last executing test programs: 1.523974178s ago: executing program 2 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 1.465777739s ago: executing program 2 (id=327): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x9, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f00007d0000)) 1.40875149s ago: executing program 2 (id=330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f0000000c00)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 1.279804262s ago: executing program 1 (id=336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) 712.59784ms ago: executing program 3 (id=357): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 702.69094ms ago: executing program 3 (id=360): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 677.29181ms ago: executing program 2 (id=361): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x2008c082) 638.758311ms ago: executing program 3 (id=362): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 611.065681ms ago: executing program 3 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 558.281802ms ago: executing program 3 (id=364): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x4}) epoll_pwait(r1, &(0x7f0000002500)=[{}], 0x1, 0x30, 0x0, 0x0) 547.698802ms ago: executing program 2 (id=365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) 520.576293ms ago: executing program 2 (id=367): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) 335.933275ms ago: executing program 4 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x5, 0x3, 0xffffffff, 0x7, 0x88, 0x1, 0xff}, 0x9c) 306.318286ms ago: executing program 4 (id=373): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 305.422286ms ago: executing program 1 (id=383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1, &(0x7f0000001a80)=ANY=[], 0x10}}], 0x1, 0x4004804) 303.600386ms ago: executing program 0 (id=374): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 242.494687ms ago: executing program 1 (id=375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000540)=[{0x1, 0x3, 0x35, 0x7}]}) 213.312977ms ago: executing program 4 (id=386): socket$inet_sctp(0x2, 0x5, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 212.836277ms ago: executing program 3 (id=376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b9a, 0x1000, 0x0, 0x3cf}, &(0x7f0000000300)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r1, 0x3516, 0x8000000, 0x0, 0x0, 0x0) 207.149248ms ago: executing program 0 (id=377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000140)={0x97, 0x800000000402, 0x4, 0x100, 0x2, 0x0, [{0xba87, 0x4, 0x1, '\x00', 0x2782}, {0x9, 0x1, 0x1, '\x00', 0xc}]}) 164.524098ms ago: executing program 1 (id=378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) 134.541558ms ago: executing program 0 (id=379): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200) fcntl$getflags(r0, 0x401) 123.771009ms ago: executing program 4 (id=380): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="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", 0x241}], 0x1}}], 0x1, 0x80) 96.391289ms ago: executing program 0 (id=381): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x1626e1aa}], 0x1, 0x40002182, 0x0) 79.280919ms ago: executing program 1 (id=382): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000b40)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @gue={{0x1, 0x1, 0x1, 0x69, 0x100, @void}, "8797e22969850035067db978d0a74528dd3f6a29c9212b74d1799b8761774c8cdb742901"}}}}}}}, 0x0) 79.018279ms ago: executing program 4 (id=384): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 49.949539ms ago: executing program 0 (id=385): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 412.3µs ago: executing program 0 (id=387): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 180.62µs ago: executing program 1 (id=388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 0s ago: executing program 4 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 27.161421][ T29] audit: type=1400 audit(1752043384.067:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.162562][ T3292] cgroup: Unknown subsys name 'net' [ 27.184298][ T29] audit: type=1400 audit(1752043384.067:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.211703][ T29] audit: type=1400 audit(1752043384.097:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.368486][ T3292] cgroup: Unknown subsys name 'cpuset' [ 27.374772][ T3292] cgroup: Unknown subsys name 'rlimit' [ 27.505667][ T29] audit: type=1400 audit(1752043384.407:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.529033][ T29] audit: type=1400 audit(1752043384.407:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.549525][ T29] audit: type=1400 audit(1752043384.407:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.561569][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.569972][ T29] audit: type=1400 audit(1752043384.407:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.598826][ T29] audit: type=1400 audit(1752043384.417:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.603262][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.623709][ T29] audit: type=1400 audit(1752043384.417:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.656453][ T29] audit: type=1400 audit(1752043384.487:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.776718][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 28.792976][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 28.808105][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.817199][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.915921][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.923051][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.930208][ T3308] bridge_slave_0: entered allmulticast mode [ 28.936522][ T3308] bridge_slave_0: entered promiscuous mode [ 28.955293][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.962422][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.969573][ T3305] bridge_slave_0: entered allmulticast mode [ 28.976028][ T3305] bridge_slave_0: entered promiscuous mode [ 28.989255][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.996335][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.003555][ T3308] bridge_slave_1: entered allmulticast mode [ 29.009900][ T3308] bridge_slave_1: entered promiscuous mode [ 29.016165][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.024995][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.032084][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.039304][ T3305] bridge_slave_1: entered allmulticast mode [ 29.045701][ T3305] bridge_slave_1: entered promiscuous mode [ 29.052045][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.059184][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.066327][ T3310] bridge_slave_0: entered allmulticast mode [ 29.072978][ T3310] bridge_slave_0: entered promiscuous mode [ 29.100961][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.108063][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.115291][ T3310] bridge_slave_1: entered allmulticast mode [ 29.121596][ T3310] bridge_slave_1: entered promiscuous mode [ 29.138252][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.158659][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.165786][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.173077][ T3314] bridge_slave_0: entered allmulticast mode [ 29.179551][ T3314] bridge_slave_0: entered promiscuous mode [ 29.186740][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.202137][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.217104][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.226258][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.233474][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.240725][ T3314] bridge_slave_1: entered allmulticast mode [ 29.247106][ T3314] bridge_slave_1: entered promiscuous mode [ 29.263672][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.275690][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.300940][ T3308] team0: Port device team_slave_0 added [ 29.322285][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.332056][ T3308] team0: Port device team_slave_1 added [ 29.347549][ T3310] team0: Port device team_slave_0 added [ 29.354319][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.368953][ T3305] team0: Port device team_slave_0 added [ 29.374666][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.381862][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.389007][ T3304] bridge_slave_0: entered allmulticast mode [ 29.395482][ T3304] bridge_slave_0: entered promiscuous mode [ 29.402482][ T3310] team0: Port device team_slave_1 added [ 29.422629][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.429759][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.455697][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.467401][ T3305] team0: Port device team_slave_1 added [ 29.473218][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.480335][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.487535][ T3304] bridge_slave_1: entered allmulticast mode [ 29.493909][ T3304] bridge_slave_1: entered promiscuous mode [ 29.505388][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.512388][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.538333][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.555041][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.562064][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.588031][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.610951][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.617996][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.644016][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.655401][ T3314] team0: Port device team_slave_0 added [ 29.662609][ T3314] team0: Port device team_slave_1 added [ 29.680932][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.696044][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.703132][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.729155][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.740983][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.765073][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.772146][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.798222][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.817824][ T3304] team0: Port device team_slave_0 added [ 29.830537][ T3308] hsr_slave_0: entered promiscuous mode [ 29.836575][ T3308] hsr_slave_1: entered promiscuous mode [ 29.843005][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.850009][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.876108][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.887455][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.894603][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.920676][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.945066][ T3304] team0: Port device team_slave_1 added [ 29.975001][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.982081][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.008134][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.025421][ T3310] hsr_slave_0: entered promiscuous mode [ 30.031710][ T3310] hsr_slave_1: entered promiscuous mode [ 30.037593][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.045212][ T3310] Cannot create hsr debugfs directory [ 30.063590][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.070597][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.096625][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.109668][ T3305] hsr_slave_0: entered promiscuous mode [ 30.115637][ T3305] hsr_slave_1: entered promiscuous mode [ 30.121626][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.129205][ T3305] Cannot create hsr debugfs directory [ 30.158505][ T3314] hsr_slave_0: entered promiscuous mode [ 30.164751][ T3314] hsr_slave_1: entered promiscuous mode [ 30.170607][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.178195][ T3314] Cannot create hsr debugfs directory [ 30.227176][ T3304] hsr_slave_0: entered promiscuous mode [ 30.233261][ T3304] hsr_slave_1: entered promiscuous mode [ 30.239246][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.246810][ T3304] Cannot create hsr debugfs directory [ 30.408327][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.417955][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.426825][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.438603][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.459535][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.469312][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.478628][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.487217][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.531023][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.540598][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.549994][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.558559][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.598599][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.615357][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.624974][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.645253][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.653647][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.668161][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.677883][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.690685][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.698938][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.713523][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.746625][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.755820][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.775611][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.782904][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.791770][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.798847][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.807565][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.814835][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.836449][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.843621][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.856956][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.891298][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.908971][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.919539][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.942557][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.949642][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.961997][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.980400][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.992163][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.999383][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.013887][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.027206][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.037714][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.072484][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.089817][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.096929][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.107090][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.114240][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.139527][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.146695][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.155493][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.162601][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.190025][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.200208][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.209812][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.226683][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.237242][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.277111][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.399558][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.442271][ T3310] veth0_vlan: entered promiscuous mode [ 31.475870][ T3308] veth0_vlan: entered promiscuous mode [ 31.485628][ T3305] veth0_vlan: entered promiscuous mode [ 31.494093][ T3310] veth1_vlan: entered promiscuous mode [ 31.503271][ T3305] veth1_vlan: entered promiscuous mode [ 31.511759][ T3308] veth1_vlan: entered promiscuous mode [ 31.528613][ T3304] veth0_vlan: entered promiscuous mode [ 31.539715][ T3304] veth1_vlan: entered promiscuous mode [ 31.554925][ T3310] veth0_macvtap: entered promiscuous mode [ 31.564923][ T3310] veth1_macvtap: entered promiscuous mode [ 31.584523][ T3308] veth0_macvtap: entered promiscuous mode [ 31.595650][ T3305] veth0_macvtap: entered promiscuous mode [ 31.603080][ T3308] veth1_macvtap: entered promiscuous mode [ 31.614192][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.622551][ T3305] veth1_macvtap: entered promiscuous mode [ 31.631080][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.646243][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.656192][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.666155][ T3304] veth0_macvtap: entered promiscuous mode [ 31.674669][ T3304] veth1_macvtap: entered promiscuous mode [ 31.682588][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.691376][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.700370][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.709203][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.729904][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.738825][ T3310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.747642][ T3310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.756629][ T3310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.765472][ T3310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.779810][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.788752][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.802696][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.811507][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.820378][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.829162][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.841043][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.856146][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.864986][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.873851][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.882615][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.905036][ T3314] veth0_vlan: entered promiscuous mode [ 31.939898][ T3314] veth1_vlan: entered promiscuous mode [ 31.962040][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.973922][ T3314] veth0_macvtap: entered promiscuous mode [ 32.000861][ T3314] veth1_macvtap: entered promiscuous mode [ 32.013495][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.033130][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.064769][ T3314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.073729][ T3314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.082523][ T3314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.091357][ T3314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.121266][ T3479] xt_NFQUEUE: number of total queues is 0 [ 32.168442][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 32.168460][ T29] audit: type=1400 audit(1752043389.077:105): avc: denied { write } for pid=3485 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.233160][ T29] audit: type=1400 audit(1752043389.117:106): avc: denied { create } for pid=3490 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.241828][ T3489] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 32.253450][ T29] audit: type=1400 audit(1752043389.127:107): avc: denied { create } for pid=3492 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.278959][ T29] audit: type=1400 audit(1752043389.137:108): avc: denied { connect } for pid=3492 comm="syz.1.9" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.400497][ T3502] loop3: detected capacity change from 0 to 512 [ 32.435685][ T3502] ======================================================= [ 32.435685][ T3502] WARNING: The mand mount option has been deprecated and [ 32.435685][ T3502] and is ignored by this kernel. Remove the mand [ 32.435685][ T3502] option from the mount to silence this warning. [ 32.435685][ T3502] ======================================================= [ 32.490046][ T29] audit: type=1400 audit(1752043389.167:109): avc: denied { create } for pid=3488 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.509432][ T29] audit: type=1400 audit(1752043389.227:110): avc: denied { name_bind } for pid=3494 comm="syz.4.5" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.530877][ T29] audit: type=1400 audit(1752043389.227:111): avc: denied { node_bind } for pid=3494 comm="syz.4.5" saddr=::ffff:172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.553831][ T29] audit: type=1400 audit(1752043389.257:112): avc: denied { open } for pid=3499 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.572987][ T29] audit: type=1400 audit(1752043389.257:113): avc: denied { kernel } for pid=3499 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.592303][ T29] audit: type=1400 audit(1752043389.257:114): avc: denied { tracepoint } for pid=3499 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.675639][ T3502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.705917][ T3502] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.882464][ T3521] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 32.899211][ T3502] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.7: corrupted inode contents [ 32.911721][ T3523] loop4: detected capacity change from 0 to 128 [ 32.934562][ T3502] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.7: mark_inode_dirty error [ 32.954518][ T3523] FAT-fs (loop4): Directory bread(block 162) failed [ 32.972745][ T3523] FAT-fs (loop4): Directory bread(block 163) failed [ 32.982094][ T3502] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.7: corrupted inode contents [ 32.988165][ T3523] FAT-fs (loop4): Directory bread(block 164) failed [ 33.012821][ T3523] FAT-fs (loop4): Directory bread(block 165) failed [ 33.016044][ T3502] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.7: mark_inode_dirty error [ 33.028013][ T3523] FAT-fs (loop4): Directory bread(block 166) failed [ 33.050677][ T3523] FAT-fs (loop4): Directory bread(block 167) failed [ 33.062734][ T3523] FAT-fs (loop4): Directory bread(block 168) failed [ 33.092886][ T3523] FAT-fs (loop4): Directory bread(block 169) failed [ 33.319762][ T3491] syz.3.7 (3491) used greatest stack depth: 5904 bytes left [ 33.331264][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.352687][ T3547] hub 9-0:1.0: USB hub found [ 33.360995][ T3547] hub 9-0:1.0: 8 ports detected [ 33.527412][ T3566] process 'syz.3.40' launched '/dev/fd/6' with NULL argv: empty string added [ 33.641291][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 33.644617][ T3575] hub 9-0:1.0: USB hub found [ 33.662150][ T3575] hub 9-0:1.0: 8 ports detected [ 33.787869][ T3596] netlink: 96 bytes leftover after parsing attributes in process `syz.3.55'. [ 33.831210][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 33.840180][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 33.891015][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 33.904905][ T3606] hub 9-0:1.0: USB hub found [ 33.910082][ T3606] hub 9-0:1.0: 8 ports detected [ 33.982763][ T3614] sd 0:0:1:0: device reset [ 34.090146][ T3633] netem: change failed [ 34.249174][ T3641] hub 9-0:1.0: USB hub found [ 34.264252][ T3641] hub 9-0:1.0: 8 ports detected [ 34.283079][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 34.291898][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 34.321389][ T3649] sd 0:0:1:0: device reset [ 34.570157][ T3680] sd 0:0:1:0: device reset [ 34.595508][ T3682] loop2: detected capacity change from 0 to 512 [ 34.625078][ T3682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.641069][ T3682] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.831014][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.851882][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 34.868996][ T3706] loop4: detected capacity change from 0 to 1024 [ 34.892847][ T3710] bridge0: port 3(macvlan2) entered blocking state [ 34.899621][ T3710] bridge0: port 3(macvlan2) entered disabled state [ 34.917614][ T3706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.940267][ T3710] macvlan2: entered allmulticast mode [ 34.945708][ T3710] bridge0: entered allmulticast mode [ 34.965349][ T3706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.994222][ T3710] macvlan2: left allmulticast mode [ 34.999462][ T3710] bridge0: left allmulticast mode [ 35.123383][ T3729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 35.163816][ T3729] bridge0: port 3(macvlan2) entered blocking state [ 35.170526][ T3729] bridge0: port 3(macvlan2) entered disabled state [ 35.202800][ T3729] macvlan2: entered allmulticast mode [ 35.208371][ T3729] bridge0: entered allmulticast mode [ 35.214463][ T3729] macvlan2: left allmulticast mode [ 35.219657][ T3729] bridge0: left allmulticast mode [ 35.277633][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 35.353138][ T3748] loop1: detected capacity change from 0 to 1024 [ 35.360018][ T3742] wireguard0: entered promiscuous mode [ 35.365886][ T3745] SELinux: failed to load policy [ 35.374383][ T3748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.401519][ T3748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.455112][ T3758] bridge0: port 3(macvlan2) entered blocking state [ 35.461848][ T3758] bridge0: port 3(macvlan2) entered disabled state [ 35.469096][ T3758] macvlan2: entered allmulticast mode [ 35.474511][ T3758] bridge0: entered allmulticast mode [ 35.484163][ T3758] macvlan2: left allmulticast mode [ 35.489495][ T3758] bridge0: left allmulticast mode [ 35.614961][ T3782] loop1: detected capacity change from 0 to 128 [ 35.626015][ T3780] loop3: detected capacity change from 0 to 512 [ 35.646133][ T3782] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 35.649314][ T3775] SELinux: failed to load policy [ 35.654052][ T3782] FAT-fs (loop1): Filesystem has been set read-only [ 35.684170][ T3782] syz.1.139: attempt to access beyond end of device [ 35.684170][ T3782] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 35.706225][ T3780] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 35.714279][ T3780] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 35.725388][ T3787] wireguard0: entered promiscuous mode [ 35.733078][ T3782] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 35.741077][ T3782] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 35.749275][ T3780] System zones: 0-1, 15-15, 18-18, 34-34 [ 35.755204][ T3780] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.762487][ T3780] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 35.777098][ T3780] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 35.779298][ T3786] syz.1.139: attempt to access beyond end of device [ 35.779298][ T3786] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 35.796997][ T3786] Buffer I/O error on dev loop1, logical block 2065, async page read [ 35.806588][ T3786] syz.1.139: attempt to access beyond end of device [ 35.806588][ T3786] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 35.819812][ T3786] Buffer I/O error on dev loop1, logical block 2066, async page read [ 35.828701][ T3786] syz.1.139: attempt to access beyond end of device [ 35.828701][ T3786] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 35.841942][ T3786] Buffer I/O error on dev loop1, logical block 2067, async page read [ 35.850236][ T3786] syz.1.139: attempt to access beyond end of device [ 35.850236][ T3786] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 35.863491][ T3786] Buffer I/O error on dev loop1, logical block 2068, async page read [ 35.871740][ T3780] EXT4-fs (loop3): 1 truncate cleaned up [ 35.873728][ T3786] syz.1.139: attempt to access beyond end of device [ 35.873728][ T3786] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 35.890526][ T3780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.890650][ T3786] Buffer I/O error on dev loop1, logical block 2069, async page read [ 35.913891][ T3786] syz.1.139: attempt to access beyond end of device [ 35.913891][ T3786] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 35.927134][ T3786] Buffer I/O error on dev loop1, logical block 2070, async page read [ 35.939970][ T3786] syz.1.139: attempt to access beyond end of device [ 35.939970][ T3786] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 35.953382][ T3786] Buffer I/O error on dev loop1, logical block 2071, async page read [ 35.970394][ T3806] syz.2.150 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.973818][ T3786] syz.1.139: attempt to access beyond end of device [ 35.973818][ T3786] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 35.993916][ T3786] Buffer I/O error on dev loop1, logical block 2072, async page read [ 36.016971][ T3782] syz.1.139: attempt to access beyond end of device [ 36.016971][ T3782] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 36.030556][ T3782] Buffer I/O error on dev loop1, logical block 2065, async page read [ 36.041942][ T3782] Buffer I/O error on dev loop1, logical block 2066, async page read [ 36.050856][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.073329][ T3814] bridge0: port 3(macvlan2) entered blocking state [ 36.079969][ T3814] bridge0: port 3(macvlan2) entered disabled state [ 36.089401][ T3814] macvlan2: entered allmulticast mode [ 36.095078][ T3814] bridge0: entered allmulticast mode [ 36.122648][ T3814] macvlan2: left allmulticast mode [ 36.127865][ T3814] bridge0: left allmulticast mode [ 36.142232][ T3822] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 36.166708][ T3822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.186336][ T3824] loop0: detected capacity change from 0 to 2048 [ 36.210581][ T3822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.218195][ T3822] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 36.230096][ T3822] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 36.265360][ T3824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.417623][ T3848] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 36.440151][ T3824] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 36.511568][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.526699][ T3850] usb usb8: usbfs: process 3850 (syz.2.170) did not claim interface 0 before use [ 36.574429][ T3856] loop3: detected capacity change from 0 to 1024 [ 36.586632][ T3860] sd 0:0:1:0: device reset [ 36.590509][ T3856] EXT4-fs: Ignoring removed nobh option [ 36.605454][ T3856] EXT4-fs: Ignoring removed nobh option [ 36.624883][ T3856] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 36.639657][ T3864] Zero length message leads to an empty skb [ 36.650132][ T3856] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 36.748731][ T3878] loop2: detected capacity change from 0 to 256 [ 36.757324][ T3878] vfat: Bad value for 'dmask' [ 36.783340][ T3880] SELinux: policydb version 280 does not match my version range 15-34 [ 36.795031][ T3880] SELinux: failed to load policy [ 36.810600][ T3876] vhci_hcd: invalid port number 96 [ 36.815797][ T3876] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 37.203539][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 37.203557][ T29] audit: type=1400 audit(1752043394.107:285): avc: denied { prog_load } for pid=3945 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.256194][ T3947] netlink: 'syz.1.217': attribute type 6 has an invalid length. [ 37.257863][ T29] audit: type=1400 audit(1752043394.107:286): avc: denied { bpf } for pid=3945 comm="syz.1.217" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.284285][ T29] audit: type=1400 audit(1752043394.107:287): avc: denied { perfmon } for pid=3945 comm="syz.1.217" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.305083][ T29] audit: type=1400 audit(1752043394.107:288): avc: denied { prog_run } for pid=3949 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.324026][ T29] audit: type=1400 audit(1752043394.147:289): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.348382][ T29] audit: type=1400 audit(1752043394.147:290): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.372698][ T29] audit: type=1400 audit(1752043394.147:291): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.411174][ T29] audit: type=1400 audit(1752043394.257:292): avc: denied { map_create } for pid=3954 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.430239][ T29] audit: type=1400 audit(1752043394.257:293): avc: denied { map_read map_write } for pid=3954 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.450191][ T29] audit: type=1400 audit(1752043394.307:294): avc: denied { create } for pid=3954 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.500452][ T3964] netlink: 'syz.3.227': attribute type 29 has an invalid length. [ 37.509309][ T3964] netlink: 'syz.3.227': attribute type 29 has an invalid length. [ 37.667786][ T3976] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 37.675988][ T3976] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 37.719247][ T3997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3997 comm=syz.1.241 [ 37.753665][ T3999] loop3: detected capacity change from 0 to 128 [ 37.772651][ T4001] loop1: detected capacity change from 0 to 1024 [ 37.808099][ T4001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.820717][ T4001] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.842388][ T4001] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm syz.1.243: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.857026][ T4001] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 37.869474][ T4001] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.869474][ T4001] [ 37.886763][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a261600: rx timeout, send abort [ 37.887198][ T4001] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 3: comm syz.1.243: lblock 3 mapped to illegal pblock 3 (length 5) [ 37.937805][ T4001] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 5 with error 117 [ 37.950418][ T4001] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.950418][ T4001] [ 38.032240][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.049905][ T4025] x_tables: duplicate entry at hook 3 [ 38.154702][ T4030] netlink: 'syz.3.255': attribute type 11 has an invalid length. [ 38.386794][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a261a00: rx timeout, send abort [ 38.395600][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a261600: abort rx timeout. Force session deactivation [ 38.643975][ T4042] 9pnet: Could not find request transport: 0xffffffffffffffff [ 38.666942][ T4054] loop2: detected capacity change from 0 to 1024 [ 38.752193][ T4055] ALSA: seq fatal error: cannot create timer (-19) [ 38.886870][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a261a00: abort rx timeout. Force session deactivation [ 38.902837][ T4054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.920250][ T4054] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.962663][ T4082] loop4: detected capacity change from 0 to 512 [ 39.009229][ T1010] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 15) [ 39.026471][ T4082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.032459][ T1010] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 39.043631][ T4094] loop1: detected capacity change from 0 to 128 [ 39.051380][ T1010] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.051380][ T1010] [ 39.055438][ T4082] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.060264][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.126686][ T4082] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.269: Allocating blocks 18-19 which overlap fs metadata [ 39.142817][ T4094] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.165030][ T4105] syzkaller1: entered promiscuous mode [ 39.168612][ T4094] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.170583][ T4105] syzkaller1: entered allmulticast mode [ 39.190527][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.334706][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.448376][ T4142] loop4: detected capacity change from 0 to 1024 [ 39.469442][ T4142] EXT4-fs: Ignoring removed bh option [ 39.485441][ T4142] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.492122][ T4142] EXT4-fs: Ignoring removed bh option [ 39.525056][ T4142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.601346][ T4142] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.282: Allocating blocks 449-513 which overlap fs metadata [ 39.684916][ T4140] EXT4-fs (loop4): pa ffff88810699e0e0: logic 48, phys. 177, len 21 [ 39.693108][ T4140] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 39.717663][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.813316][ T4177] sock: sock_set_timeout: `syz.4.293' (pid 4177) tries to set negative timeout [ 39.825546][ T4184] __nla_validate_parse: 17 callbacks suppressed [ 39.825560][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 39.889111][ T4187] ALSA: seq fatal error: cannot create timer (-19) [ 39.982730][ T4199] loop9: detected capacity change from 0 to 7 [ 39.998038][ T4199] loop9: unable to read partition table [ 40.018830][ T4199] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 40.018830][ T4199] ) failed (rc=-5) [ 40.060029][ T4213] loop1: detected capacity change from 0 to 128 [ 40.197399][ T4239] loop2: detected capacity change from 0 to 1024 [ 40.207126][ T4239] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 40.224552][ T4242] loop3: detected capacity change from 0 to 1024 [ 40.248899][ T4242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.298043][ T4242] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.371218][ T4259] netlink: 165 bytes leftover after parsing attributes in process `syz.0.329'. [ 40.380598][ T4259] netlink: 277 bytes leftover after parsing attributes in process `syz.0.329'. [ 40.426727][ T37] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 15) [ 40.456775][ T4267] raw_sendmsg: syz.0.334 forgot to set AF_INET. Fix it! [ 40.457990][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 40.476380][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.476380][ T37] [ 40.522254][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.537573][ T4271] netlink: 132 bytes leftover after parsing attributes in process `syz.0.335'. [ 40.667463][ T4284] bond1 (unregistering): Released all slaves [ 40.699646][ T4289] loop4: detected capacity change from 0 to 512 [ 40.707288][ T4289] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.729287][ T4289] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm wg1: iget: bad i_size value: -6917529027641081756 [ 40.743682][ T4289] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm wg1: couldn't read orphan inode 17 (err -117) [ 40.763911][ T4289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.824430][ T4289] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 65: padding at end of block bitmap is not set [ 40.841206][ T4289] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm wg1: Failed to acquire dquot type 0 [ 40.875939][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.904423][ T4304] loop3: detected capacity change from 0 to 128 [ 40.912972][ T4304] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.925292][ T4304] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.027351][ T4307] SELinux: failed to load policy [ 41.048691][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.159972][ T4329] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 41.664063][ T4375] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.815117][ T3292] ================================================================== [ 41.823422][ T3292] BUG: KCSAN: data-race in do_select / pollwake [ 41.829725][ T3292] [ 41.832059][ T3292] write to 0xffffc9000159b9e0 of 4 bytes by interrupt on cpu 1: [ 41.839706][ T3292] pollwake+0xb6/0x100 [ 41.843792][ T3292] __wake_up_sync_key+0x52/0x80 [ 41.848653][ T3292] sock_def_readable+0x70/0x190 [ 41.853534][ T3292] tcp_data_ready+0x1ae/0x290 [ 41.858230][ T3292] tcp_data_queue+0x15b0/0x3270 [ 41.863101][ T3292] tcp_rcv_established+0xa0f/0xef0 [ 41.868237][ T3292] tcp_v4_do_rcv+0x672/0x740 [ 41.872848][ T3292] tcp_v4_rcv+0x1bd7/0x1f60 [ 41.877369][ T3292] ip_protocol_deliver_rcu+0x397/0x780 [ 41.883024][ T3292] ip_local_deliver_finish+0x184/0x220 [ 41.888509][ T3292] ip_local_deliver+0xe8/0x1c0 [ 41.893300][ T3292] ip_sublist_rcv+0x56b/0x650 [ 41.897997][ T3292] ip_list_rcv+0x261/0x290 [ 41.902433][ T3292] __netif_receive_skb_list_core+0x4dc/0x500 [ 41.908422][ T3292] netif_receive_skb_list_internal+0x487/0x600 [ 41.914587][ T3292] napi_complete_done+0x1a3/0x410 [ 41.919634][ T3292] virtnet_poll+0x18c5/0x1d10 [ 41.924321][ T3292] __napi_poll+0x63/0x3a0 [ 41.928683][ T3292] net_rx_action+0x391/0x830 [ 41.933299][ T3292] handle_softirqs+0xb7/0x290 [ 41.938002][ T3292] __irq_exit_rcu+0x3a/0xc0 [ 41.942512][ T3292] common_interrupt+0x83/0x90 [ 41.947209][ T3292] asm_common_interrupt+0x26/0x40 [ 41.952259][ T3292] __tsan_read8+0xe9/0x190 [ 41.956705][ T3292] __tlb_remove_folio_pages+0x2e/0x220 [ 41.962184][ T3292] unmap_page_range+0x158a/0x2740 [ 41.967265][ T3292] unmap_vmas+0x23d/0x3a0 [ 41.971616][ T3292] exit_mmap+0x1b0/0x6c0 [ 41.975869][ T3292] __mmput+0x28/0x1c0 [ 41.979878][ T3292] mmput+0x40/0x50 [ 41.983646][ T3292] exit_mm+0xe4/0x190 [ 41.987658][ T3292] do_exit+0x417/0x1590 [ 41.991846][ T3292] do_group_exit+0xff/0x140 [ 41.996378][ T3292] get_signal+0xe59/0xf70 [ 42.000736][ T3292] arch_do_signal_or_restart+0x96/0x480 [ 42.006294][ T3292] exit_to_user_mode_loop+0x7a/0x100 [ 42.011594][ T3292] do_syscall_64+0x1d6/0x200 [ 42.016201][ T3292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.022107][ T3292] [ 42.024447][ T3292] read to 0xffffc9000159b9e0 of 4 bytes by task 3292 on cpu 0: [ 42.031998][ T3292] do_select+0xe48/0xf50 [ 42.036287][ T3292] core_sys_select+0x3d7/0x6e0 [ 42.041081][ T3292] __se_sys_pselect6+0x216/0x280 [ 42.046043][ T3292] __x64_sys_pselect6+0x78/0x90 [ 42.050928][ T3292] x64_sys_call+0x1caa/0x2fb0 [ 42.055621][ T3292] do_syscall_64+0xd2/0x200 [ 42.060150][ T3292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.066069][ T3292] [ 42.068402][ T3292] value changed: 0x00000000 -> 0x00000001 [ 42.074126][ T3292] [ 42.076453][ T3292] Reported by Kernel Concurrency Sanitizer on: [ 42.082618][ T3292] CPU: 0 UID: 0 PID: 3292 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 42.095210][ T3292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.105288][ T3292] ==================================================================