last executing test programs: 2.005709122s ago: executing program 1 (id=179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) 1.937612129s ago: executing program 1 (id=181): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.249811546s ago: executing program 3 (id=213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 1.20845133s ago: executing program 3 (id=215): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.177693934s ago: executing program 3 (id=219): sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="000000009a3eb336c46e4d3a", 0xc, 0x51, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000340), 0x0}, 0x20) 1.138733608s ago: executing program 3 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1.075658894s ago: executing program 3 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) 1.060628825s ago: executing program 1 (id=227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x2006, 0x9, 0x403, 0x2}) 766.691464ms ago: executing program 0 (id=238): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @remote, 0x7800, 0x80, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 672.804733ms ago: executing program 0 (id=240): r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x2, 0x4) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 630.530487ms ago: executing program 0 (id=242): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 595.667751ms ago: executing program 0 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) 566.552784ms ago: executing program 2 (id=246): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 540.618726ms ago: executing program 2 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) 516.017999ms ago: executing program 2 (id=249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0008000c00000004000000020000000000001201"], 0x0, 0x28, 0x0, 0x1, 0x64e}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 488.191001ms ago: executing program 2 (id=250): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 311.856319ms ago: executing program 4 (id=253): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000440)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r1, 0x1, 0x400002000000000, 0xffff) 271.254633ms ago: executing program 4 (id=254): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x100000001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r2, r2, 0x0) 258.529194ms ago: executing program 0 (id=255): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 239.006616ms ago: executing program 4 (id=256): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 169.800223ms ago: executing program 0 (id=257): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b", 0x14) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 126.579817ms ago: executing program 4 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 108.378009ms ago: executing program 2 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 81.532252ms ago: executing program 3 (id=260): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) 70.814403ms ago: executing program 4 (id=261): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpid() r2 = getpgrp(0xffffffffffffffff) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 58.320094ms ago: executing program 1 (id=262): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 32.487626ms ago: executing program 1 (id=263): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x36e, 0x10000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 31.652006ms ago: executing program 4 (id=264): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) close(r0) timerfd_create(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 27.866617ms ago: executing program 2 (id=265): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2008c11, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e6f636f6d70726562c62c756e686964652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp860,check=strict,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=strict,check=strict,iocharset=iso8859-14,cruft,block=0x0000000000000400,sbsector=0x0000000000000006,\x00'], 0x7, 0xa0c, &(0x7f0000000dc0)="$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") 0s ago: executing program 1 (id=266): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x1, 0xfffffbff, 0x3, 0x1, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)=r2}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') kernel console output (not intermixed with test programs): =process permissive=1 [ 12.747342][ T29] audit: type=1400 audit(1761157754.136:61): avc: denied { siginh } for pid=3190 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. [ 19.452041][ T29] audit: type=1400 audit(1761157760.856:62): avc: denied { mounton } for pid=3275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.475109][ T29] audit: type=1400 audit(1761157760.876:63): avc: denied { mount } for pid=3275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.475468][ T3275] cgroup: Unknown subsys name 'net' [ 19.502625][ T29] audit: type=1400 audit(1761157760.906:64): avc: denied { unmount } for pid=3275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.658847][ T3275] cgroup: Unknown subsys name 'cpuset' [ 19.664703][ T3275] cgroup: Unknown subsys name 'rlimit' [ 19.792387][ T29] audit: type=1400 audit(1761157761.196:65): avc: denied { setattr } for pid=3275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.815600][ T29] audit: type=1400 audit(1761157761.196:66): avc: denied { create } for pid=3275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 19.823800][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.836012][ T29] audit: type=1400 audit(1761157761.196:67): avc: denied { write } for pid=3275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 19.864875][ T29] audit: type=1400 audit(1761157761.196:68): avc: denied { read } for pid=3275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.885149][ T29] audit: type=1400 audit(1761157761.196:69): avc: denied { mounton } for pid=3275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.909871][ T29] audit: type=1400 audit(1761157761.196:70): avc: denied { mount } for pid=3275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.930411][ T3275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.933030][ T29] audit: type=1400 audit(1761157761.246:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.908901][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 20.938061][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 20.998237][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.005313][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.012419][ T3314] bridge_slave_0: entered allmulticast mode [ 21.018765][ T3314] bridge_slave_0: entered promiscuous mode [ 21.026555][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 21.039919][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.046930][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.054117][ T3314] bridge_slave_1: entered allmulticast mode [ 21.060561][ T3314] bridge_slave_1: entered promiscuous mode [ 21.075885][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 21.088040][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 21.103374][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 21.114578][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.121608][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.128752][ T3315] bridge_slave_0: entered allmulticast mode [ 21.135114][ T3315] bridge_slave_0: entered promiscuous mode [ 21.143511][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.150554][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.157667][ T3315] bridge_slave_1: entered allmulticast mode [ 21.164061][ T3315] bridge_slave_1: entered promiscuous mode [ 21.173937][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 21.205172][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 21.219149][ T3314] team0: Port device team_slave_0 added [ 21.225360][ T3314] team0: Port device team_slave_1 added [ 21.238242][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 21.264775][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 21.271702][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 21.297622][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 21.322717][ T3315] team0: Port device team_slave_0 added [ 21.335431][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 21.342373][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 21.368265][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 21.380622][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.387691][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.394883][ T3322] bridge_slave_0: entered allmulticast mode [ 21.401100][ T3322] bridge_slave_0: entered promiscuous mode [ 21.407716][ T3315] team0: Port device team_slave_1 added [ 21.413455][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.420509][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.427599][ T3320] bridge_slave_0: entered allmulticast mode [ 21.433822][ T3320] bridge_slave_0: entered promiscuous mode [ 21.442237][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.449324][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.456398][ T3320] bridge_slave_1: entered allmulticast mode [ 21.462648][ T3320] bridge_slave_1: entered promiscuous mode [ 21.475589][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.482643][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.489722][ T3322] bridge_slave_1: entered allmulticast mode [ 21.495921][ T3322] bridge_slave_1: entered promiscuous mode [ 21.513060][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.520129][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.527216][ T3323] bridge_slave_0: entered allmulticast mode [ 21.533421][ T3323] bridge_slave_0: entered promiscuous mode [ 21.547290][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 21.554243][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 21.580172][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 21.591542][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 21.600694][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.607699][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.614793][ T3323] bridge_slave_1: entered allmulticast mode [ 21.621199][ T3323] bridge_slave_1: entered promiscuous mode [ 21.634529][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 21.641502][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 21.667378][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 21.680228][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 21.693702][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 21.708502][ T3314] hsr_slave_0: entered promiscuous mode [ 21.714328][ T3314] hsr_slave_1: entered promiscuous mode [ 21.727548][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 21.745639][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 21.755632][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 21.775992][ T3320] team0: Port device team_slave_0 added [ 21.782232][ T3320] team0: Port device team_slave_1 added [ 21.791996][ T3322] team0: Port device team_slave_0 added [ 21.805895][ T3315] hsr_slave_0: entered promiscuous mode [ 21.811769][ T3315] hsr_slave_1: entered promiscuous mode [ 21.817532][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 21.823256][ T3315] Cannot create hsr debugfs directory [ 21.832566][ T3322] team0: Port device team_slave_1 added [ 21.838776][ T3323] team0: Port device team_slave_0 added [ 21.851928][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 21.858869][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 21.885063][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 21.899690][ T3323] team0: Port device team_slave_1 added [ 21.905507][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 21.912491][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 21.938344][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 21.958641][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 21.965563][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 21.991454][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.005984][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.012923][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.038792][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.067919][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.074872][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.100735][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.125208][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.132150][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.158055][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.187549][ T3322] hsr_slave_0: entered promiscuous mode [ 22.193491][ T3322] hsr_slave_1: entered promiscuous mode [ 22.199324][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 22.205014][ T3322] Cannot create hsr debugfs directory [ 22.223935][ T3320] hsr_slave_0: entered promiscuous mode [ 22.229855][ T3320] hsr_slave_1: entered promiscuous mode [ 22.235541][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 22.241265][ T3320] Cannot create hsr debugfs directory [ 22.267647][ T3323] hsr_slave_0: entered promiscuous mode [ 22.273466][ T3323] hsr_slave_1: entered promiscuous mode [ 22.279232][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 22.284921][ T3323] Cannot create hsr debugfs directory [ 22.334143][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 22.354315][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 22.362488][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 22.380874][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 22.430406][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 22.438655][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 22.446826][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 22.454918][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 22.490346][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 22.510011][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 22.518282][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 22.527224][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 22.536803][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 22.545580][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 22.555056][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 22.568516][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 22.595563][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 22.609664][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.617999][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.625239][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 22.634140][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 22.642387][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 22.657402][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.672277][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.680049][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.687083][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.696352][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.703360][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.721210][ T2272] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.728228][ T2272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.752713][ T2272] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.759769][ T2272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.797791][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.815976][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.824418][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.836004][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.849996][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.865424][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 22.874888][ T2272] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.881925][ T2272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.890400][ T2272] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.897433][ T2272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.915373][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 22.923912][ T2272] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.931019][ T2272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.939642][ T2272] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.946682][ T2272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.954743][ T2272] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.961810][ T2272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.974397][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.981497][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.991436][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.022490][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.044539][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.127377][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.135447][ T3315] veth0_vlan: entered promiscuous mode [ 23.144686][ T3315] veth1_vlan: entered promiscuous mode [ 23.155096][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.174235][ T3315] veth0_macvtap: entered promiscuous mode [ 23.183019][ T3315] veth1_macvtap: entered promiscuous mode [ 23.195711][ T3314] veth0_vlan: entered promiscuous mode [ 23.210463][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.219315][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.227882][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.244964][ T3314] veth1_vlan: entered promiscuous mode [ 23.251134][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.266770][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.278357][ T3323] veth0_vlan: entered promiscuous mode [ 23.288765][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.308388][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.323336][ T3314] veth0_macvtap: entered promiscuous mode [ 23.338800][ T3323] veth1_vlan: entered promiscuous mode [ 23.346237][ T3314] veth1_macvtap: entered promiscuous mode [ 23.353941][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.356243][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.386724][ T3322] veth0_vlan: entered promiscuous mode [ 23.393579][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.405048][ T3322] veth1_vlan: entered promiscuous mode [ 23.417356][ T3320] veth0_vlan: entered promiscuous mode [ 23.428536][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.437682][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.453575][ T3322] veth0_macvtap: entered promiscuous mode [ 23.464840][ T3323] veth0_macvtap: entered promiscuous mode [ 23.472669][ T3320] veth1_vlan: entered promiscuous mode [ 23.480366][ T3322] veth1_macvtap: entered promiscuous mode [ 23.487465][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.502596][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.515496][ T3486] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6'. [ 23.515766][ T3323] veth1_macvtap: entered promiscuous mode [ 23.538833][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.548334][ T3320] veth0_macvtap: entered promiscuous mode [ 23.558353][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.568129][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.576976][ T3320] veth1_macvtap: entered promiscuous mode [ 23.595410][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.604856][ T3490] mmap: syz.1.2 (3490) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 23.617658][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.633953][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.641484][ T1007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.663718][ T1007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.700192][ T1007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.713363][ T3498] loop3: detected capacity change from 0 to 512 [ 23.728670][ T1007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.737354][ T1007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.769298][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.789499][ T3498] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.10: inode has both inline data and extents flags [ 23.789547][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.802830][ T3498] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.10: couldn't read orphan inode 15 (err -117) [ 23.832164][ T3498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 23.873643][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.888908][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 23.897554][ T3510] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5'. [ 23.906392][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 23.914969][ T3510] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5'. [ 23.927732][ T3512] vhci_hcd: invalid port number 96 [ 23.932869][ T3512] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 23.950197][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 23.950458][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.967875][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 23.976921][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.993410][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.002934][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.020033][ T3518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3518 comm=syz.2.15 [ 24.032349][ T3518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3518 comm=syz.2.15 [ 24.052414][ T3520] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 24.064627][ T3522] program syz.4.16 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 24.193349][ T3542] SELinux: policydb version 4 does not match my version range 15-35 [ 24.205491][ T3542] SELinux: failed to load policy [ 24.221061][ T3541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 24.265958][ T3553] Zero length message leads to an empty skb [ 24.289447][ T3558] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 24.345446][ T3566] netem: incorrect gi model size [ 24.350426][ T3566] netem: change failed [ 24.459040][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 24.459052][ T29] audit: type=1400 audit(1761157765.866:169): avc: denied { write } for pid=3586 comm="syz.2.47" name="rt_acct" dev="proc" ino=4026532739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 24.500079][ T29] audit: type=1400 audit(1761157765.896:170): avc: denied { create } for pid=3586 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 24.519444][ T29] audit: type=1400 audit(1761157765.896:171): avc: denied { write } for pid=3586 comm="syz.2.47" path="socket:[4951]" dev="sockfs" ino=4951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 24.542462][ T29] audit: type=1400 audit(1761157765.906:172): avc: denied { open } for pid=3595 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 24.561443][ T29] audit: type=1400 audit(1761157765.906:173): avc: denied { kernel } for pid=3595 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 24.564669][ T3600] syz.3.50 uses obsolete (PF_INET,SOCK_PACKET) [ 24.586404][ T29] audit: type=1400 audit(1761157765.936:174): avc: denied { create } for pid=3598 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 24.623549][ T29] audit: type=1326 audit(1761157766.026:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c5fefc9 code=0x7ffc0000 [ 24.671410][ T29] audit: type=1326 audit(1761157766.046:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c5fefc9 code=0x7ffc0000 [ 24.694739][ T29] audit: type=1326 audit(1761157766.046:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fdc1c5fefc9 code=0x7ffc0000 [ 24.718089][ T29] audit: type=1326 audit(1761157766.046:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3589 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c5fefc9 code=0x7ffc0000 [ 24.908849][ T3627] syz.2.64 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 25.125030][ T3656] SELinux: Context system_u:object_r:hugetlbfs_t:s0 is not valid (left unmapped). [ 25.315327][ T3665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.81'. [ 25.429852][ T3683] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 25.482271][ T3693] process 'syz.3.95' launched '/dev/fd/6' with NULL argv: empty string added [ 25.491716][ T3692] loop0: detected capacity change from 0 to 128 [ 25.502694][ T3692] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 25.518777][ T3692] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.522219][ T3696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.96'. [ 25.537973][ T3696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.96'. [ 25.573243][ T3700] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 25.573243][ T3700] program syz.3.98 not setting count and/or reply_len properly [ 25.596670][ T3322] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 25.600498][ T3702] loop2: detected capacity change from 0 to 256 [ 25.623749][ T3706] ip6t_srh: unknown srh match flags 4000 [ 25.643018][ T3706] loop0: detected capacity change from 0 to 512 [ 25.666342][ T3706] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.99: error while reading EA inode 32 err=-116 [ 25.679359][ T3702] FAT-fs (loop2): Directory bread(block 64) failed [ 25.682253][ T3706] EXT4-fs (loop0): Remounting filesystem read-only [ 25.692758][ T3706] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.698978][ T3702] FAT-fs (loop2): Directory bread(block 65) failed [ 25.705818][ T3706] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 25.725660][ T3706] EXT4-fs (loop0): 1 orphan inode deleted [ 25.732130][ T3706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.754763][ T3702] FAT-fs (loop2): Directory bread(block 66) failed [ 25.761925][ T3702] FAT-fs (loop2): Directory bread(block 67) failed [ 25.769021][ T3702] FAT-fs (loop2): Directory bread(block 68) failed [ 25.776258][ T3702] FAT-fs (loop2): Directory bread(block 69) failed [ 25.807794][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.816833][ T3702] FAT-fs (loop2): Directory bread(block 70) failed [ 25.826341][ T3702] FAT-fs (loop2): Directory bread(block 71) failed [ 25.832894][ T3702] FAT-fs (loop2): Directory bread(block 72) failed [ 25.839591][ T3702] FAT-fs (loop2): Directory bread(block 73) failed [ 26.216859][ T3776] loop3: detected capacity change from 0 to 1024 [ 26.251153][ T3784] capability: warning: `syz.2.135' uses 32-bit capabilities (legacy support in use) [ 26.258960][ T3776] EXT4-fs: Ignoring removed orlov option [ 26.301773][ T3776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.315922][ T3789] loop2: detected capacity change from 0 to 512 [ 26.335220][ T3789] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 26.358257][ T3800] loop1: detected capacity change from 0 to 128 [ 26.364964][ T3796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 26.373978][ T3776] syz.3.133 (3776) used greatest stack depth: 10576 bytes left [ 26.374158][ T3789] EXT4-fs (loop2): mount failed [ 26.386839][ T3800] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 26.400460][ T3796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 26.410387][ T3796] bond0 (unregistering): Released all slaves [ 26.421618][ T3800] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 26.434787][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.871263][ T3871] loop2: detected capacity change from 0 to 1024 [ 26.884623][ T3871] ======================================================= [ 26.884623][ T3871] WARNING: The mand mount option has been deprecated and [ 26.884623][ T3871] and is ignored by this kernel. Remove the mand [ 26.884623][ T3871] option from the mount to silence this warning. [ 26.884623][ T3871] ======================================================= [ 26.930318][ T3875] loop4: detected capacity change from 0 to 512 [ 26.930665][ T3871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.950544][ T3875] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 26.967492][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.982451][ T3875] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.176: inode has both inline data and extents flags [ 26.999905][ T3875] EXT4-fs (loop4): get root inode failed [ 27.005613][ T3875] EXT4-fs (loop4): mount failed [ 27.076074][ T3898] bridge0: port 3(gretap0) entered blocking state [ 27.082639][ T3898] bridge0: port 3(gretap0) entered disabled state [ 27.089598][ T3898] gretap0: entered allmulticast mode [ 27.095690][ T3898] gretap0: entered promiscuous mode [ 27.101506][ T3898] bridge0: port 3(gretap0) entered blocking state [ 27.108005][ T3898] bridge0: port 3(gretap0) entered forwarding state [ 27.160342][ T3912] pim6reg: entered allmulticast mode [ 27.167059][ T3912] pim6reg: left allmulticast mode [ 27.253014][ T3925] loop2: detected capacity change from 0 to 1024 [ 27.259846][ T3925] ext4: Unknown parameter 'uid<00000000000000000000' [ 27.309560][ T3931] loop4: detected capacity change from 0 to 2048 [ 27.321908][ T3931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.370885][ T3942] lo: entered promiscuous mode [ 27.375669][ T3942] lo: entered allmulticast mode [ 27.381708][ T3942] tunl0: entered promiscuous mode [ 27.386818][ T3942] tunl0: entered allmulticast mode [ 27.393202][ T3942] gre0: entered promiscuous mode [ 27.398180][ T3942] gre0: entered allmulticast mode [ 27.426034][ T3942] erspan0: entered promiscuous mode [ 27.431275][ T3942] erspan0: entered allmulticast mode [ 27.437709][ T3942] ip_vti0: entered promiscuous mode [ 27.442932][ T3942] ip_vti0: entered allmulticast mode [ 27.449830][ T3942] ip6_vti0: entered promiscuous mode [ 27.455113][ T3942] ip6_vti0: entered allmulticast mode [ 27.461906][ T3942] sit0: entered promiscuous mode [ 27.466847][ T3942] sit0: entered allmulticast mode [ 27.474348][ T3942] ip6tnl0: entered promiscuous mode [ 27.479627][ T3942] ip6tnl0: entered allmulticast mode [ 27.489117][ T3942] ip6gre0: entered promiscuous mode [ 27.494427][ T3942] ip6gre0: entered allmulticast mode [ 27.501063][ T3942] syz_tun: entered promiscuous mode [ 27.506258][ T3942] syz_tun: entered allmulticast mode [ 27.517329][ T3942] ip6gretap0: entered promiscuous mode [ 27.522842][ T3942] ip6gretap0: entered allmulticast mode [ 27.529733][ T3942] bridge0: entered promiscuous mode [ 27.534960][ T3942] bridge0: entered allmulticast mode [ 27.535127][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.542011][ T3942] vcan0: entered promiscuous mode [ 27.554342][ T3942] vcan0: entered allmulticast mode [ 27.562262][ T3942] bond0: entered promiscuous mode [ 27.567284][ T3942] bond_slave_0: entered promiscuous mode [ 27.573255][ T3942] bond_slave_1: entered promiscuous mode [ 27.579042][ T3942] bond0: entered allmulticast mode [ 27.584212][ T3942] bond_slave_0: entered allmulticast mode [ 27.589978][ T3942] bond_slave_1: entered allmulticast mode [ 27.597682][ T3942] team0: entered promiscuous mode [ 27.602739][ T3942] team_slave_0: entered promiscuous mode [ 27.608500][ T3942] team_slave_1: entered promiscuous mode [ 27.614194][ T3942] team0: entered allmulticast mode [ 27.619314][ T3942] team_slave_0: entered allmulticast mode [ 27.625048][ T3942] team_slave_1: entered allmulticast mode [ 27.632527][ T3942] dummy0: entered promiscuous mode [ 27.638148][ T3942] dummy0: entered allmulticast mode [ 27.645242][ T3942] nlmon0: entered promiscuous mode [ 27.650488][ T3942] nlmon0: entered allmulticast mode [ 27.657372][ T3942] caif0: entered promiscuous mode [ 27.662428][ T3942] caif0: entered allmulticast mode [ 27.667597][ T3942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 27.767418][ T3978] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 27.779064][ T3978] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 28.095310][ T4018] loop2: detected capacity change from 0 to 2048 [ 28.100491][ T4018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.100586][ T4018] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.153942][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.444349][ T4069] loop4: detected capacity change from 0 to 1024 [ 28.444691][ T4069] EXT4-fs: inline encryption not supported [ 28.484932][ T4069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.554433][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.749508][ T4092] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.921584][ T4097] ================================================================== [ 28.929687][ T4097] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 28.938267][ T4097] [ 28.940584][ T4097] write to 0xffff888116808b28 of 8 bytes by task 4091 on cpu 1: [ 28.948196][ T4097] shmem_file_splice_read+0x470/0x600 [ 28.953569][ T4097] splice_direct_to_actor+0x26f/0x680 [ 28.958942][ T4097] do_splice_direct+0xda/0x150 [ 28.963708][ T4097] do_sendfile+0x380/0x650 [ 28.968134][ T4097] __x64_sys_sendfile64+0x105/0x150 [ 28.973340][ T4097] x64_sys_call+0x2bb4/0x3000 [ 28.978018][ T4097] do_syscall_64+0xd2/0x200 [ 28.982517][ T4097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.988408][ T4097] [ 28.990721][ T4097] write to 0xffff888116808b28 of 8 bytes by task 4097 on cpu 0: [ 28.998418][ T4097] shmem_file_splice_read+0x470/0x600 [ 29.003775][ T4097] splice_direct_to_actor+0x26f/0x680 [ 29.009139][ T4097] do_splice_direct+0xda/0x150 [ 29.013881][ T4097] do_sendfile+0x380/0x650 [ 29.018279][ T4097] __x64_sys_sendfile64+0x105/0x150 [ 29.023455][ T4097] x64_sys_call+0x2bb4/0x3000 [ 29.028109][ T4097] do_syscall_64+0xd2/0x200 [ 29.032765][ T4097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.038635][ T4097] [ 29.040937][ T4097] value changed: 0x00000000000326cc -> 0x000000000003271c [ 29.048015][ T4097] [ 29.050316][ T4097] Reported by Kernel Concurrency Sanitizer on: [ 29.056438][ T4097] CPU: 0 UID: 0 PID: 4097 Comm: syz.0.257 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.066042][ T4097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 29.076074][ T4097] ================================================================== [ 29.091444][ T4112] loop2: detected capacity change from 0 to 1764 [ 29.098089][ T4112] iso9660: Unknown parameter 'nocomprebÆ'