last executing test programs: 2.06458526s ago: executing program 3 (id=702): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x20008006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44080) 1.862183134s ago: executing program 3 (id=704): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10) socket$packet(0x11, 0x3, 0x300) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (fail_nth: 6) 1.748120657s ago: executing program 3 (id=708): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a310000000005000100070000003f360b4ccb122616fe889feeb98ad2b644cc1ff6a3647b94671b322656448b9e194b4f2ba7c6fff9d514335662f98b628c8ed9dc95146085fc97ca6eda92770a807c6789f0dc0ca2c79af6486396eb060691ae8d07b4beec2b13c3c4dbd4bb4671e8fbfd1d4e97cabff5c9e75c001280dc587fd35f"], 0x4c}}, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) 1.731490287s ago: executing program 3 (id=710): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc75700"}}, 0x48}}, 0x0) (fail_nth: 4) 1.57860389s ago: executing program 3 (id=714): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x20008006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44080) 1.53506904s ago: executing program 3 (id=717): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000003f80)="$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") socket$packet(0x11, 0x2, 0x300) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = gettid() rt_sigaction(0x16, &(0x7f0000000040)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) tkill(r4, 0x16) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="240424ddfdc3395da041dcd6fe99b38ef55565b2fecd7cad56389a1c687615f1966ffa4891cac12fab6e35a8b59b1a635f34709da0bee46b07a231129f51f5ff10cc2b05e8f0368abbd58a83c884d347c7b15c70a0d912791a2c1f6f36de8b27b1d3c259d43f6911d70c4f0a495557eaaeb883a28fa43ba844c93d63c61b84990add15ec911dad9fa70d5853ae89fa3e62fe78818761933c1f75cdf849fbc6290555bad6", 0xa4}, {&(0x7f0000000080)="d7e7e3e939", 0x5}, {&(0x7f0000000580)="1c258e38814e0daafd003f8ba47094b54672373bdd815b7af22147853562f57902abc819c301073da90901bef86151d193585c233b47bc7f274de55b7eb649e3c71986317d9e6c2094bbe211cc852ad07ac71ed5f37d22ecd3e008975bc296a66ea6b25fc94ad9e72136be353ab3a98bd979f7dc1c6ca7c94d042f3cef1a", 0x7e}], 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 1.07858554s ago: executing program 1 (id=729): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200242, 0x0) dup2(r0, r1) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="540000001200010000000000000003000a"], 0x54}}, 0x20004010) 1.02696465s ago: executing program 1 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000006000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d000000000000007f0000000000000000000000000000000000000000000000dd020000000000000000000000000000000100020000000084010500ac141438000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000ac1414aa000000000000000000000000000000000100000000000000ffffffff0000000000000000000000000000000000000001000000003c00000002000000fc0000000000000000000000000000010000000001030000000000000600000000000000ff020000000000000000000000000001000000003c00000002000000fe8000000000000000000000000000aa00000000020000000000000003000000286a8b2700000000000000000000000000000000000000003c"], 0x23c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 962.605952ms ago: executing program 1 (id=736): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x10000a47) r1 = io_uring_setup(0x2811, &(0x7f0000000380)={0x0, 0x6a59, 0x40, 0x3, 0x2e6}) dup2(r0, r1) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x44845) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004041) 561.234409ms ago: executing program 2 (id=745): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) 373.293413ms ago: executing program 0 (id=748): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x9, 0x6, 0x4, 0x100, 0x4, 0x6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x240, 0xc000, 0x0, 0xc1}) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f00000001c0)=0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r2, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 355.385923ms ago: executing program 0 (id=749): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x1000000}, 0x10) 305.925984ms ago: executing program 0 (id=750): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="3f5010c4d117c87a8bc4c1c9940c4576dd8e4942802edd47c1f56ab1b2feba1c0fb54fd40104b44ed2c8a7f8afb232c0172732c011807610b146d90b68", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250b00000008003200f221000008003900050000000500370000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x48800) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x820441, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000180), 0x2, 0x0) (async) getpid() (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$dupfd(r3, 0x406, r3) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r5) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000540)={@local, @dev, 0x0}, &(0x7f0000000700)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x45b5995d60a83ec9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x5c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x44) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x894a, 0x0) 305.649254ms ago: executing program 0 (id=751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x9d}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') pread64(r5, &(0x7f000001a240)=""/102379, 0x18feb, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%ps \x00'}, 0x20) r7 = socket$unix(0x1, 0x5, 0x0) openat2(r5, &(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000400)={0x200, 0xbb, 0x13}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x7fff, 0x6, {{0x37, 0x4, 0x1, 0x3f, 0xdc, 0x64, 0x0, 0x7, 0x2f, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x14, 0xe1, 0x1, 0x0, [{@rand_addr=0x64010101}, {@local, 0xd}]}, @timestamp_prespec={0x44, 0x54, 0x33, 0x3, 0x9, [{@empty, 0x4}, {@loopback, 0x1ff}, {@broadcast, 0xd}, {@multicast2, 0x8}, {@local, 0x8}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8001}, {@empty, 0x9}]}, @timestamp={0x44, 0x2c, 0x35, 0x0, 0xc, [0x5, 0x6, 0x2, 0x0, 0x0, 0x4800000, 0x7, 0x8, 0xb853, 0x6]}, @timestamp={0x44, 0x8, 0x3d, 0x0, 0xb, [0x4]}, @cipso={0x86, 0x1b, 0x2, [{0x6, 0xa, "a966c29a3262cf25"}, {0x5, 0xb, "03da79c3e9df2caabd"}]}, @generic={0x86, 0xe, "d8f52bb605a6a297eac233ab"}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @const={0x6, 0x0, 0x0, 0xa, 0x3}, @var={0x10, 0x0, 0x0, 0xe, 0x4, 0x2}, @union={0x1, 0x3, 0x0, 0x5, 0x1, 0x2, [{0x7, 0x5, 0x8000}, {0x2, 0x2, 0x6}, {0x4, 0x2, 0xfffffffa}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x1}]}]}, {0x0, [0x2e, 0x2e, 0x61]}}, &(0x7f0000000840)=""/163, 0x89, 0xa3, 0x0, 0x101, 0x10000, @value=r7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x27, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014004000b70300e0000000008500000083000000bf090000b6b09530550901000000000095000000000000001837000004000000002100000000000018160000", @ANYRES32=r4, @ANYBLOB="000000000000000018270000", @ANYRES32=r4, @ANYBLOB="000000000400000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186000000e0000000000000005000000182a0000", @ANYRES32=r6, @ANYBLOB="000000000100000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000186b00000a00000000000000fe1700008520000003000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x4c, '\x00', r8, @fallback=0x15, r9, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fcntl$getownex(r10, 0x10, &(0x7f0000000080)) 297.877084ms ago: executing program 2 (id=753): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 265.128375ms ago: executing program 2 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r0) 232.864356ms ago: executing program 4 (id=756): unshare(0x1a030980) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='io_uring_fail_link\x00', r1, 0x0, 0x483c}, 0x18) 232.483996ms ago: executing program 2 (id=757): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffdc7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x3d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x300}) 176.375856ms ago: executing program 0 (id=758): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x20008006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x21}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}]}}]}, 0x48}}, 0x44080) 175.555137ms ago: executing program 2 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x8000000004) fcntl$lock(r2, 0x24, &(0x7f00000003c0)={0x1, 0x0, 0x81, 0x7}) (fail_nth: 7) 175.430516ms ago: executing program 4 (id=760): r0 = syz_open_dev$usbfs(&(0x7f00000003c0), 0xffffffffffffffff, 0x8401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/88, 0x58, 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9b}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x7995}, 0x8, 0x3, 0x0, 0x48000000, 0x0, 0x0, 0x0}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r3, 0x4, 0x1, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c840}, 0x4000001) 175.325617ms ago: executing program 4 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 163.235237ms ago: executing program 0 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x8}, 0x8c80, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x18) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r4, &(0x7f0000000840)) keyctl$get_persistent(0x16, r4, r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000000, 0x4c831, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=r7, @ANYBLOB="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", @ANYRES16=r4, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r9 = openat$cgroup_ro(r2, &(0x7f0000000800)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) fdatasync(r9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) renameat2(r8, &(0x7f0000000140)='./file0\x00', r8, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000007c0)='rpc_xdr_overflow\x00', r3}, 0x18) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "70c17898ed1aa44b18e907096e512fe57d73b2b9d6b645bc69b6dff31e23eeb93e928b8e634e434d3daf321c5d8f9027e59570e3bdb6b73834b3742673d6d05b", 0x30}, 0x48, r1) 148.451587ms ago: executing program 2 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f00000003c0)={0x1, 0x7, 0x1}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x3580, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x3f00, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000680)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x3, 0x4}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000002080)="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", 0x1000}, {&(0x7f00000030c0)="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", 0x1000}], 0x2, &(0x7f0000000600)="1896ee843050a2341fe804bae263e26a5c8dba7266a12dcc0806f18305577335ba7dd4572cdea79a76e36549a3c0f190780e8d7f5c4f46040a68928dc76540b8d6808242f86955125b48b647b8358321a13ea1b2491ff10f9cb10493907c645d3d78c4fb5db88a897c8d6bf6902ff565200e6f16383e57701e", 0x79, 0x4c800}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10) ustat(0x3, &(0x7f0000000000)) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r13, @ANYBLOB="010426bd7000fedbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 91.751078ms ago: executing program 1 (id=764): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 86.405388ms ago: executing program 4 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 64.008059ms ago: executing program 1 (id=766): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) 53.236059ms ago: executing program 4 (id=767): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a142e87683aa44ba09da44473876f7f431e2ae49b51802aeb0f00777b4e42d51fd7157dde8911a8da2c3ab46890e6d51c72b1b772f902f01477791a3d7abf70426b97dad7e66a4d92d473ea34feced5f644355ef038bf6e05509aa6a797000a203b06a818939b1d138b4b26854d72ee8fc80a1d7b20c58d6eed9f25967548dda0d9acd2f1bc415"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffdc7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x3d) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc850}, 0x40) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x1c, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 210.9µs ago: executing program 1 (id=768): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1b069c73b2c0622b05fa000000000074c29a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='objagg_obj_parent_assign\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000400000004000000020000000000", @ANYRES32=0x1, @ANYBLOB="0000002e06d23eafc4004000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) read(r3, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fb24fec30d38bc1b2f062108000100030000000c00048005000300050000000880020002bfda"], 0x30}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000001500)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 0s ago: executing program 4 (id=769): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff032}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0x81}]}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r2, 0xfffffe4d}}, 0x48) kernel console output (not intermixed with test programs): [ 18.759387][ T29] audit: type=1400 audit(1759605114.776:60): avc: denied { rlimitinh } for pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.762121][ T29] audit: type=1400 audit(1759605114.776:61): avc: denied { siginh } for pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.526536][ T3177] sshd-session (3177) used greatest stack depth: 10544 bytes left Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 27.210929][ T29] audit: type=1400 audit(1759605123.236:62): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.233953][ T29] audit: type=1400 audit(1759605123.256:63): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.234960][ T3287] cgroup: Unknown subsys name 'net' [ 27.261716][ T29] audit: type=1400 audit(1759605123.286:64): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.379226][ T3287] cgroup: Unknown subsys name 'cpuset' [ 27.385434][ T3287] cgroup: Unknown subsys name 'rlimit' [ 27.497788][ T29] audit: type=1400 audit(1759605123.516:65): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.521158][ T29] audit: type=1400 audit(1759605123.516:66): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.541752][ T29] audit: type=1400 audit(1759605123.516:67): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.553436][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.562128][ T29] audit: type=1400 audit(1759605123.516:68): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.591056][ T29] audit: type=1400 audit(1759605123.516:69): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.591499][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.615985][ T29] audit: type=1400 audit(1759605123.516:70): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.616058][ T29] audit: type=1400 audit(1759605123.606:71): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.841977][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.874200][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 28.927275][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 28.955140][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.962300][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.969627][ T3309] bridge_slave_0: entered allmulticast mode [ 28.976006][ T3309] bridge_slave_0: entered promiscuous mode [ 28.985263][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.992494][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.999607][ T3309] bridge_slave_1: entered allmulticast mode [ 29.005984][ T3309] bridge_slave_1: entered promiscuous mode [ 29.050425][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.057497][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.064878][ T3302] bridge_slave_0: entered allmulticast mode [ 29.071297][ T3302] bridge_slave_0: entered promiscuous mode [ 29.083702][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.096256][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.107447][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.114565][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.121819][ T3302] bridge_slave_1: entered allmulticast mode [ 29.128156][ T3302] bridge_slave_1: entered promiscuous mode [ 29.136461][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 29.169953][ T3309] team0: Port device team_slave_0 added [ 29.182203][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.205571][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.214752][ T3309] team0: Port device team_slave_1 added [ 29.221790][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.252040][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.259253][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.266329][ T3299] bridge_slave_0: entered allmulticast mode [ 29.272787][ T3299] bridge_slave_0: entered promiscuous mode [ 29.279757][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.286831][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.293998][ T3299] bridge_slave_1: entered allmulticast mode [ 29.300581][ T3299] bridge_slave_1: entered promiscuous mode [ 29.332428][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.339488][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.365433][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.377145][ T3302] team0: Port device team_slave_0 added [ 29.383845][ T3302] team0: Port device team_slave_1 added [ 29.402426][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.409409][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.435390][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.456456][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.463634][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.470837][ T3298] bridge_slave_0: entered allmulticast mode [ 29.477312][ T3298] bridge_slave_0: entered promiscuous mode [ 29.485081][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.494228][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.501321][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.508429][ T3298] bridge_slave_1: entered allmulticast mode [ 29.514889][ T3298] bridge_slave_1: entered promiscuous mode [ 29.532164][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.541559][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.548715][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.574735][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.602762][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.609747][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.635829][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.657636][ T3299] team0: Port device team_slave_0 added [ 29.666660][ T3299] team0: Port device team_slave_1 added [ 29.673584][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.703755][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.712966][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.720077][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.727256][ T3300] bridge_slave_0: entered allmulticast mode [ 29.733795][ T3300] bridge_slave_0: entered promiscuous mode [ 29.740487][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.747626][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.754934][ T3300] bridge_slave_1: entered allmulticast mode [ 29.761452][ T3300] bridge_slave_1: entered promiscuous mode [ 29.775494][ T3309] hsr_slave_0: entered promiscuous mode [ 29.781607][ T3309] hsr_slave_1: entered promiscuous mode [ 29.787871][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.794862][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.820842][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.856820][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.863791][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.889771][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.907048][ T3298] team0: Port device team_slave_0 added [ 29.925230][ T3302] hsr_slave_0: entered promiscuous mode [ 29.931331][ T3302] hsr_slave_1: entered promiscuous mode [ 29.937180][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 29.942937][ T3302] Cannot create hsr debugfs directory [ 29.952145][ T3298] team0: Port device team_slave_1 added [ 29.959423][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.995083][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.014141][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.021177][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.047098][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.060919][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.067930][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.093848][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.116273][ T3299] hsr_slave_0: entered promiscuous mode [ 30.122289][ T3299] hsr_slave_1: entered promiscuous mode [ 30.128068][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 30.133839][ T3299] Cannot create hsr debugfs directory [ 30.156373][ T3300] team0: Port device team_slave_0 added [ 30.174941][ T3300] team0: Port device team_slave_1 added [ 30.228159][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.235152][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.261166][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.276260][ T3298] hsr_slave_0: entered promiscuous mode [ 30.282288][ T3298] hsr_slave_1: entered promiscuous mode [ 30.288121][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 30.293913][ T3298] Cannot create hsr debugfs directory [ 30.306447][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.313435][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.339457][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.426376][ T3300] hsr_slave_0: entered promiscuous mode [ 30.432573][ T3300] hsr_slave_1: entered promiscuous mode [ 30.438441][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 30.444192][ T3300] Cannot create hsr debugfs directory [ 30.478869][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.488732][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.509997][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.532875][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.561120][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.575406][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.586982][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.595579][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.629325][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.638404][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.647178][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.656466][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.714743][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.724136][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.733568][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.742912][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.781192][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.801246][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.811105][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.823894][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.832402][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.841204][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.852153][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.864644][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.883873][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.891030][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.903745][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.912142][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.922453][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.929522][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.942775][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.949927][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.958739][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.965846][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.983994][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.991098][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.001106][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.008165][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.024798][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.076324][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.086811][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.120391][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.172616][ T1667] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.179845][ T1667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.189099][ T1667] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.196199][ T1667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.219080][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.237359][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.264301][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.285928][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.307313][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.322067][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.329158][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.355285][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.362446][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.405481][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.415991][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.456762][ T3302] veth0_vlan: entered promiscuous mode [ 31.481053][ T3302] veth1_vlan: entered promiscuous mode [ 31.496284][ T3299] veth0_vlan: entered promiscuous mode [ 31.510283][ T3299] veth1_vlan: entered promiscuous mode [ 31.523876][ T3309] veth0_vlan: entered promiscuous mode [ 31.535807][ T3309] veth1_vlan: entered promiscuous mode [ 31.551626][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.564328][ T3299] veth0_macvtap: entered promiscuous mode [ 31.572291][ T3299] veth1_macvtap: entered promiscuous mode [ 31.582469][ T3302] veth0_macvtap: entered promiscuous mode [ 31.596752][ T3309] veth0_macvtap: entered promiscuous mode [ 31.605039][ T3309] veth1_macvtap: entered promiscuous mode [ 31.612698][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.638406][ T3302] veth1_macvtap: entered promiscuous mode [ 31.650352][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.677264][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.688385][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.701301][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.710854][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.722914][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.740127][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.760242][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.776052][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.823014][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.839119][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.867417][ T3298] veth0_vlan: entered promiscuous mode [ 31.899114][ T1667] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.921286][ T3471] loop3: detected capacity change from 0 to 1024 [ 31.926069][ T3298] veth1_vlan: entered promiscuous mode [ 31.934492][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.936255][ T3471] EXT4-fs: Ignoring removed orlov option [ 31.952501][ T3300] veth0_vlan: entered promiscuous mode [ 31.982735][ T3300] veth1_vlan: entered promiscuous mode [ 31.990535][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.005276][ T3298] veth0_macvtap: entered promiscuous mode [ 32.019734][ T3471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.019819][ T3300] veth0_macvtap: entered promiscuous mode [ 32.052913][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.070518][ T3300] veth1_macvtap: entered promiscuous mode [ 32.085837][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.095133][ T3298] veth1_macvtap: entered promiscuous mode [ 32.113497][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.145654][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.165752][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.197030][ T3488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3488 comm=syz.0.6 [ 32.209361][ T3488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3488 comm=syz.0.6 [ 32.226087][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.266761][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.301266][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.310795][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.412568][ T295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.446262][ T295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.495062][ T295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.505057][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 32.505072][ T29] audit: type=1400 audit(1759605128.526:117): avc: denied { allowed } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.552044][ T295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.593633][ T295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.603613][ T29] audit: type=1400 audit(1759605128.566:118): avc: denied { create } for pid=3492 comm="syz.4.5" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.624786][ T29] audit: type=1400 audit(1759605128.566:119): avc: denied { map } for pid=3492 comm="syz.4.5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.648614][ T29] audit: type=1400 audit(1759605128.566:120): avc: denied { read write } for pid=3492 comm="syz.4.5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.654932][ T3499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.680773][ T295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.690492][ T295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.700335][ T29] audit: type=1400 audit(1759605128.666:121): avc: denied { write } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.720565][ T29] audit: type=1400 audit(1759605128.666:122): avc: denied { read } for pid=3492 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.740590][ T295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.779706][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.871386][ T29] audit: type=1400 audit(1759605128.766:123): avc: denied { read } for pid=3497 comm="syz.2.7" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.890923][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 32.894363][ T29] audit: type=1400 audit(1759605128.766:124): avc: denied { open } for pid=3497 comm="syz.2.7" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.908775][ T3499] bridge_slave_1: left allmulticast mode [ 32.926041][ T29] audit: type=1400 audit(1759605128.796:125): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.931678][ T3499] bridge_slave_1: left promiscuous mode [ 32.931895][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.951418][ T29] audit: type=1326 audit(1759605128.816:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05928eec9 code=0x7ffc0000 [ 33.005585][ T3499] bridge_slave_0: left allmulticast mode [ 33.011386][ T3499] bridge_slave_0: left promiscuous mode [ 33.017130][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.088085][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 33.182134][ T3522] loop0: detected capacity change from 0 to 2048 [ 33.196425][ T3514] 9pnet: p9_errstr2errno: server reported unknown error [ 33.244685][ T3292] loop0: p1 < > p3 [ 33.249751][ T3292] loop0: p3 size 54016 extends beyond EOD, truncated [ 33.323823][ T3522] loop0: p1 < > p3 [ 33.339120][ T3522] loop0: p3 size 54016 extends beyond EOD, truncated [ 33.510557][ C0] operation not supported error, dev loop0, sector 160 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 33.533552][ T3534] capability: warning: `syz.2.20' uses deprecated v2 capabilities in a way that may be insecure [ 33.578175][ C0] hrtimer: interrupt took 32853 ns [ 33.607944][ T3536] loop0: detected capacity change from 0 to 128 [ 33.726234][ T3537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20'. [ 33.747931][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 33.765691][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 34.007862][ T3540] syz.4.22 uses obsolete (PF_INET,SOCK_PACKET) [ 34.186171][ T3543] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.200268][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 34.214475][ T3543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.259488][ T3543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.292337][ T3547] loop3: detected capacity change from 0 to 128 [ 34.460336][ T3567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 34.639377][ T3568] kworker/u8:21: attempt to access beyond end of device [ 34.639377][ T3568] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 34.666725][ T3568] kworker/u8:21: attempt to access beyond end of device [ 34.666725][ T3568] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 34.723445][ T3579] netlink: 272 bytes leftover after parsing attributes in process `syz.0.30'. [ 34.764755][ T3568] kworker/u8:21: attempt to access beyond end of device [ 34.764755][ T3568] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 34.869897][ T3568] kworker/u8:21: attempt to access beyond end of device [ 34.869897][ T3568] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 34.913344][ T3584] netlink: 'syz.0.32': attribute type 8 has an invalid length. [ 34.943315][ T3568] kworker/u8:21: attempt to access beyond end of device [ 34.943315][ T3568] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 35.043310][ T3568] kworker/u8:21: attempt to access beyond end of device [ 35.043310][ T3568] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 35.060803][ T3587] loop0: detected capacity change from 0 to 128 [ 35.071407][ T3568] kworker/u8:21: attempt to access beyond end of device [ 35.071407][ T3568] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 35.086741][ T3587] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.113433][ T3568] kworker/u8:21: attempt to access beyond end of device [ 35.113433][ T3568] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 35.127631][ T3587] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.159823][ T3568] kworker/u8:21: attempt to access beyond end of device [ 35.159823][ T3568] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 35.173676][ T3568] kworker/u8:21: attempt to access beyond end of device [ 35.173676][ T3568] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 35.203226][ T3587] FAULT_INJECTION: forcing a failure. [ 35.203226][ T3587] name failslab, interval 1, probability 0, space 0, times 0 [ 35.215984][ T3587] CPU: 1 UID: 0 PID: 3587 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.216076][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 35.216092][ T3587] Call Trace: [ 35.216142][ T3587] [ 35.216151][ T3587] __dump_stack+0x1d/0x30 [ 35.216189][ T3587] dump_stack_lvl+0xe8/0x140 [ 35.216224][ T3587] dump_stack+0x15/0x1b [ 35.216264][ T3587] should_fail_ex+0x265/0x280 [ 35.216451][ T3587] should_failslab+0x8c/0xb0 [ 35.216476][ T3587] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 35.216511][ T3587] ? sidtab_sid2str_get+0xa0/0x130 [ 35.216561][ T3587] kmemdup_noprof+0x2b/0x70 [ 35.216591][ T3587] sidtab_sid2str_get+0xa0/0x130 [ 35.216629][ T3587] security_sid_to_context_core+0x1eb/0x2e0 [ 35.216658][ T3587] security_sid_to_context+0x27/0x40 [ 35.216756][ T3587] avc_audit_post_callback+0x9d/0x520 [ 35.216797][ T3587] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 35.216843][ T3587] common_lsm_audit+0x1bb/0x230 [ 35.216889][ T3587] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 35.217007][ T3587] slow_avc_audit+0x104/0x140 [ 35.217078][ T3587] avc_has_extended_perms+0x6d0/0x940 [ 35.217129][ T3587] ioctl_has_perm+0x257/0x2a0 [ 35.217242][ T3587] selinux_file_ioctl+0x308/0x3a0 [ 35.217270][ T3587] ? __fget_files+0x184/0x1c0 [ 35.217304][ T3587] security_file_ioctl+0x48/0x90 [ 35.217395][ T3587] __se_sys_ioctl+0x47/0x140 [ 35.217413][ T3587] __x64_sys_ioctl+0x43/0x50 [ 35.217437][ T3587] x64_sys_call+0x1816/0x3000 [ 35.217457][ T3587] do_syscall_64+0xd2/0x200 [ 35.217490][ T3587] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 35.217548][ T3587] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 35.217575][ T3587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.217603][ T3587] RIP: 0033:0x7f1a80ffeec9 [ 35.217622][ T3587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.217709][ T3587] RSP: 002b:00007f1a7fa67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.217742][ T3587] RAX: ffffffffffffffda RBX: 00007f1a81255fa0 RCX: 00007f1a80ffeec9 [ 35.217758][ T3587] RDX: 0000200000000180 RSI: 00000000c0c0583b RDI: 0000000000000007 [ 35.217835][ T3587] RBP: 00007f1a7fa67090 R08: 0000000000000000 R09: 0000000000000000 [ 35.217847][ T3587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.217858][ T3587] R13: 00007f1a81256038 R14: 00007f1a81255fa0 R15: 00007ffdd4e78708 [ 35.217930][ T3587] [ 35.466336][ T3591] loop3: detected capacity change from 0 to 8192 [ 35.555868][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.651223][ T3604] hub 8-0:1.0: USB hub found [ 35.661044][ T3604] hub 8-0:1.0: 8 ports detected [ 35.804087][ T3612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36'. [ 36.252732][ T3635] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 36.286585][ T3639] loop3: detected capacity change from 0 to 512 [ 36.295030][ T3633] netlink: 'syz.2.44': attribute type 4 has an invalid length. [ 36.320509][ T3639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.356570][ T3639] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.523371][ T3647] loop4: detected capacity change from 0 to 764 [ 36.549235][ T3647] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 36.637120][ T3656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3656 comm=syz.4.53 [ 37.198304][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 37.232098][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.364512][ T3677] can: request_module (can-proto-0) failed. [ 37.409342][ T3685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 37.538650][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 37.538670][ T29] audit: type=1400 audit(1759605133.556:548): avc: denied { write } for pid=3693 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.645707][ T3698] program syz.2.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.667735][ T3698] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 37.687186][ T29] audit: type=1400 audit(1759605133.666:549): avc: denied { create } for pid=3695 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 37.706422][ T29] audit: type=1326 audit(1759605133.666:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05928eec9 code=0x7ffc0000 [ 37.720787][ T3698] hub 2-0:1.0: USB hub found [ 37.729733][ T29] audit: type=1326 audit(1759605133.666:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05928eec9 code=0x7ffc0000 [ 37.729771][ T29] audit: type=1326 audit(1759605133.666:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa05928eec9 code=0x7ffc0000 [ 37.755376][ T3698] hub 2-0:1.0: 8 ports detected [ 37.757868][ T29] audit: type=1326 audit(1759605133.666:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05928eec9 code=0x7ffc0000 [ 37.808919][ T29] audit: type=1326 audit(1759605133.666:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa05928eec9 code=0x7ffc0000 [ 37.832233][ T29] audit: type=1326 audit(1759605133.666:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05928eec9 code=0x7ffc0000 [ 37.855389][ T29] audit: type=1326 audit(1759605133.666:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fa05928eec9 code=0x7ffc0000 [ 37.878531][ T29] audit: type=1326 audit(1759605133.666:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.2.65" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05928eec9 code=0x7ffc0000 [ 37.919800][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 37.927300][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.934830][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.942288][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.949739][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.957134][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 37.964559][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.972054][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.979636][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.987041][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.021305][ T3710] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 38.029914][ T3710] netlink: '+}[@': attribute type 30 has an invalid length. [ 38.038488][ T1035] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 38.083029][ T3553] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.099609][ T3553] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.116894][ T3711] fido_id[3711]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.121611][ T3710] Zero length message leads to an empty skb [ 38.146020][ T3553] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.155622][ T3553] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.414214][ T3743] process 'syz.3.80' launched './file1' with NULL argv: empty string added [ 38.554124][ T3748] hub 8-0:1.0: USB hub found [ 38.573840][ T3748] hub 8-0:1.0: 8 ports detected [ 38.594505][ T3733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=3733 comm=syz.2.77 [ 38.612980][ T3751] hub 8-0:1.0: USB hub found [ 38.617676][ T3751] hub 8-0:1.0: 8 ports detected [ 38.719421][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 39.032172][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.88'. [ 39.702140][ T3824] syz.0.111 (3824): attempted to duplicate a private mapping with mremap. This is not supported. [ 39.714769][ T3824] netlink: 44 bytes leftover after parsing attributes in process `syz.0.111'. [ 39.748853][ T3827] netlink: 76 bytes leftover after parsing attributes in process `syz.2.112'. [ 39.817054][ T3841] bond1: entered promiscuous mode [ 39.822181][ T3841] bond1: entered allmulticast mode [ 39.829126][ T3841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.845752][ T3841] bond1 (unregistering): Released all slaves [ 39.939546][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 39.965097][ T3855] vhci_hcd: invalid port number 96 [ 39.970359][ T3855] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 40.065745][ T3869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.083261][ T3872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.098625][ T3869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.106914][ T3872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.516748][ T3883] IPVS: set_ctl: invalid protocol: 172 127.0.0.1:20004 [ 40.535896][ T3883] mmap: syz.1.131 (3883) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.619182][ T3887] loop1: detected capacity change from 0 to 512 [ 40.634514][ T3887] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.656518][ T3887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.669244][ T3887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.677718][ T3887] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.711740][ T3887] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.133: Allocating blocks 41-42 which overlap fs metadata [ 40.738010][ T3887] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.133: Allocating blocks 41-42 which overlap fs metadata [ 40.759060][ T3887] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.133: Failed to acquire dquot type 1 [ 40.780920][ T3887] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 40.831576][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.133: corrupted inode contents [ 40.855761][ T3887] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #12: comm syz.1.133: mark_inode_dirty error [ 40.891766][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.133: corrupted inode contents [ 40.979133][ T3887] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.133: mark_inode_dirty error [ 41.028194][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.133: corrupted inode contents [ 41.043865][ T3904] lo speed is unknown, defaulting to 1000 [ 41.049769][ T3904] lo speed is unknown, defaulting to 1000 [ 41.056012][ T3904] lo speed is unknown, defaulting to 1000 [ 41.058822][ T3887] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 41.062223][ T3904] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.077922][ T3904] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 41.085735][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #12: comm syz.1.133: corrupted inode contents [ 41.088375][ T3904] lo speed is unknown, defaulting to 1000 [ 41.103683][ T3904] lo speed is unknown, defaulting to 1000 [ 41.109939][ T3904] lo speed is unknown, defaulting to 1000 [ 41.114612][ T3887] EXT4-fs error (device loop1): ext4_truncate:4637: inode #12: comm syz.1.133: mark_inode_dirty error [ 41.116136][ T3904] lo speed is unknown, defaulting to 1000 [ 41.133010][ T3904] lo speed is unknown, defaulting to 1000 [ 41.179599][ T3887] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 41.199030][ T3887] EXT4-fs (loop1): 1 truncate cleaned up [ 41.205315][ T3887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.404092][ T3924] ======================================================= [ 41.404092][ T3924] WARNING: The mand mount option has been deprecated and [ 41.404092][ T3924] and is ignored by this kernel. Remove the mand [ 41.404092][ T3924] option from the mount to silence this warning. [ 41.404092][ T3924] ======================================================= [ 41.506143][ T3924] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.517173][ T3887] syz.1.133 (3887) used greatest stack depth: 9952 bytes left [ 41.544946][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.629566][ T3939] bond1: option all_slaves_active: invalid value (7) [ 41.759264][ T3939] bond1 (unregistering): Released all slaves [ 41.802040][ C1] vcan0: j1939_tp_rxtimer: 0xffff888123339800: rx timeout, send abort [ 41.831247][ T3944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 41.851536][ T3944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.149'. [ 41.893893][ T3946] loop1: detected capacity change from 0 to 1024 [ 41.918957][ T3946] EXT4-fs: inline encryption not supported [ 41.924961][ T3946] EXT4-fs: dax option not supported [ 42.147431][ T3956] loop2: detected capacity change from 0 to 128 [ 42.302054][ C1] vcan0: j1939_tp_rxtimer: 0xffff888123339a00: rx timeout, send abort [ 42.310399][ C1] vcan0: j1939_tp_rxtimer: 0xffff888123339800: abort rx timeout. Force session deactivation [ 42.618164][ T29] kauditd_printk_skb: 1251 callbacks suppressed [ 42.618183][ T29] audit: type=1326 audit(1759605138.546:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 42.647685][ T29] audit: type=1326 audit(1759605138.636:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 42.688766][ T31] bio_check_eod: 101 callbacks suppressed [ 42.688782][ T31] kworker/u8:1: attempt to access beyond end of device [ 42.688782][ T31] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 42.708573][ T31] kworker/u8:1: attempt to access beyond end of device [ 42.708573][ T31] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 42.722110][ T31] kworker/u8:1: attempt to access beyond end of device [ 42.722110][ T31] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 42.735968][ T29] audit: type=1326 audit(1759605138.636:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 42.765755][ T31] kworker/u8:1: attempt to access beyond end of device [ 42.765755][ T31] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 42.781738][ T31] kworker/u8:1: attempt to access beyond end of device [ 42.781738][ T31] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 42.787475][ T29] audit: type=1326 audit(1759605138.766:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 42.810312][ C1] vcan0: j1939_tp_rxtimer: 0xffff888123339a00: abort rx timeout. Force session deactivation [ 42.818401][ T29] audit: type=1326 audit(1759605138.766:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 42.837713][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 42.851842][ T29] audit: type=1326 audit(1759605138.766:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 42.878639][ T31] kworker/u8:1: attempt to access beyond end of device [ 42.878639][ T31] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 42.884156][ T29] audit: type=1326 audit(1759605138.766:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 42.898131][ T3976] siw: device registration error -23 [ 42.920640][ T29] audit: type=1326 audit(1759605138.766:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 42.935697][ T3981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.161'. [ 42.949317][ T29] audit: type=1326 audit(1759605138.766:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 42.981575][ T29] audit: type=1326 audit(1759605138.766:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.1.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 42.985103][ T31] kworker/u8:1: attempt to access beyond end of device [ 42.985103][ T31] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 43.018622][ T31] kworker/u8:1: attempt to access beyond end of device [ 43.018622][ T31] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 43.042545][ T31] kworker/u8:1: attempt to access beyond end of device [ 43.042545][ T31] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 43.049570][ T3983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.162'. [ 43.056386][ T31] kworker/u8:1: attempt to access beyond end of device [ 43.056386][ T31] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 43.103990][ T36] IPVS: starting estimator thread 0... [ 43.147845][ T3993] veth0: entered promiscuous mode [ 43.155419][ T3992] veth0: left promiscuous mode [ 43.213180][ T3989] IPVS: using max 2544 ests per chain, 127200 per kthread [ 43.227379][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 43.239761][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 43.347933][ T4016] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.355436][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.445561][ T4016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.460916][ T4016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.544521][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.554233][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.565074][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.575219][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.781496][ T4029] netlink: 'syz.1.178': attribute type 11 has an invalid length. [ 43.859117][ T4031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4031 comm=syz.0.180 [ 43.860802][ T4035] lo speed is unknown, defaulting to 1000 [ 43.923441][ T4031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 44.039880][ T4040] hub 8-0:1.0: USB hub found [ 44.044696][ T4040] hub 8-0:1.0: 8 ports detected [ 44.133795][ T4044] netlink: 104 bytes leftover after parsing attributes in process `syz.0.186'. [ 44.177923][ T4052] loop2: detected capacity change from 0 to 512 [ 44.212193][ T4052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.227645][ T4052] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.326335][ T4071] netlink: 100 bytes leftover after parsing attributes in process `syz.3.196'. [ 44.436952][ T4052] lo speed is unknown, defaulting to 1000 [ 44.701456][ T4084] netem: incorrect gi model size [ 44.706463][ T4084] netem: change failed [ 44.777117][ T4082] lo speed is unknown, defaulting to 1000 [ 44.837694][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.983793][ T4095] FAULT_INJECTION: forcing a failure. [ 44.983793][ T4095] name failslab, interval 1, probability 0, space 0, times 0 [ 44.996707][ T4095] CPU: 1 UID: 0 PID: 4095 Comm: syz.1.205 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.996731][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 44.996808][ T4095] Call Trace: [ 44.996814][ T4095] [ 44.996823][ T4095] __dump_stack+0x1d/0x30 [ 44.996866][ T4095] dump_stack_lvl+0xe8/0x140 [ 44.996908][ T4095] dump_stack+0x15/0x1b [ 44.996954][ T4095] should_fail_ex+0x265/0x280 [ 44.996997][ T4095] should_failslab+0x8c/0xb0 [ 44.997040][ T4095] kmem_cache_alloc_noprof+0x50/0x480 [ 44.997070][ T4095] ? audit_log_start+0x342/0x720 [ 44.997113][ T4095] audit_log_start+0x342/0x720 [ 44.997219][ T4095] audit_seccomp+0x48/0x100 [ 44.997248][ T4095] ? __seccomp_filter+0x82d/0x1250 [ 44.997320][ T4095] __seccomp_filter+0x83e/0x1250 [ 44.997353][ T4095] ? _raw_spin_unlock+0x26/0x50 [ 44.997396][ T4095] __secure_computing+0x82/0x150 [ 44.997490][ T4095] syscall_trace_enter+0xcf/0x1e0 [ 44.997524][ T4095] do_syscall_64+0xac/0x200 [ 44.997549][ T4095] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.997580][ T4095] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.997679][ T4095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.997714][ T4095] RIP: 0033:0x7f7cb601d8dc [ 44.997734][ T4095] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 44.997755][ T4095] RSP: 002b:00007f7cb4a7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.997784][ T4095] RAX: ffffffffffffffda RBX: 00007f7cb6275fa0 RCX: 00007f7cb601d8dc [ 44.997805][ T4095] RDX: 000000000000000f RSI: 00007f7cb4a7f0a0 RDI: 0000000000000007 [ 44.997852][ T4095] RBP: 00007f7cb4a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.997867][ T4095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.997881][ T4095] R13: 00007f7cb6276038 R14: 00007f7cb6275fa0 R15: 00007ffd99250888 [ 44.997905][ T4095] [ 45.309271][ T4108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 45.319659][ T4108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 45.358882][ T4103] infiniband syz1: set down [ 45.363445][ T4103] infiniband syz1: added syz_tun [ 45.388475][ T4103] RDS/IB: syz1: added [ 45.454324][ T4112] hub 8-0:1.0: USB hub found [ 45.462319][ T4116] loop2: detected capacity change from 0 to 512 [ 45.489151][ T4112] hub 8-0:1.0: 8 ports detected [ 45.531204][ T4116] EXT4-fs: Ignoring removed i_version option [ 45.538666][ T4116] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 45.584646][ T4120] netlink: 'syz.4.216': attribute type 15 has an invalid length. [ 45.592490][ T4120] netlink: 'syz.4.216': attribute type 7 has an invalid length. [ 45.610469][ T4122] loop2: detected capacity change from 0 to 128 [ 45.673648][ T4122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 45.689160][ T4122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 45.862636][ T4145] netlink: 'syz.2.226': attribute type 15 has an invalid length. [ 45.870458][ T4145] netlink: 'syz.2.226': attribute type 7 has an invalid length. [ 45.986949][ T4157] loop4: detected capacity change from 0 to 512 [ 45.994455][ T4157] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.007647][ T4157] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 46.020440][ T4157] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.231: bg 0: block 104: invalid block bitmap [ 46.033204][ T4157] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 46.042341][ T4157] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.231: invalid indirect mapped block 1 (level 1) [ 46.055768][ T4157] EXT4-fs (loop4): 1 truncate cleaned up [ 46.061902][ T4157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.089735][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.205300][ T4166] hub 8-0:1.0: USB hub found [ 46.210354][ T4166] hub 8-0:1.0: 8 ports detected [ 46.401410][ T4190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.410313][ T4190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.873778][ T4203] loop2: detected capacity change from 0 to 1024 [ 46.880874][ T4203] EXT4-fs: inline encryption not supported [ 46.886735][ T4203] EXT4-fs: dax option not supported [ 46.963231][ T4208] loop1: detected capacity change from 0 to 1024 [ 46.979162][ T4208] EXT4-fs: Ignoring removed nobh option [ 46.984980][ T4208] EXT4-fs: Ignoring removed bh option [ 47.009690][ T4208] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 47.041736][ T4218] loop2: detected capacity change from 0 to 512 [ 47.052658][ T4218] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.059409][ T4218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.067048][ T4218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.075610][ T4218] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.086404][ T4208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.103760][ T4208] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.248: Allocating blocks 385-513 which overlap fs metadata [ 47.119784][ T4207] EXT4-fs (loop1): pa ffff888100626070: logic 16, phys. 129, len 24 [ 47.127841][ T4207] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 47.149300][ T4218] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.250: Allocating blocks 41-42 which overlap fs metadata [ 47.174649][ T4218] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.250: Allocating blocks 41-42 which overlap fs metadata [ 47.201364][ T4218] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.250: Failed to acquire dquot type 1 [ 47.232109][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.249364][ T4218] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 47.303995][ T4218] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.250: corrupted inode contents [ 47.436938][ T4218] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #12: comm syz.2.250: mark_inode_dirty error [ 47.478834][ T4218] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.250: corrupted inode contents [ 47.494669][ T4218] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.250: mark_inode_dirty error [ 47.531828][ T4218] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.250: corrupted inode contents [ 47.561752][ T4218] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 47.588834][ T4218] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #12: comm syz.2.250: corrupted inode contents [ 47.624265][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 47.624297][ T29] audit: type=1326 audit(1759605143.646:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 47.654028][ T29] audit: type=1326 audit(1759605143.646:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 47.669070][ T4218] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.250: mark_inode_dirty error [ 47.677743][ T29] audit: type=1326 audit(1759605143.646:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 47.712135][ T29] audit: type=1326 audit(1759605143.646:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 47.735414][ T29] audit: type=1326 audit(1759605143.646:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 47.758763][ T29] audit: type=1326 audit(1759605143.646:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 47.782604][ T29] audit: type=1326 audit(1759605143.646:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 47.799591][ T4238] siw: device registration error -23 [ 47.806118][ T29] audit: type=1326 audit(1759605143.646:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 47.834591][ T29] audit: type=1326 audit(1759605143.646:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 47.840424][ T4218] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 47.858001][ T29] audit: type=1326 audit(1759605143.646:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cb601eec9 code=0x7ffc0000 [ 47.947004][ T4218] EXT4-fs (loop2): 1 truncate cleaned up [ 47.960134][ T4218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.085390][ T4218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.121039][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.230352][ T4258] pim6reg1: entered promiscuous mode [ 48.235734][ T4258] pim6reg1: entered allmulticast mode [ 48.443684][ T4272] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 48.450264][ T4272] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.457787][ T4272] vhci_hcd vhci_hcd.0: Device attached [ 48.467413][ T4267] ipip0: entered promiscuous mode [ 48.476723][ T4276] usbip_core: unknown command [ 48.481480][ T4276] vhci_hcd: unknown pdu 2844066640 [ 48.486687][ T4276] usbip_core: unknown command [ 48.492263][ T12] vhci_hcd: stop threads [ 48.496548][ T12] vhci_hcd: release socket [ 48.501019][ T12] vhci_hcd: disconnect device [ 48.501719][ T4272] FAULT_INJECTION: forcing a failure. [ 48.501719][ T4272] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.518951][ T4272] CPU: 0 UID: 0 PID: 4272 Comm: syz.4.271 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.518978][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 48.518990][ T4272] Call Trace: [ 48.518997][ T4272] [ 48.519011][ T4272] __dump_stack+0x1d/0x30 [ 48.519055][ T4272] dump_stack_lvl+0xe8/0x140 [ 48.519095][ T4272] dump_stack+0x15/0x1b [ 48.519136][ T4272] should_fail_ex+0x265/0x280 [ 48.519180][ T4272] should_fail+0xb/0x20 [ 48.519212][ T4272] should_fail_usercopy+0x1a/0x20 [ 48.519232][ T4272] _copy_from_user+0x1c/0xb0 [ 48.519281][ T4272] sock_do_ioctl+0xe6/0x220 [ 48.519358][ T4272] sock_ioctl+0x41b/0x610 [ 48.519460][ T4272] ? __pfx_sock_ioctl+0x10/0x10 [ 48.519489][ T4272] __se_sys_ioctl+0xcb/0x140 [ 48.519515][ T4272] __x64_sys_ioctl+0x43/0x50 [ 48.519567][ T4272] x64_sys_call+0x1816/0x3000 [ 48.519590][ T4272] do_syscall_64+0xd2/0x200 [ 48.519704][ T4272] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.519757][ T4272] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.519845][ T4272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.519920][ T4272] RIP: 0033:0x7f1e2f88eec9 [ 48.519946][ T4272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.519969][ T4272] RSP: 002b:00007f1e2e2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.520011][ T4272] RAX: ffffffffffffffda RBX: 00007f1e2fae5fa0 RCX: 00007f1e2f88eec9 [ 48.520028][ T4272] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000010 [ 48.520044][ T4272] RBP: 00007f1e2e2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.520089][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.520104][ T4272] R13: 00007f1e2fae6038 R14: 00007f1e2fae5fa0 R15: 00007ffd3af01038 [ 48.520130][ T4272] [ 48.522928][ T4272] __nla_validate_parse: 2 callbacks suppressed [ 48.522944][ T4272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.271'. [ 48.575666][ T4281] loop1: detected capacity change from 0 to 1024 [ 48.730904][ T4281] EXT4-fs: inline encryption not supported [ 48.736895][ T4281] EXT4-fs: dax option not supported [ 48.861454][ T4292] netlink: 44 bytes leftover after parsing attributes in process `syz.1.276'. [ 48.964816][ T4294] rdma_rxe: rxe_newlink: failed to add syz_tun [ 49.080417][ T4300] netlink: 'syz.0.280': attribute type 3 has an invalid length. [ 49.537666][ T4320] FAULT_INJECTION: forcing a failure. [ 49.537666][ T4320] name failslab, interval 1, probability 0, space 0, times 0 [ 49.550602][ T4320] CPU: 0 UID: 0 PID: 4320 Comm: syz.1.286 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.550637][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 49.550660][ T4320] Call Trace: [ 49.550668][ T4320] [ 49.550675][ T4320] __dump_stack+0x1d/0x30 [ 49.550768][ T4320] dump_stack_lvl+0xe8/0x140 [ 49.550861][ T4320] dump_stack+0x15/0x1b [ 49.550902][ T4320] should_fail_ex+0x265/0x280 [ 49.551009][ T4320] should_failslab+0x8c/0xb0 [ 49.551101][ T4320] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 49.551130][ T4320] ? __alloc_skb+0x101/0x320 [ 49.551243][ T4320] ? _raw_spin_unlock_bh+0x36/0x40 [ 49.551301][ T4320] __alloc_skb+0x101/0x320 [ 49.551342][ T4320] qdisc_notify+0xcb/0x280 [ 49.551429][ T4320] qdisc_graft+0xafb/0xcc0 [ 49.551462][ T4320] tc_modify_qdisc+0xf84/0x1420 [ 49.551548][ T4320] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 49.551573][ T4320] rtnetlink_rcv_msg+0x657/0x6d0 [ 49.551602][ T4320] netlink_rcv_skb+0x123/0x220 [ 49.551645][ T4320] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.551742][ T4320] rtnetlink_rcv+0x1c/0x30 [ 49.551764][ T4320] netlink_unicast+0x5c0/0x690 [ 49.551878][ T4320] netlink_sendmsg+0x58b/0x6b0 [ 49.551904][ T4320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.551930][ T4320] __sock_sendmsg+0x145/0x180 [ 49.551964][ T4320] ____sys_sendmsg+0x345/0x4e0 [ 49.552037][ T4320] ___sys_sendmsg+0x17b/0x1d0 [ 49.552071][ T4320] __sys_sendmmsg+0x178/0x300 [ 49.552103][ T4320] __x64_sys_sendmmsg+0x57/0x70 [ 49.552123][ T4320] x64_sys_call+0x1c4a/0x3000 [ 49.552142][ T4320] do_syscall_64+0xd2/0x200 [ 49.552216][ T4320] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.552251][ T4320] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 49.552284][ T4320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.552305][ T4320] RIP: 0033:0x7f7cb601eec9 [ 49.552366][ T4320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.552446][ T4320] RSP: 002b:00007f7cb4a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 49.552468][ T4320] RAX: ffffffffffffffda RBX: 00007f7cb6275fa0 RCX: 00007f7cb601eec9 [ 49.552480][ T4320] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 49.552492][ T4320] RBP: 00007f7cb4a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.552508][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.552524][ T4320] R13: 00007f7cb6276038 R14: 00007f7cb6275fa0 R15: 00007ffd99250888 [ 49.552549][ T4320] [ 50.096128][ T4335] loop1: detected capacity change from 0 to 512 [ 50.108556][ T4335] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.125791][ T4335] EXT4-fs (loop1): 1 truncate cleaned up [ 50.133628][ T4335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.148135][ T4335] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.293: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 50.178620][ T4335] EXT4-fs (loop1): Remounting filesystem read-only [ 50.185300][ T4335] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.293: Deleting old file: nlink 5, error=-117 [ 50.220830][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.487287][ T4396] loop1: detected capacity change from 0 to 512 [ 51.646770][ T4396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.678692][ T4396] ext4 filesystem being mounted at /76/percpu_free_percpu supports timestamps until 2038-01-19 (0x7fffffff) [ 51.759478][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.860557][ T4428] loop1: detected capacity change from 0 to 1024 [ 51.867363][ T4428] EXT4-fs: inline encryption not supported [ 51.873279][ T4428] EXT4-fs: dax option not supported [ 51.879950][ T4423] FAULT_INJECTION: forcing a failure. [ 51.879950][ T4423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.893046][ T4423] CPU: 1 UID: 0 PID: 4423 Comm: syz.4.328 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.893076][ T4423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 51.893088][ T4423] Call Trace: [ 51.893095][ T4423] [ 51.893103][ T4423] __dump_stack+0x1d/0x30 [ 51.893174][ T4423] dump_stack_lvl+0xe8/0x140 [ 51.893262][ T4423] dump_stack+0x15/0x1b [ 51.893297][ T4423] should_fail_ex+0x265/0x280 [ 51.893342][ T4423] should_fail+0xb/0x20 [ 51.893425][ T4423] should_fail_usercopy+0x1a/0x20 [ 51.893453][ T4423] _copy_to_user+0x20/0xa0 [ 51.893487][ T4423] simple_read_from_buffer+0xb5/0x130 [ 51.893516][ T4423] proc_fail_nth_read+0x10e/0x150 [ 51.893549][ T4423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 51.893657][ T4423] vfs_read+0x1a8/0x770 [ 51.893686][ T4423] ? __rcu_read_unlock+0x4f/0x70 [ 51.893719][ T4423] ? __fget_files+0x184/0x1c0 [ 51.893757][ T4423] ksys_read+0xda/0x1a0 [ 51.893789][ T4423] __x64_sys_read+0x40/0x50 [ 51.893838][ T4423] x64_sys_call+0x27c0/0x3000 [ 51.893866][ T4423] do_syscall_64+0xd2/0x200 [ 51.893911][ T4423] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.893944][ T4423] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 51.893991][ T4423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.894018][ T4423] RIP: 0033:0x7f1e2f88d8dc [ 51.894036][ T4423] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 51.894106][ T4423] RSP: 002b:00007f1e2e2f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.894131][ T4423] RAX: ffffffffffffffda RBX: 00007f1e2fae5fa0 RCX: 00007f1e2f88d8dc [ 51.894148][ T4423] RDX: 000000000000000f RSI: 00007f1e2e2f70a0 RDI: 0000000000000003 [ 51.894163][ T4423] RBP: 00007f1e2e2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.894179][ T4423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.894241][ T4423] R13: 00007f1e2fae6038 R14: 00007f1e2fae5fa0 R15: 00007ffd3af01038 [ 51.894265][ T4423] [ 52.168263][ T4432] vlan2: entered promiscuous mode [ 52.173666][ T4432] vlan2: entered allmulticast mode [ 52.178914][ T4432] hsr_slave_1: entered allmulticast mode [ 52.188279][ T4438] hub 8-0:1.0: USB hub found [ 52.193116][ T4438] hub 8-0:1.0: 8 ports detected [ 52.205095][ T4442] macsec1: entered promiscuous mode [ 52.210495][ T4442] bridge0: entered promiscuous mode [ 52.216000][ T4442] bridge0: port 3(macsec1) entered blocking state [ 52.222528][ T4442] bridge0: port 3(macsec1) entered disabled state [ 52.229273][ T4442] macsec1: entered allmulticast mode [ 52.234575][ T4442] bridge0: entered allmulticast mode [ 52.240461][ T4442] macsec1: left allmulticast mode [ 52.245497][ T4442] bridge0: left allmulticast mode [ 52.251057][ T4442] bridge0: left promiscuous mode [ 52.262649][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 52.374711][ T4458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.340'. [ 52.449313][ T4467] bridge0: entered promiscuous mode [ 52.455381][ T4467] vlan2: entered promiscuous mode [ 52.648165][ T4502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 52.701189][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 52.701205][ T29] audit: type=1400 audit(1759605148.726:3032): avc: denied { cmd } for pid=4511 comm="syz.0.365" path="socket:[8372]" dev="sockfs" ino=8372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.758030][ T4519] loop1: detected capacity change from 0 to 128 [ 52.819520][ T4523] siw: device registration error -23 [ 52.982781][ T31] bio_check_eod: 101 callbacks suppressed [ 52.982866][ T31] kworker/u8:1: attempt to access beyond end of device [ 52.982866][ T31] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 53.014158][ T4538] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.375'. [ 53.014835][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.014835][ T31] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 53.028690][ T4538] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 53.037106][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.037106][ T31] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 53.062894][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.062894][ T31] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 53.077100][ T29] audit: type=1400 audit(1759605149.086:3033): avc: denied { create } for pid=4544 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.098010][ T29] audit: type=1400 audit(1759605149.106:3034): avc: denied { sys_admin } for pid=4544 comm="syz.4.380" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 53.120222][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.120222][ T31] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 53.134124][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.134124][ T31] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 53.136247][ T4547] lo speed is unknown, defaulting to 1000 [ 53.147718][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.147718][ T31] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 53.172102][ T29] audit: type=1400 audit(1759605149.196:3035): avc: denied { remount } for pid=4544 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.198013][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.198013][ T31] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 53.212257][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.212257][ T31] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 53.226213][ T31] kworker/u8:1: attempt to access beyond end of device [ 53.226213][ T31] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 53.338642][ T29] audit: type=1400 audit(1759605149.316:3036): avc: denied { map } for pid=4552 comm="syz.3.382" path="socket:[8465]" dev="sockfs" ino=8465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 53.437372][ T4562] IPv6: sit1: Disabled Multicast RS [ 53.457174][ T29] audit: type=1326 audit(1759605149.436:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f88eec9 code=0x7ffc0000 [ 53.480658][ T29] audit: type=1326 audit(1759605149.436:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f1e2f88eec9 code=0x7ffc0000 [ 53.503989][ T29] audit: type=1326 audit(1759605149.436:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2f88eec9 code=0x7ffc0000 [ 53.527418][ T29] audit: type=1326 audit(1759605149.436:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e2f88d710 code=0x7ffc0000 [ 53.550871][ T29] audit: type=1326 audit(1759605149.436:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1e2f8906f7 code=0x7ffc0000 [ 53.680855][ T4576] loop4: detected capacity change from 0 to 128 [ 53.696578][ T4574] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.703958][ T4574] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.757717][ T4574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.769783][ T4574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.844971][ T1667] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.854388][ T1667] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.890928][ T1667] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.921423][ T1667] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.954100][ T4598] netlink: 7 bytes leftover after parsing attributes in process `syz.1.394'. [ 53.965889][ T4598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.394'. [ 53.974862][ T4598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.394'. [ 54.052583][ T4598] netlink: 7 bytes leftover after parsing attributes in process `syz.1.394'. [ 54.075831][ T4598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.394'. [ 54.084962][ T4598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.394'. [ 54.134790][ T4598] netlink: 7 bytes leftover after parsing attributes in process `syz.1.394'. [ 54.178670][ T4598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.394'. [ 54.187607][ T4598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.394'. [ 54.196247][ T4618] loop4: detected capacity change from 0 to 128 [ 54.251438][ T4624] loop1: detected capacity change from 0 to 128 [ 54.278716][ T4620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 55.231369][ T4684] netlink: 'syz.3.425': attribute type 12 has an invalid length. [ 55.253202][ T4683] vhci_hcd: invalid port number 96 [ 55.258454][ T4683] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 55.366878][ T4694] netlink: 'syz.2.426': attribute type 6 has an invalid length. [ 55.402818][ T4694] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.403960][ T4697] loop1: detected capacity change from 0 to 128 [ 55.413214][ T4694] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.533812][ T4694] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.544285][ T4694] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.686284][ T4694] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.696781][ T4694] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.772034][ T4694] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.782458][ T4694] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.842324][ T3553] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.850700][ T3553] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.874454][ T3553] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.882726][ T3553] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.891509][ T3553] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.899920][ T3553] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.919355][ T3553] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.927601][ T3553] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.284093][ T4771] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.303806][ T4771] wireguard0: entered promiscuous mode [ 56.309365][ T4771] wireguard0: entered allmulticast mode [ 56.574625][ T4798] netlink: 'syz.0.461': attribute type 13 has an invalid length. [ 56.582587][ T4798] netlink: 'syz.0.461': attribute type 17 has an invalid length. [ 56.629692][ T4798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.638336][ T4798] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.658120][ T4798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.674328][ T1035] syz1: Port: 1 Link ACTIVE [ 56.780515][ T4808] bridge0: entered promiscuous mode [ 56.787226][ T4808] macsec1: entered promiscuous mode [ 56.795723][ T4808] bridge0: port 3(macsec1) entered blocking state [ 56.806845][ T4808] bridge0: port 3(macsec1) entered disabled state [ 56.816047][ T4808] macsec1: entered allmulticast mode [ 56.822187][ T4808] bridge0: entered allmulticast mode [ 56.835121][ T4808] macsec1: left allmulticast mode [ 56.840742][ T4808] bridge0: left allmulticast mode [ 56.858225][ T4808] bridge0: left promiscuous mode [ 56.895696][ T4818] netlink: 'syz.4.474': attribute type 12 has an invalid length. [ 57.098010][ T4831] lo speed is unknown, defaulting to 1000 [ 57.100327][ T4836] can0: slcan on ttyS3. [ 57.192066][ T4836] can0 (unregistered): slcan off ttyS3. [ 57.198042][ T4845] loop4: detected capacity change from 0 to 1024 [ 57.447176][ T4845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.662744][ T4831] bond1: entered promiscuous mode [ 57.676261][ T4831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.763696][ T4900] loop1: detected capacity change from 0 to 512 [ 57.899728][ T4900] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 57.925396][ T4900] System zones: 0-2, 18-18, 34-34 [ 57.941378][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.958681][ T4900] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 57.977429][ T4900] EXT4-fs (loop1): Remounting filesystem read-only [ 57.983236][ T29] kauditd_printk_skb: 1147 callbacks suppressed [ 57.983255][ T29] audit: type=1326 audit(1759605154.006:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a80ffeec9 code=0x7ffc0000 [ 58.023005][ T4900] EXT4-fs (loop1): 1 truncate cleaned up [ 58.031308][ T4900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.044077][ T3556] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 58.057363][ T4900] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.062894][ T29] audit: type=1326 audit(1759605154.016:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1a80ffeec9 code=0x7ffc0000 [ 58.068042][ T3556] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.091228][ T29] audit: type=1326 audit(1759605154.016:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a80ffeec9 code=0x7ffc0000 [ 58.101771][ T3556] Quota error (device loop1): write_blk: dquota write failed [ 58.101789][ T3556] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 58.125073][ T29] audit: type=1326 audit(1759605154.016:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a80ffeec9 code=0x7ffc0000 [ 58.132448][ T3556] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 58.142433][ T29] audit: type=1326 audit(1759605154.016:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a80ffeec9 code=0x7ffc0000 [ 58.165759][ T3556] Quota error (device loop1): write_blk: dquota write failed [ 58.176229][ T29] audit: type=1326 audit(1759605154.016:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4945 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a80ffeec9 code=0x7ffc0000 [ 58.235087][ T3556] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 58.330295][ T4950] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.337606][ T4950] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.481559][ T4950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.494875][ T4950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.561607][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.612257][ T4953] netlink: 'syz.4.488': attribute type 12 has an invalid length. [ 58.630597][ T3556] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.656444][ T4972] loop1: detected capacity change from 0 to 1024 [ 58.678887][ T3556] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.695134][ T3556] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.728176][ T3556] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.741678][ T4972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.870090][ T4972] macsec1: entered promiscuous mode [ 58.878826][ T4988] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.494: Allocating blocks 449-513 which overlap fs metadata [ 58.899463][ T4972] bridge0: port 3(macsec1) entered blocking state [ 58.906481][ T4972] bridge0: port 3(macsec1) entered disabled state [ 58.919434][ T4972] macsec1: entered allmulticast mode [ 58.925375][ T4972] bridge0: entered allmulticast mode [ 59.042840][ T4992] __nla_validate_parse: 11 callbacks suppressed [ 59.042861][ T4992] netlink: 44 bytes leftover after parsing attributes in process `syz.0.500'. [ 59.063265][ T4972] macsec1: left allmulticast mode [ 59.068871][ T4972] bridge0: left allmulticast mode [ 59.135712][ T4971] EXT4-fs (loop1): pa ffff888100626000: logic 48, phys. 177, len 21 [ 59.143826][ T4971] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 59.198112][ T4993] lo speed is unknown, defaulting to 1000 [ 59.204414][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.344755][ T5019] ipvlan2: entered promiscuous mode [ 59.351042][ T5019] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 59.359833][ T5019] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 59.378315][ T5021] FAULT_INJECTION: forcing a failure. [ 59.378315][ T5021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.391559][ T5021] CPU: 0 UID: 0 PID: 5021 Comm: syz.1.513 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.391617][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.391634][ T5021] Call Trace: [ 59.391642][ T5021] [ 59.391652][ T5021] __dump_stack+0x1d/0x30 [ 59.391791][ T5021] dump_stack_lvl+0xe8/0x140 [ 59.391871][ T5021] dump_stack+0x15/0x1b [ 59.391969][ T5021] should_fail_ex+0x265/0x280 [ 59.392030][ T5021] should_fail+0xb/0x20 [ 59.392079][ T5021] should_fail_usercopy+0x1a/0x20 [ 59.392175][ T5021] _copy_from_iter+0xd2/0xe80 [ 59.392205][ T5021] ? __build_skb_around+0x1ab/0x200 [ 59.392257][ T5021] ? __alloc_skb+0x223/0x320 [ 59.392301][ T5021] netlink_sendmsg+0x471/0x6b0 [ 59.392362][ T5021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.392388][ T5021] __sock_sendmsg+0x145/0x180 [ 59.392422][ T5021] ____sys_sendmsg+0x31e/0x4e0 [ 59.392452][ T5021] ___sys_sendmsg+0x17b/0x1d0 [ 59.392502][ T5021] __x64_sys_sendmsg+0xd4/0x160 [ 59.392533][ T5021] x64_sys_call+0x191e/0x3000 [ 59.392560][ T5021] do_syscall_64+0xd2/0x200 [ 59.392605][ T5021] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.392639][ T5021] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.392673][ T5021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.392702][ T5021] RIP: 0033:0x7f7cb601eec9 [ 59.392722][ T5021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.392746][ T5021] RSP: 002b:00007f7cb4a7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.392828][ T5021] RAX: ffffffffffffffda RBX: 00007f7cb6275fa0 RCX: 00007f7cb601eec9 [ 59.392850][ T5021] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 59.392867][ T5021] RBP: 00007f7cb4a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.392883][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.392899][ T5021] R13: 00007f7cb6276038 R14: 00007f7cb6275fa0 R15: 00007ffd99250888 [ 59.392926][ T5021] [ 59.888008][ T5029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.996268][ T5058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.527'. [ 60.038393][ T5058] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 60.040533][ T1667] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.046227][ T5058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.527'. [ 60.085567][ T5058] veth1_vlan: left promiscuous mode [ 60.104456][ T5058] batman_adv: batadv0: Adding interface: veth1_vlan [ 60.111397][ T5058] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.131603][ T5063] loop1: detected capacity change from 0 to 128 [ 60.169262][ T5058] batman_adv: batadv0: Interface activated: veth1_vlan [ 60.180251][ T5067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 60.219413][ T1667] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.239811][ T1667] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.290806][ T1667] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.344045][ T5079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=5079 comm=syz.0.536 [ 60.360804][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.536'. [ 60.423075][ T5088] netlink: 'syz.0.540': attribute type 12 has an invalid length. [ 60.452826][ T5090] syz_tun: entered allmulticast mode [ 60.458427][ T5090] syz_tun: left allmulticast mode [ 60.472060][ T5090] netlink: 56 bytes leftover after parsing attributes in process `syz.0.541'. [ 60.554450][ T5095] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 60.564119][ T5095] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 60.769510][ T5110] netlink: 44 bytes leftover after parsing attributes in process `syz.0.549'. [ 60.851052][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 60.969737][ T3556] bio_check_eod: 323 callbacks suppressed [ 60.969755][ T3556] kworker/u8:15: attempt to access beyond end of device [ 60.969755][ T3556] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 60.990168][ T3556] kworker/u8:15: attempt to access beyond end of device [ 60.990168][ T3556] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 61.021692][ T5128] macsec1: entered promiscuous mode [ 61.027453][ T5128] bridge0: entered promiscuous mode [ 61.043028][ T3556] kworker/u8:15: attempt to access beyond end of device [ 61.043028][ T3556] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 61.077838][ T5128] bridge0: port 3(macsec1) entered blocking state [ 61.080003][ T3556] kworker/u8:15: attempt to access beyond end of device [ 61.080003][ T3556] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 61.086511][ T5128] bridge0: port 3(macsec1) entered disabled state [ 61.113466][ T5128] macsec1: entered allmulticast mode [ 61.119646][ T5128] bridge0: entered allmulticast mode [ 61.137219][ T3556] kworker/u8:15: attempt to access beyond end of device [ 61.137219][ T3556] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 61.157836][ T5128] macsec1: left allmulticast mode [ 61.165647][ T5128] bridge0: left allmulticast mode [ 61.175839][ T3556] kworker/u8:15: attempt to access beyond end of device [ 61.175839][ T3556] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 61.191343][ T5128] bridge0: left promiscuous mode [ 61.198726][ T3556] kworker/u8:15: attempt to access beyond end of device [ 61.198726][ T3556] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 61.212229][ T3556] kworker/u8:15: attempt to access beyond end of device [ 61.212229][ T3556] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 61.242046][ T3556] kworker/u8:15: attempt to access beyond end of device [ 61.242046][ T3556] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 61.265875][ T3556] kworker/u8:15: attempt to access beyond end of device [ 61.265875][ T3556] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 61.309790][ T5140] netlink: 'syz.2.559': attribute type 12 has an invalid length. [ 61.601530][ T5187] lo speed is unknown, defaulting to 1000 [ 61.700305][ T5205] syz.3.568 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.724758][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 61.919661][ T5243] netlink: 'syz.4.573': attribute type 12 has an invalid length. [ 61.947408][ T5247] veth0_to_team: entered promiscuous mode [ 61.972591][ T5250] loop4: detected capacity change from 0 to 1024 [ 61.978075][ T5247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5247 comm=syz.3.575 [ 61.984791][ T5250] EXT4-fs: inline encryption not supported [ 61.997644][ T5250] EXT4-fs: dax option not supported [ 62.168299][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 62.513214][ T5300] FAULT_INJECTION: forcing a failure. [ 62.513214][ T5300] name failslab, interval 1, probability 0, space 0, times 0 [ 62.525943][ T5300] CPU: 1 UID: 0 PID: 5300 Comm: syz.1.594 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.525967][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.525979][ T5300] Call Trace: [ 62.525985][ T5300] [ 62.525993][ T5300] __dump_stack+0x1d/0x30 [ 62.526099][ T5300] dump_stack_lvl+0xe8/0x140 [ 62.526130][ T5300] dump_stack+0x15/0x1b [ 62.526166][ T5300] should_fail_ex+0x265/0x280 [ 62.526252][ T5300] should_failslab+0x8c/0xb0 [ 62.526335][ T5300] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 62.526504][ T5300] ? v9fs_session_init+0x4b/0xde0 [ 62.526538][ T5300] kstrdup+0x3e/0xd0 [ 62.526563][ T5300] v9fs_session_init+0x4b/0xde0 [ 62.526654][ T5300] ? __rcu_read_unlock+0x4f/0x70 [ 62.526681][ T5300] ? avc_has_perm_noaudit+0x1b1/0x200 [ 62.526724][ T5300] ? should_fail_ex+0xdb/0x280 [ 62.526754][ T5300] ? v9fs_mount+0x51/0x5c0 [ 62.526770][ T5300] ? should_failslab+0x8c/0xb0 [ 62.526844][ T5300] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 62.526912][ T5300] v9fs_mount+0x67/0x5c0 [ 62.526934][ T5300] ? selinux_capable+0x31/0x40 [ 62.526957][ T5300] ? __pfx_v9fs_mount+0x10/0x10 [ 62.526980][ T5300] legacy_get_tree+0x78/0xd0 [ 62.527047][ T5300] vfs_get_tree+0x57/0x1d0 [ 62.527069][ T5300] do_new_mount+0x24d/0x660 [ 62.527093][ T5300] ? security_capable+0x83/0x90 [ 62.527131][ T5300] path_mount+0x4a5/0xb70 [ 62.527187][ T5300] ? user_path_at+0x109/0x130 [ 62.527224][ T5300] __se_sys_mount+0x28c/0x2e0 [ 62.527253][ T5300] ? fput+0x8f/0xc0 [ 62.527296][ T5300] __x64_sys_mount+0x67/0x80 [ 62.527324][ T5300] x64_sys_call+0x2b51/0x3000 [ 62.527348][ T5300] do_syscall_64+0xd2/0x200 [ 62.527376][ T5300] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.527465][ T5300] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.527558][ T5300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.527584][ T5300] RIP: 0033:0x7f7cb601eec9 [ 62.527640][ T5300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.527661][ T5300] RSP: 002b:00007f7cb4a7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 62.527738][ T5300] RAX: ffffffffffffffda RBX: 00007f7cb6275fa0 RCX: 00007f7cb601eec9 [ 62.527752][ T5300] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 62.527833][ T5300] RBP: 00007f7cb4a7f090 R08: 0000200000000080 R09: 0000000000000000 [ 62.527848][ T5300] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000002 [ 62.527868][ T5300] R13: 00007f7cb6276038 R14: 00007f7cb6275fa0 R15: 00007ffd99250888 [ 62.527909][ T5300] [ 62.849150][ T5307] SELinux: policydb version 0 does not match my version range 15-35 [ 62.876437][ T5307] SELinux: failed to load policy [ 62.986328][ T29] kauditd_printk_skb: 1365 callbacks suppressed [ 62.986344][ T29] audit: type=1400 audit(1759605159.006:5556): avc: denied { prog_load } for pid=5322 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.013140][ T29] audit: type=1400 audit(1759605159.006:5557): avc: denied { bpf } for pid=5322 comm="syz.2.605" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.033658][ T29] audit: type=1400 audit(1759605159.026:5558): avc: denied { create } for pid=5328 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.099577][ T29] audit: type=1400 audit(1759605159.066:5559): avc: denied { create } for pid=5333 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.120252][ T29] audit: type=1400 audit(1759605159.086:5560): avc: denied { write } for pid=5333 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.132922][ T5335] hub 8-0:1.0: USB hub found [ 63.140812][ T29] audit: type=1400 audit(1759605159.086:5561): avc: denied { map_create } for pid=5332 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.164131][ T5335] hub 8-0:1.0: 8 ports detected [ 63.164445][ T29] audit: type=1400 audit(1759605159.086:5562): avc: denied { map_read map_write } for pid=5332 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.189043][ T29] audit: type=1400 audit(1759605159.106:5563): avc: denied { write } for pid=5332 comm="syz.4.609" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.211833][ T29] audit: type=1400 audit(1759605159.116:5564): avc: denied { perfmon } for pid=5338 comm="syz.1.612" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.232761][ T29] audit: type=1400 audit(1759605159.116:5565): avc: denied { create } for pid=5338 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.316514][ T5357] netlink: 'syz.3.619': attribute type 1 has an invalid length. [ 63.547916][ T5371] siw: device registration error -23 [ 64.205775][ T5406] loop1: detected capacity change from 0 to 1024 [ 64.227150][ T5406] EXT4-fs: Ignoring removed i_version option [ 64.233273][ T5406] ext4: Unknown parameter 'noacl' [ 64.303096][ T5416] FAULT_INJECTION: forcing a failure. [ 64.303096][ T5416] name failslab, interval 1, probability 0, space 0, times 0 [ 64.315895][ T5416] CPU: 1 UID: 0 PID: 5416 Comm: syz.1.641 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.315926][ T5416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.315939][ T5416] Call Trace: [ 64.315945][ T5416] [ 64.315952][ T5416] __dump_stack+0x1d/0x30 [ 64.316049][ T5416] dump_stack_lvl+0xe8/0x140 [ 64.316091][ T5416] dump_stack+0x15/0x1b [ 64.316179][ T5416] should_fail_ex+0x265/0x280 [ 64.316250][ T5416] should_failslab+0x8c/0xb0 [ 64.316279][ T5416] kmem_cache_alloc_noprof+0x50/0x480 [ 64.316310][ T5416] ? audit_log_start+0x342/0x720 [ 64.316461][ T5416] audit_log_start+0x342/0x720 [ 64.316497][ T5416] ? kstrtouint+0x76/0xc0 [ 64.316600][ T5416] audit_seccomp+0x48/0x100 [ 64.316639][ T5416] ? __seccomp_filter+0x82d/0x1250 [ 64.316729][ T5416] __seccomp_filter+0x83e/0x1250 [ 64.316804][ T5416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.316845][ T5416] ? vfs_write+0x7e8/0x960 [ 64.316874][ T5416] ? __rcu_read_unlock+0x4f/0x70 [ 64.316903][ T5416] ? __fget_files+0x184/0x1c0 [ 64.316943][ T5416] __secure_computing+0x82/0x150 [ 64.317043][ T5416] syscall_trace_enter+0xcf/0x1e0 [ 64.317078][ T5416] do_syscall_64+0xac/0x200 [ 64.317113][ T5416] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.317227][ T5416] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.317259][ T5416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.317287][ T5416] RIP: 0033:0x7f7cb601eec9 [ 64.317306][ T5416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.317344][ T5416] RSP: 002b:00007f7cb4a7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.317368][ T5416] RAX: ffffffffffffffda RBX: 00007f7cb6275fa0 RCX: 00007f7cb601eec9 [ 64.317385][ T5416] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffffffffffffffff [ 64.317402][ T5416] RBP: 00007f7cb4a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.317446][ T5416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.317462][ T5416] R13: 00007f7cb6276038 R14: 00007f7cb6275fa0 R15: 00007ffd99250888 [ 64.317487][ T5416] [ 64.633900][ T5433] FAULT_INJECTION: forcing a failure. [ 64.633900][ T5433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.647064][ T5433] CPU: 0 UID: 0 PID: 5433 Comm: syz.1.648 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.647113][ T5433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.647130][ T5433] Call Trace: [ 64.647139][ T5433] [ 64.647158][ T5433] __dump_stack+0x1d/0x30 [ 64.647204][ T5433] dump_stack_lvl+0xe8/0x140 [ 64.647245][ T5433] dump_stack+0x15/0x1b [ 64.647277][ T5433] should_fail_ex+0x265/0x280 [ 64.647385][ T5433] should_fail+0xb/0x20 [ 64.647425][ T5433] should_fail_usercopy+0x1a/0x20 [ 64.647471][ T5433] strncpy_from_user+0x25/0x230 [ 64.647508][ T5433] ? __fget_files+0x184/0x1c0 [ 64.647543][ T5433] __se_sys_add_key+0x86/0x350 [ 64.647585][ T5433] __x64_sys_add_key+0x67/0x80 [ 64.647640][ T5433] x64_sys_call+0x28c8/0x3000 [ 64.647679][ T5433] do_syscall_64+0xd2/0x200 [ 64.647710][ T5433] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.647747][ T5433] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.647771][ T5433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.647799][ T5433] RIP: 0033:0x7f7cb601eec9 [ 64.647813][ T5433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.647835][ T5433] RSP: 002b:00007f7cb4a7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 64.647859][ T5433] RAX: ffffffffffffffda RBX: 00007f7cb6275fa0 RCX: 00007f7cb601eec9 [ 64.647876][ T5433] RDX: 0000000002000000 RSI: 0000200000000980 RDI: 0000200000000000 [ 64.647934][ T5433] RBP: 00007f7cb4a7f090 R08: ffffffffffffffff R09: 0000000000000000 [ 64.647946][ T5433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.647959][ T5433] R13: 00007f7cb6276038 R14: 00007f7cb6275fa0 R15: 00007ffd99250888 [ 64.647984][ T5433] [ 64.830116][ T5437] __nla_validate_parse: 5 callbacks suppressed [ 64.830189][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 64.919876][ T5445] FAULT_INJECTION: forcing a failure. [ 64.919876][ T5445] name failslab, interval 1, probability 0, space 0, times 0 [ 64.932753][ T5445] CPU: 0 UID: 0 PID: 5445 Comm: syz.4.652 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.932785][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.932800][ T5445] Call Trace: [ 64.932807][ T5445] [ 64.932818][ T5445] __dump_stack+0x1d/0x30 [ 64.932880][ T5445] dump_stack_lvl+0xe8/0x140 [ 64.932908][ T5445] dump_stack+0x15/0x1b [ 64.932934][ T5445] should_fail_ex+0x265/0x280 [ 64.932977][ T5445] ? __se_sys_mount+0xef/0x2e0 [ 64.933055][ T5445] should_failslab+0x8c/0xb0 [ 64.933085][ T5445] __kmalloc_cache_noprof+0x4c/0x4a0 [ 64.933109][ T5445] ? memdup_user+0x99/0xd0 [ 64.933130][ T5445] __se_sys_mount+0xef/0x2e0 [ 64.933171][ T5445] ? fput+0x8f/0xc0 [ 64.933202][ T5445] ? ksys_write+0x192/0x1a0 [ 64.933257][ T5445] __x64_sys_mount+0x67/0x80 [ 64.933341][ T5445] x64_sys_call+0x2b51/0x3000 [ 64.933359][ T5445] do_syscall_64+0xd2/0x200 [ 64.933381][ T5445] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.933404][ T5445] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.933439][ T5445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.933457][ T5445] RIP: 0033:0x7f1e2f88eec9 [ 64.933470][ T5445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.933513][ T5445] RSP: 002b:00007f1e2e2f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.933530][ T5445] RAX: ffffffffffffffda RBX: 00007f1e2fae5fa0 RCX: 00007f1e2f88eec9 [ 64.933551][ T5445] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 64.933561][ T5445] RBP: 00007f1e2e2f7090 R08: 0000200000000080 R09: 0000000000000000 [ 64.933571][ T5445] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001 [ 64.933582][ T5445] R13: 00007f1e2fae6038 R14: 00007f1e2fae5fa0 R15: 00007ffd3af01038 [ 64.933599][ T5445] [ 65.124891][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'. [ 65.242486][ T5462] loop4: detected capacity change from 0 to 512 [ 65.249426][ T5462] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.256378][ T5462] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.277753][ T5462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 65.287552][ T5462] System zones: 1-12 [ 65.292412][ T5462] EXT4-fs (loop4): 1 truncate cleaned up [ 65.307480][ T5462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.361476][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.394125][ T5495] sctp: [Deprecated]: syz.0.664 (pid 5495) Use of int in max_burst socket option. [ 65.394125][ T5495] Use struct sctp_assoc_value instead [ 65.412266][ T5493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.421099][ T5493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.436064][ T5493] loop4: detected capacity change from 0 to 1024 [ 65.651454][ T5503] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5503 comm=syz.2.669 [ 66.134465][ T5533] netlink: 360 bytes leftover after parsing attributes in process `syz.4.680'. [ 66.173367][ T5537] FAULT_INJECTION: forcing a failure. [ 66.173367][ T5537] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 66.186752][ T5537] CPU: 0 UID: 0 PID: 5537 Comm: syz.1.682 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.186787][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.186822][ T5537] Call Trace: [ 66.186829][ T5537] [ 66.186838][ T5537] __dump_stack+0x1d/0x30 [ 66.186883][ T5537] dump_stack_lvl+0xe8/0x140 [ 66.186926][ T5537] dump_stack+0x15/0x1b [ 66.187014][ T5537] should_fail_ex+0x265/0x280 [ 66.187058][ T5537] should_fail_alloc_page+0xf2/0x100 [ 66.187093][ T5537] __alloc_frozen_pages_noprof+0xff/0x360 [ 66.187167][ T5537] alloc_pages_mpol+0xb3/0x260 [ 66.187211][ T5537] vma_alloc_folio_noprof+0x1aa/0x300 [ 66.187333][ T5537] handle_mm_fault+0xec2/0x2be0 [ 66.187362][ T5537] ? vma_start_read+0x141/0x1f0 [ 66.187404][ T5537] do_user_addr_fault+0x630/0x1080 [ 66.187442][ T5537] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.187475][ T5537] exc_page_fault+0x62/0xa0 [ 66.187504][ T5537] asm_exc_page_fault+0x26/0x30 [ 66.187585][ T5537] RIP: 0033:0x7f7cb5fcc3ab [ 66.187602][ T5537] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 66.187620][ T5537] RSP: 002b:00007f7cb4a7ce10 EFLAGS: 00010246 [ 66.187645][ T5537] RAX: 00007f7cb4a7ef30 RBX: 00007f7cb6247640 RCX: 0000000000000000 [ 66.187657][ T5537] RDX: 00007f7cb4a7ef78 RSI: 00007f7cb607edf8 RDI: 00007f7cb4a7ce30 [ 66.187670][ T5537] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 66.187682][ T5537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.187694][ T5537] R13: 00007f7cb6276038 R14: 00007f7cb6275fa0 R15: 00007ffd99250888 [ 66.187713][ T5537] [ 66.187762][ T5537] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 66.274390][ T5535] loop4: detected capacity change from 0 to 128 [ 66.425749][ T5547] loop1: detected capacity change from 0 to 512 [ 66.445803][ T5547] msdos: Unknown parameter 'allow_uƒime' [ 66.502363][ T5555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.690'. [ 66.512272][ T5558] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = -1, id = 0 [ 66.607031][ T5566] loop1: detected capacity change from 0 to 128 [ 66.665217][ T5570] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.675174][ T5570] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.720240][ T5570] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.730128][ T5570] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.769976][ T5570] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.779859][ T5570] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.793422][ T5576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 66.802527][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 66.811431][ T5576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.698'. [ 66.892833][ T5579] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 66.934048][ T5570] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.944021][ T5570] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.040115][ T5486] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.048369][ T5486] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.089476][ T5485] bio_check_eod: 101 callbacks suppressed [ 67.089546][ T5485] kworker/u8:28: attempt to access beyond end of device [ 67.089546][ T5485] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 67.124396][ T5486] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.132724][ T5486] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.156671][ T5485] kworker/u8:28: attempt to access beyond end of device [ 67.156671][ T5485] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 67.160780][ T5486] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.178725][ T5486] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.188871][ T5486] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.197118][ T5486] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.205384][ T5485] kworker/u8:28: attempt to access beyond end of device [ 67.205384][ T5485] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 67.219587][ T5485] kworker/u8:28: attempt to access beyond end of device [ 67.219587][ T5485] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 67.223081][ T5590] syzkaller0: entered allmulticast mode [ 67.233407][ T5485] kworker/u8:28: attempt to access beyond end of device [ 67.233407][ T5485] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 67.238789][ T5590] syzkaller0: entered promiscuous mode [ 67.252748][ T5485] kworker/u8:28: attempt to access beyond end of device [ 67.252748][ T5485] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 67.271878][ T5485] kworker/u8:28: attempt to access beyond end of device [ 67.271878][ T5485] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 67.273140][ T5590] syzkaller0 (unregistering): left allmulticast mode [ 67.285575][ T5485] kworker/u8:28: attempt to access beyond end of device [ 67.285575][ T5485] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 67.292101][ T5590] syzkaller0 (unregistering): left promiscuous mode [ 67.312395][ T5485] kworker/u8:28: attempt to access beyond end of device [ 67.312395][ T5485] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 67.326307][ T5485] kworker/u8:28: attempt to access beyond end of device [ 67.326307][ T5485] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 67.412414][ T5596] syzkaller0: entered allmulticast mode [ 67.418182][ T5596] syzkaller0: entered promiscuous mode [ 67.433596][ T5596] syzkaller0: left promiscuous mode [ 67.439047][ T5596] syzkaller0: left allmulticast mode [ 67.527272][ T5600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.542790][ T3358] lo speed is unknown, defaulting to 1000 [ 67.547591][ T5611] loop1: detected capacity change from 0 to 512 [ 67.558878][ T5608] syzkaller0: entered allmulticast mode [ 67.565306][ T5608] syzkaller0: entered promiscuous mode [ 67.573213][ T5611] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 67.589135][ T5608] syzkaller0 (unregistering): left allmulticast mode [ 67.595991][ T5608] syzkaller0 (unregistering): left promiscuous mode [ 67.822975][ T5640] SELinux: Context system_u:object_r:klogd_var_run_t:s0 is not valid (left unmapped). [ 67.921590][ T5594] loop4: detected capacity change from 0 to 32768 [ 67.958951][ T3292] loop4: p1 p3 < > [ 67.988559][ T5594] loop4: p1 p3 < > [ 67.994849][ T5616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.701'. [ 67.997108][ T5657] netlink: 5 bytes leftover after parsing attributes in process `syz.2.728'. [ 68.003827][ T29] kauditd_printk_skb: 905 callbacks suppressed [ 68.003843][ T29] audit: type=1400 audit(1759605164.016:6469): avc: denied { connect } for pid=5656 comm="syz.2.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.012983][ T5657] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 68.018766][ T29] audit: type=1400 audit(1759605164.016:6470): avc: denied { write } for pid=5656 comm="syz.2.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.066235][ T29] audit: type=1400 audit(1759605164.096:6471): avc: denied { write } for pid=5653 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.087329][ T5657] 0ªî{X¹¦: entered allmulticast mode [ 68.095904][ T5657] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 68.134050][ T29] audit: type=1400 audit(1759605164.156:6472): avc: denied { read } for pid=5660 comm="syz.1.729" dev="nsfs" ino=4026532492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.155224][ T29] audit: type=1400 audit(1759605164.156:6473): avc: denied { open } for pid=5660 comm="syz.1.729" path="net:[4026532492]" dev="nsfs" ino=4026532492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.227002][ T29] audit: type=1400 audit(1759605164.246:6474): avc: denied { execmem } for pid=5666 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 68.291349][ T29] audit: type=1400 audit(1759605164.316:6475): avc: denied { listen } for pid=5674 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.310845][ T29] audit: type=1400 audit(1759605164.316:6476): avc: denied { read } for pid=5674 comm="syz.1.736" path="socket:[10176]" dev="sockfs" ino=10176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.348383][ T29] audit: type=1400 audit(1759605164.346:6477): avc: denied { mount } for pid=5680 comm="syz.2.739" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.370919][ T29] audit: type=1400 audit(1759605164.366:6478): avc: denied { mount } for pid=5680 comm="syz.2.739" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.380384][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 68.394308][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 68.426329][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 68.438081][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 68.470695][ T5686] netlink: 44 bytes leftover after parsing attributes in process `syz.2.740'. [ 69.206999][ T3511] ================================================================== [ 69.215237][ T3511] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 69.222230][ T3511] [ 69.224571][ T3511] write to 0xffff88810233e9a4 of 4 bytes by task 3292 on cpu 0: [ 69.232232][ T3511] shmem_mknod+0x137/0x180 [ 69.236678][ T3511] shmem_create+0x34/0x50 [ 69.241026][ T3511] path_openat+0x1105/0x2170 [ 69.245632][ T3511] do_filp_open+0x109/0x230 [ 69.250165][ T3511] do_sys_openat2+0xa6/0x110 [ 69.254796][ T3511] __x64_sys_openat+0xf2/0x120 [ 69.259573][ T3511] x64_sys_call+0x2eab/0x3000 [ 69.264277][ T3511] do_syscall_64+0xd2/0x200 [ 69.268812][ T3511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.274734][ T3511] [ 69.277078][ T3511] read to 0xffff88810233e9a4 of 4 bytes by task 3511 on cpu 1: [ 69.284649][ T3511] fill_mg_cmtime+0x5b/0x260 [ 69.289289][ T3511] generic_fillattr+0x24a/0x340 [ 69.294185][ T3511] shmem_getattr+0x181/0x200 [ 69.298804][ T3511] vfs_getattr_nosec+0x146/0x1e0 [ 69.303783][ T3511] vfs_statx+0x113/0x390 [ 69.308062][ T3511] vfs_fstatat+0x115/0x170 [ 69.312535][ T3511] __se_sys_newfstatat+0x55/0x260 [ 69.317597][ T3511] __x64_sys_newfstatat+0x55/0x70 [ 69.322646][ T3511] x64_sys_call+0x135a/0x3000 [ 69.327355][ T3511] do_syscall_64+0xd2/0x200 [ 69.331894][ T3511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.337815][ T3511] [ 69.340161][ T3511] value changed: 0x0e8a662b -> 0x0e93195f [ 69.345886][ T3511] [ 69.348224][ T3511] Reported by Kernel Concurrency Sanitizer on: [ 69.354391][ T3511] CPU: 1 UID: 0 PID: 3511 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.363699][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.373772][ T3511] ================================================================== [ 69.411143][ T5753] lo speed is unknown, defaulting to 1000