67.707019][ T5191] kiocb_invalidate_pages+0x6e/0x80 [ 67.712244][ T5191] __iomap_dio_rw+0x5d4/0x1250 [ 67.717036][ T5191] iomap_dio_rw+0x40/0x90 [ 67.721416][ T5191] ext4_file_write_iter+0xad9/0xf00 [ 67.726645][ T5191] iter_file_splice_write+0x666/0xa60 [ 67.732030][ T5191] direct_splice_actor+0x156/0x2a0 [ 67.737148][ T5191] splice_direct_to_actor+0x312/0x680 [ 67.742529][ T5191] do_splice_direct+0xda/0x150 [ 67.747297][ T5191] do_sendfile+0x380/0x650 [ 67.751735][ T5191] __x64_sys_sendfile64+0x105/0x150 [ 67.757038][ T5191] x64_sys_call+0x2bb0/0x2ff0 [ 67.761737][ T5191] do_syscall_64+0xd2/0x200 [ 67.766263][ T5191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.772166][ T5191] [ 67.774494][ T5191] read to 0xffff888109001844 of 4 bytes by task 5191 on cpu 1: [ 67.782042][ T5191] file_write_and_wait_range+0x10e/0x2c0 [ 67.787696][ T5191] generic_buffers_fsync_noflush+0x45/0x120 [ 67.793614][ T5191] ext4_sync_file+0x1ab/0x690 [ 67.798296][ T5191] vfs_fsync_range+0x10a/0x130 [ 67.803067][ T5191] ext4_buffered_write_iter+0x34f/0x3c0 [ 67.808635][ T5191] ext4_file_write_iter+0xdbf/0xf00 [ 67.813858][ T5191] iter_file_splice_write+0x666/0xa60 [ 67.819256][ T5191] direct_splice_actor+0x156/0x2a0 [ 67.824411][ T5191] splice_direct_to_actor+0x312/0x680 [ 67.829796][ T5191] do_splice_direct+0xda/0x150 [ 67.834570][ T5191] do_sendfile+0x380/0x650 [ 67.839012][ T5191] __x64_sys_sendfile64+0x105/0x150 [ 67.844228][ T5191] x64_sys_call+0x2bb0/0x2ff0 [ 67.848929][ T5191] do_syscall_64+0xd2/0x200 [ 67.853467][ T5191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.859375][ T5191] [ 67.861708][ T5191] value changed: 0x02000021 -> 0x04000021 [ 67.867432][ T5191] [ 67.869767][ T5191] Reported by Kernel Concurrency Sanitizer on: [ 67.875949][ T5191] CPU: 1 UID: 0 PID: 5191 Comm: syz.5.601 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.885595][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 67.895668][ T5191] ================================================================== [ 67.926037][ T5197] syz.5.601 (5197) used greatest stack depth: 9776 bytes left [ 68.356077][ T3899] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.364380][ T3899] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.375535][ T3899] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.383913][ T3899] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.394658][ T3917] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.402971][ T3917] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.414371][ T3917] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.422595][ T3917] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0