last executing test programs: 1.514268027s ago: executing program 4 (id=583): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000e146a20f000000240000000200000000000000005d37b2fd35390d0000000000008e62fb17a561e895567605"], 0x0, 0x3e, 0x0, 0x1, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000a51f09f852f0009000000080000"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) 1.483008278s ago: executing program 3 (id=584): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x40, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8810}, 0x40) 1.414067409s ago: executing program 3 (id=587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) 1.33002836s ago: executing program 3 (id=590): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0xf, 0x20003e90) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000200)=[{r1, 0x6600}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.218347102s ago: executing program 2 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2a309, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.109215864s ago: executing program 2 (id=594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.010808435s ago: executing program 2 (id=597): r0 = epoll_create1(0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 484.197883ms ago: executing program 3 (id=599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) close(r0) 483.530883ms ago: executing program 0 (id=609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 482.870612ms ago: executing program 1 (id=600): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0xfff5, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000"], 0xfdef) 482.659943ms ago: executing program 2 (id=601): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) io_submit(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 447.309393ms ago: executing program 2 (id=602): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) 446.723503ms ago: executing program 0 (id=613): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) io_submit(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 425.695153ms ago: executing program 0 (id=603): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x1, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xe}}}, 0x24}}, 0x0) 425.402903ms ago: executing program 3 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2a309, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 423.392533ms ago: executing program 1 (id=605): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}}, 0x0) socket(0x25, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2d840009aa5ab9"], 0xffdd) fchown(0xffffffffffffffff, 0x0, 0x0) 376.681434ms ago: executing program 3 (id=606): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 358.274265ms ago: executing program 2 (id=607): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x1fd, {0x0, 0xa}, {0x1}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 322.344095ms ago: executing program 1 (id=608): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/143, 0x8f}], 0x1, 0x154, 0x0) 304.411415ms ago: executing program 1 (id=610): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 170.651807ms ago: executing program 4 (id=611): r0 = semget(0x2, 0x2, 0x36d) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000013c0)=""/254) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000100)=""/152) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x15, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780050014007f000000050015000c0000000500010006040000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 169.014087ms ago: executing program 0 (id=622): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}}, 0x0) socket(0x25, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2d840009aa5ab9"], 0xffdd) fchown(0xffffffffffffffff, 0x0, 0x0) 168.582567ms ago: executing program 1 (id=612): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtfilter={0x24, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 119.298118ms ago: executing program 4 (id=614): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x4008810, &(0x7f00000004c0)=@ll={0x11, 0x1, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 77.454349ms ago: executing program 0 (id=615): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0xfff5, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000"], 0xfdef) 77.271809ms ago: executing program 1 (id=616): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mlockall(0x3) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 77.138358ms ago: executing program 4 (id=617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000002080)=0x3, 0x4) 47.075489ms ago: executing program 4 (id=618): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000040), 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 31.808219ms ago: executing program 0 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2a309, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 4 (id=620): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 24.721352][ T29] audit: type=1400 audit(1751689706.356:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.722235][ T3295] cgroup: Unknown subsys name 'net' [ 24.744070][ T29] audit: type=1400 audit(1751689706.356:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.771450][ T29] audit: type=1400 audit(1751689706.376:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.920424][ T3295] cgroup: Unknown subsys name 'cpuset' [ 24.926472][ T3295] cgroup: Unknown subsys name 'rlimit' [ 25.115328][ T29] audit: type=1400 audit(1751689706.746:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.138638][ T29] audit: type=1400 audit(1751689706.746:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.159169][ T29] audit: type=1400 audit(1751689706.746:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.166211][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.179521][ T29] audit: type=1400 audit(1751689706.746:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.208346][ T29] audit: type=1400 audit(1751689706.756:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.233133][ T29] audit: type=1400 audit(1751689706.756:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.256958][ T29] audit: type=1400 audit(1751689706.826:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.290455][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.130000][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.193409][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 27.217227][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.241128][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.276042][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.283208][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.290488][ T3309] bridge_slave_0: entered allmulticast mode [ 27.296763][ T3309] bridge_slave_0: entered promiscuous mode [ 27.312953][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.320051][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.327238][ T3309] bridge_slave_1: entered allmulticast mode [ 27.333688][ T3309] bridge_slave_1: entered promiscuous mode [ 27.372722][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.390173][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.398716][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.405799][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.413192][ T3306] bridge_slave_0: entered allmulticast mode [ 27.419651][ T3306] bridge_slave_0: entered promiscuous mode [ 27.426747][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.435900][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.442952][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.450105][ T3306] bridge_slave_1: entered allmulticast mode [ 27.456401][ T3306] bridge_slave_1: entered promiscuous mode [ 27.468423][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.475563][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.482680][ T3305] bridge_slave_0: entered allmulticast mode [ 27.489028][ T3305] bridge_slave_0: entered promiscuous mode [ 27.513999][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.521175][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.528310][ T3305] bridge_slave_1: entered allmulticast mode [ 27.534720][ T3305] bridge_slave_1: entered promiscuous mode [ 27.549038][ T3309] team0: Port device team_slave_0 added [ 27.572999][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.582616][ T3309] team0: Port device team_slave_1 added [ 27.589170][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.598431][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.605515][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.612860][ T3310] bridge_slave_0: entered allmulticast mode [ 27.619154][ T3310] bridge_slave_0: entered promiscuous mode [ 27.628320][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.643054][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.656168][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.663321][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.670590][ T3310] bridge_slave_1: entered allmulticast mode [ 27.676961][ T3310] bridge_slave_1: entered promiscuous mode [ 27.708629][ T3305] team0: Port device team_slave_0 added [ 27.714598][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.721566][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.747545][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.759059][ T3306] team0: Port device team_slave_0 added [ 27.765536][ T3306] team0: Port device team_slave_1 added [ 27.785486][ T3305] team0: Port device team_slave_1 added [ 27.791555][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.798601][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.824588][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.840653][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.849788][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.856860][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.864085][ T3316] bridge_slave_0: entered allmulticast mode [ 27.870453][ T3316] bridge_slave_0: entered promiscuous mode [ 27.893026][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.900006][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.926005][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.937586][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.951835][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.958927][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.966166][ T3316] bridge_slave_1: entered allmulticast mode [ 27.972556][ T3316] bridge_slave_1: entered promiscuous mode [ 27.983628][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.990617][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.016633][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.027586][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.034718][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.060771][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.076670][ T3310] team0: Port device team_slave_0 added [ 28.086934][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.093904][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.119964][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.140054][ T3310] team0: Port device team_slave_1 added [ 28.146758][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.165736][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.172817][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.198992][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.210811][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.217835][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.243845][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.264695][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.284173][ T3309] hsr_slave_0: entered promiscuous mode [ 28.290129][ T3309] hsr_slave_1: entered promiscuous mode [ 28.319493][ T3305] hsr_slave_0: entered promiscuous mode [ 28.325501][ T3305] hsr_slave_1: entered promiscuous mode [ 28.331486][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.339026][ T3305] Cannot create hsr debugfs directory [ 28.345654][ T3316] team0: Port device team_slave_0 added [ 28.352100][ T3316] team0: Port device team_slave_1 added [ 28.359526][ T3306] hsr_slave_0: entered promiscuous mode [ 28.365654][ T3306] hsr_slave_1: entered promiscuous mode [ 28.371483][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.379011][ T3306] Cannot create hsr debugfs directory [ 28.420845][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.427884][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.453830][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.477347][ T3310] hsr_slave_0: entered promiscuous mode [ 28.483234][ T3310] hsr_slave_1: entered promiscuous mode [ 28.489061][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.496638][ T3310] Cannot create hsr debugfs directory [ 28.507107][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.514168][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.540165][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.600261][ T3316] hsr_slave_0: entered promiscuous mode [ 28.606146][ T3316] hsr_slave_1: entered promiscuous mode [ 28.612172][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.619703][ T3316] Cannot create hsr debugfs directory [ 28.738537][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.746830][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.757193][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.770573][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.794640][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.803189][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.811625][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.821281][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.851891][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.862542][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.871455][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.889726][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.917270][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.924820][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.933011][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.944927][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.959095][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.966900][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.993384][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.007242][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.022492][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.029558][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.038189][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.045282][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.061331][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.070895][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.079602][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.086686][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.095531][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.102590][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.116617][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.125532][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.169398][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.179898][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.213963][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.234461][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.254808][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.263558][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.270634][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.290889][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.298019][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.317373][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.337552][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.351163][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.358943][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.366064][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.377412][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.384486][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.400017][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.414281][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.436228][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.449790][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.460316][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.499133][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.506232][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.516830][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.523953][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.550615][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.589651][ T3305] veth0_vlan: entered promiscuous mode [ 29.609650][ T3310] veth0_vlan: entered promiscuous mode [ 29.627486][ T3310] veth1_vlan: entered promiscuous mode [ 29.644566][ T3305] veth1_vlan: entered promiscuous mode [ 29.658766][ T3309] veth0_vlan: entered promiscuous mode [ 29.667953][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.683972][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.691999][ T3309] veth1_vlan: entered promiscuous mode [ 29.707150][ T3305] veth0_macvtap: entered promiscuous mode [ 29.714878][ T3305] veth1_macvtap: entered promiscuous mode [ 29.721794][ T3310] veth0_macvtap: entered promiscuous mode [ 29.733457][ T3310] veth1_macvtap: entered promiscuous mode [ 29.748423][ T3309] veth0_macvtap: entered promiscuous mode [ 29.763699][ T3309] veth1_macvtap: entered promiscuous mode [ 29.775105][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.785346][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.796878][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.810738][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.818869][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.827658][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.836463][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.845235][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.863083][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.889213][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.901925][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.910794][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.919505][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.928264][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.940190][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.948966][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.957697][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.966453][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.989157][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.989175][ T29] audit: type=1400 audit(1751689711.616:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.MoLAcN/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.020004][ T29] audit: type=1400 audit(1751689711.616:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.023015][ T3306] veth0_vlan: entered promiscuous mode [ 30.041935][ T29] audit: type=1400 audit(1751689711.616:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.MoLAcN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.051000][ T3316] veth0_vlan: entered promiscuous mode [ 30.072461][ T29] audit: type=1400 audit(1751689711.616:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.083338][ T3316] veth1_vlan: entered promiscuous mode [ 30.099624][ T29] audit: type=1400 audit(1751689711.616:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.MoLAcN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.131639][ T29] audit: type=1400 audit(1751689711.616:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.MoLAcN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.158944][ T29] audit: type=1400 audit(1751689711.616:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.179162][ T29] audit: type=1400 audit(1751689711.816:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.201931][ T29] audit: type=1400 audit(1751689711.816:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=3678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.213320][ T3306] veth1_vlan: entered promiscuous mode [ 30.237314][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.270448][ T3316] veth0_macvtap: entered promiscuous mode [ 30.287918][ T3306] veth0_macvtap: entered promiscuous mode [ 30.298653][ T3316] veth1_macvtap: entered promiscuous mode [ 30.305990][ T3306] veth1_macvtap: entered promiscuous mode [ 30.321452][ T29] audit: type=1400 audit(1751689711.946:90): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.347120][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.357282][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.393914][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.402277][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.411141][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.419835][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.428621][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.449261][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.470395][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.479190][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.488081][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.496805][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.709293][ T3512] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12'. [ 30.739589][ T3515] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 30.842342][ T3524] netlink: 'syz.4.16': attribute type 1 has an invalid length. [ 30.963083][ T3537] netlink: 'syz.4.22': attribute type 10 has an invalid length. [ 30.994632][ T3537] team0: Port device dummy0 added [ 31.007268][ T3537] netlink: 'syz.4.22': attribute type 10 has an invalid length. [ 31.016297][ T3537] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 31.028982][ T3537] team0: Failed to send options change via netlink (err -105) [ 31.037006][ T3537] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 31.047581][ T3537] team0: Port device dummy0 removed [ 31.055298][ T3537] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 31.111186][ T3537] syz.4.22 (3537) used greatest stack depth: 10208 bytes left [ 31.265046][ T3559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 31.288564][ T3561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 31.316223][ T3559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 31.418548][ T3572] syzkaller0: entered promiscuous mode [ 31.424217][ T3572] syzkaller0: entered allmulticast mode [ 31.470299][ T3550] loop2: detected capacity change from 0 to 4096 [ 31.500725][ T3581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3581 comm=syz.0.40 [ 31.520205][ T3550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.606649][ T3590] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.613901][ T3590] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.653128][ T3590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.681023][ T3590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.709819][ T3590] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.718933][ T3590] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.727908][ T3590] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.736885][ T3590] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.966588][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 31.993033][ T3616] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 32.005376][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.060521][ T3622] loop2: detected capacity change from 0 to 128 [ 32.082663][ T3622] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.091802][ T3625] netlink: 168 bytes leftover after parsing attributes in process `syz.0.56'. [ 32.104808][ T3622] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.207838][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.272196][ T3640] loop2: detected capacity change from 0 to 1024 [ 32.278876][ T3640] ======================================================= [ 32.278876][ T3640] WARNING: The mand mount option has been deprecated and [ 32.278876][ T3640] and is ignored by this kernel. Remove the mand [ 32.278876][ T3640] option from the mount to silence this warning. [ 32.278876][ T3640] ======================================================= [ 32.323628][ T3640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.342597][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 32.352973][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.430921][ T3649] netlink: 'syz.2.65': attribute type 16 has an invalid length. [ 32.438592][ T3649] netlink: 'syz.2.65': attribute type 17 has an invalid length. [ 32.450275][ T3649] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 32.584549][ T3669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 32.872462][ T3677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 33.473807][ T3698] vlan2: entered allmulticast mode [ 33.479020][ T3698] bond0: entered allmulticast mode [ 33.484171][ T3698] bond_slave_0: entered allmulticast mode [ 33.489926][ T3698] bond_slave_1: entered allmulticast mode [ 33.548556][ T3698] dummy0: entered allmulticast mode [ 33.738054][ T3715] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.89'. [ 33.923020][ T3726] netlink: 'syz.0.94': attribute type 13 has an invalid length. [ 34.038171][ T3729] syzkaller0: entered promiscuous mode [ 34.043844][ T3729] syzkaller0: entered allmulticast mode [ 34.113994][ T3740] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.238402][ T3749] team0: Port device team_slave_1 removed [ 34.411097][ T3762] netlink: 'syz.1.109': attribute type 27 has an invalid length. [ 34.476274][ T3762] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.483431][ T3762] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.576003][ T3762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.592661][ T3762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.640218][ T3762] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.649130][ T3762] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.658249][ T3762] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.667161][ T3762] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.723942][ T3767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.741424][ T3767] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.776170][ T3783] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 34.784386][ T3767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 34.838456][ T3783] batadv1: entered promiscuous mode [ 34.843801][ T3783] batadv1: entered allmulticast mode [ 34.878907][ T3790] batadv1: entered promiscuous mode [ 34.884201][ T3790] batadv1: entered allmulticast mode [ 34.893124][ T3792] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 34.905444][ T3792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.923552][ T3792] bond1: (slave gretap1): making interface the new active one [ 34.931788][ T3792] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 34.949264][ T3792] bond1 (unregistering): (slave gretap1): Releasing active interface [ 34.969983][ T3792] bond1 (unregistering): Released all slaves [ 35.018232][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 35.018245][ T29] audit: type=1400 audit(1751689716.646:177): avc: denied { create } for pid=3802 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.070115][ T3790] Zero length message leads to an empty skb [ 35.128140][ T3812] ALSA: seq fatal error: cannot create timer (-19) [ 35.148249][ T3815] loop3: detected capacity change from 0 to 512 [ 35.158616][ T3815] ext4: Unknown parameter 'usrquota"data' [ 35.182603][ T29] audit: type=1400 audit(1751689716.816:178): avc: denied { write } for pid=3814 comm="syz.3.128" name="mcfilter6" dev="proc" ino=4026532786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 35.253614][ T3822] loop2: detected capacity change from 0 to 2048 [ 35.323137][ T3822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 35.451879][ T29] audit: type=1400 audit(1751689717.086:179): avc: denied { map } for pid=3821 comm="syz.2.130" path="/22/file2/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.455868][ T3849] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 35.477227][ T3843] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.502510][ T3843] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 914 with error 28 [ 35.515186][ T3843] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.515186][ T3843] [ 35.525101][ T3843] EXT4-fs (loop2): Total free blocks count 0 [ 35.531150][ T3843] EXT4-fs (loop2): Free/Dirty block details [ 35.537063][ T3843] EXT4-fs (loop2): free_blocks=2415919104 [ 35.542845][ T3843] EXT4-fs (loop2): dirty_blocks=928 [ 35.548069][ T3843] EXT4-fs (loop2): Block reservation details [ 35.554084][ T3843] EXT4-fs (loop2): i_reserved_data_blocks=58 [ 35.560306][ T29] audit: type=1400 audit(1751689717.186:180): avc: denied { create } for pid=3855 comm="syz.3.144" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.581376][ T29] audit: type=1400 audit(1751689717.186:181): avc: denied { map } for pid=3855 comm="syz.3.144" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.605665][ T29] audit: type=1400 audit(1751689717.186:182): avc: denied { read write } for pid=3855 comm="syz.3.144" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.635118][ T29] audit: type=1400 audit(1751689717.206:183): avc: denied { write } for pid=2959 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6200 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.705783][ T3843] syz.2.130 (3843) used greatest stack depth: 10120 bytes left [ 35.718359][ T29] audit: type=1400 audit(1751689717.346:184): avc: denied { bind } for pid=3864 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.737666][ T29] audit: type=1400 audit(1751689717.346:185): avc: denied { setopt } for pid=3864 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.760965][ T3441] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 35.772116][ T29] audit: type=1400 audit(1751689717.386:186): avc: denied { create } for pid=3866 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 36.017307][ T3893] __nla_validate_parse: 12 callbacks suppressed [ 36.017321][ T3893] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.160'. [ 36.018558][ T3894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 36.321439][ T3922] Driver unsupported XDP return value 0 on prog (id 46) dev N/A, expect packet loss! [ 36.413140][ T3928] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.175'. [ 36.422284][ T3928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 36.504251][ T3930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 36.790123][ T3935] loop2: detected capacity change from 0 to 8192 [ 36.797168][ T3935] vfat: Unknown parameter '¥¬'x« Ig̺’½BÁÉq©¯¹A—oë0Æ•' [ 36.869180][ T3942] netlink: 'syz.3.181': attribute type 27 has an invalid length. [ 36.894246][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.901444][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.940414][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.950284][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.976003][ T3942] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.985149][ T3942] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.994100][ T3942] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.003068][ T3942] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.046465][ T3945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.055131][ T3945] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.064138][ T3945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.071224][ T3944] netlink: 'syz.2.182': attribute type 4 has an invalid length. [ 37.094123][ T3952] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 37.101868][ T3952] netlink: 224 bytes leftover after parsing attributes in process `syz.0.184'. [ 37.202084][ T3964] loop0: detected capacity change from 0 to 128 [ 37.211478][ T3966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.189'. [ 37.229122][ T3964] EXT4-fs: Ignoring removed oldalloc option [ 37.239793][ T3964] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.258576][ T3964] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.291443][ T3975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 37.301104][ T3975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 37.318345][ T3975] netlink: 156 bytes leftover after parsing attributes in process `syz.3.193'. [ 37.329027][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.455179][ T3989] netlink: zone id is out of range [ 37.460509][ T3989] netlink: del zone limit has 8 unknown bytes [ 37.630566][ T4002] ALSA: seq fatal error: cannot create timer (-19) [ 37.639538][ T3992] loop3: detected capacity change from 0 to 2048 [ 37.681054][ T3296] Alternate GPT is invalid, using primary GPT. [ 37.687352][ T3296] loop3: p1 p2 p3 [ 37.695237][ T3992] Alternate GPT is invalid, using primary GPT. [ 37.701552][ T3992] loop3: p1 p2 p3 [ 37.831560][ T4019] netlink: 'syz.2.209': attribute type 27 has an invalid length. [ 37.856421][ T4019] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.863803][ T4019] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.897644][ T4019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.907438][ T4019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.935786][ T4019] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.944863][ T4019] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.954020][ T4019] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.963457][ T4019] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.991827][ T4020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.001109][ T4020] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.009631][ T4020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.716249][ T4052] ALSA: seq fatal error: cannot create timer (-19) [ 38.762681][ T4060] netlink: 'syz.0.226': attribute type 27 has an invalid length. [ 38.795480][ T4060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.821638][ T4060] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.832201][ T4060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.964798][ T4075] syzkaller0: entered promiscuous mode [ 38.970381][ T4075] syzkaller0: entered allmulticast mode [ 39.051572][ T4084] ALSA: seq fatal error: cannot create timer (-19) [ 39.136636][ T4094] netlink: 'syz.4.240': attribute type 27 has an invalid length. [ 39.169815][ T4096] syzkaller0: entered promiscuous mode [ 39.175406][ T4096] syzkaller0: entered allmulticast mode [ 39.202610][ T4094] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.209894][ T4094] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.243899][ T4094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.253830][ T4094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.286547][ T4094] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.295495][ T4094] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.304454][ T4094] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.313399][ T4094] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.365275][ T4099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.374676][ T4099] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.385886][ T4099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.523359][ T4119] loop4: detected capacity change from 0 to 8192 [ 39.532321][ T4119] vfat: Unknown parameter '¥¬'x« Ig̺’½BÁÉq©¯¹A—oë0Æ•' [ 39.656551][ T4130] syzkaller0: entered promiscuous mode [ 39.662165][ T4130] syzkaller0: entered allmulticast mode [ 39.773014][ T4077] 9pnet_fd: p9_fd_create_tcp (4077): problem connecting socket to 127.0.0.1 [ 39.821961][ T4143] netlink: 'syz.3.261': attribute type 27 has an invalid length. [ 39.884277][ T4150] loop0: detected capacity change from 0 to 128 [ 39.906879][ T4150] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.928312][ T4143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.947264][ T4150] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.955904][ T4143] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.988546][ T4143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.049304][ T4146] loop4: detected capacity change from 0 to 2048 [ 40.053366][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 40.053379][ T29] audit: type=1326 audit(1751689721.676:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0604be929 code=0x7ffc0000 [ 40.106028][ T3296] Alternate GPT is invalid, using primary GPT. [ 40.112437][ T3296] loop4: p1 p2 p3 [ 40.129110][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.134113][ T29] audit: type=1326 audit(1751689721.716:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0604be929 code=0x7ffc0000 [ 40.161350][ T29] audit: type=1326 audit(1751689721.716:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0604be929 code=0x7ffc0000 [ 40.184635][ T29] audit: type=1326 audit(1751689721.716:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0604be929 code=0x7ffc0000 [ 40.207939][ T29] audit: type=1326 audit(1751689721.716:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe0604be929 code=0x7ffc0000 [ 40.212427][ T4146] Alternate GPT is invalid, using primary GPT. [ 40.231203][ T29] audit: type=1326 audit(1751689721.716:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0604be963 code=0x7ffc0000 [ 40.237414][ T4146] loop4: p1 p2 p3 [ 40.260458][ T29] audit: type=1326 audit(1751689721.736:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0604bd3df code=0x7ffc0000 [ 40.300577][ T4159] loop1: detected capacity change from 0 to 8192 [ 40.321374][ T29] audit: type=1326 audit(1751689721.926:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe0604be9b7 code=0x7ffc0000 [ 40.344565][ T29] audit: type=1326 audit(1751689721.936:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0604bd290 code=0x7ffc0000 [ 40.367802][ T29] audit: type=1326 audit(1751689721.936:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4158 comm="syz.1.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0604be52b code=0x7ffc0000 [ 40.391559][ T4159] vfat: Unknown parameter '¥¬'x« Ig̺’½BÁÉq©¯¹A—oë0Æ•' [ 40.404985][ T2996] Alternate GPT is invalid, using primary GPT. [ 40.411400][ T2996] loop4: p1 p2 p3 [ 40.618642][ T3584] udevd[3584]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 40.618784][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 40.640507][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 40.672054][ T4179] 9pnet_fd: p9_fd_create_tcp (4179): problem connecting socket to 127.0.0.1 [ 41.258844][ T4197] __nla_validate_parse: 5 callbacks suppressed [ 41.258859][ T4197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.291'. [ 41.265408][ T4196] loop4: detected capacity change from 0 to 128 [ 41.283544][ T4196] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.300488][ T4196] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.430729][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.512204][ T4202] loop0: detected capacity change from 0 to 2048 [ 41.562318][ T3296] Alternate GPT is invalid, using primary GPT. [ 41.568712][ T3296] loop0: p1 p2 p3 [ 41.578541][ T4202] Alternate GPT is invalid, using primary GPT. [ 41.584961][ T4202] loop0: p1 p2 p3 [ 41.712154][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.723817][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 41.745123][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 42.298266][ T4244] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 42.308432][ T4244] team0: Port device dummy0 added [ 42.316654][ T4244] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 42.325115][ T4244] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 42.335725][ T4244] team0: Failed to send options change via netlink (err -105) [ 42.355388][ T4244] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 42.398483][ T4244] team0: Port device dummy0 removed [ 42.419309][ T4244] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 42.806766][ T4261] loop2: detected capacity change from 0 to 2048 [ 42.861128][ T4261] Alternate GPT is invalid, using primary GPT. [ 42.867455][ T4261] loop2: p1 p2 p3 [ 43.088032][ T4287] loop1: detected capacity change from 0 to 2048 [ 43.140888][ T3296] Alternate GPT is invalid, using primary GPT. [ 43.147129][ T3296] loop1: p1 p2 p3 [ 43.156177][ T4287] Alternate GPT is invalid, using primary GPT. [ 43.162488][ T4287] loop1: p1 p2 p3 [ 43.863336][ T4296] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 43.878218][ T4296] team0: Port device dummy0 added [ 43.888813][ T4296] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 43.897576][ T4296] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 43.907851][ T4296] team0: Failed to send options change via netlink (err -105) [ 43.915523][ T4296] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 43.924790][ T4296] team0: Port device dummy0 removed [ 43.931334][ T4296] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 43.956327][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 44.201565][ T4323] vlan2: entered allmulticast mode [ 44.206743][ T4323] bond0: entered allmulticast mode [ 44.211931][ T4323] bond_slave_0: entered allmulticast mode [ 44.217675][ T4323] bond_slave_1: entered allmulticast mode [ 44.226531][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 44.272521][ T4321] loop0: detected capacity change from 0 to 2048 [ 44.301042][ T3296] Alternate GPT is invalid, using primary GPT. [ 44.307524][ T3296] loop0: p1 p2 p3 [ 44.316411][ T4321] Alternate GPT is invalid, using primary GPT. [ 44.322760][ T4321] loop0: p1 p2 p3 [ 44.405095][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 44.451604][ T4346] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 44.487307][ T4346] team0: Port device dummy0 added [ 44.498107][ T4346] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 44.506636][ T4346] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.518289][ T4346] team0: Failed to send options change via netlink (err -105) [ 44.540551][ T4346] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.550638][ T4346] team0: Port device dummy0 removed [ 44.559415][ T4346] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.666368][ T4357] netlink: 'syz.3.353': attribute type 10 has an invalid length. [ 44.688580][ T4357] team0: Port device dummy0 added [ 44.713298][ T4362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 44.732035][ T4357] netlink: 'syz.3.353': attribute type 10 has an invalid length. [ 44.742945][ T4357] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.753829][ T4357] team0: Failed to send options change via netlink (err -105) [ 44.763783][ T4357] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 44.772823][ T4357] team0: Port device dummy0 removed [ 44.779636][ T4357] dummy0: entered allmulticast mode [ 44.786583][ T4357] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.852610][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 44.852831][ T4370] vlan2: entered allmulticast mode [ 44.866717][ T4370] bond0: entered allmulticast mode [ 44.871955][ T4370] bond_slave_0: entered allmulticast mode [ 44.877772][ T4370] bond_slave_1: entered allmulticast mode [ 44.885495][ T4370] dummy0: entered allmulticast mode [ 44.904269][ T4373] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 44.951360][ T4373] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 45.026213][ T4381] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.351'. [ 45.062876][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 45.112147][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 45.173043][ T4394] loop3: detected capacity change from 0 to 1024 [ 45.191042][ T4376] loop4: detected capacity change from 0 to 2048 [ 45.201286][ T4394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.214222][ T3296] Alternate GPT is invalid, using primary GPT. [ 45.220535][ T3296] loop4: p1 p2 p3 [ 45.229748][ T4376] Alternate GPT is invalid, using primary GPT. [ 45.236303][ T4376] loop4: p1 p2 p3 [ 45.249139][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.822828][ T4404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.363'. [ 45.842557][ T4406] netlink: 'syz.3.362': attribute type 10 has an invalid length. [ 45.871798][ T4406] bond0: (slave dummy0): Releasing backup interface [ 45.879386][ T4406] dummy0: left allmulticast mode [ 45.885886][ T4406] team0: Failed to send options change via netlink (err -105) [ 45.893463][ T4406] team0: Port device dummy0 added [ 45.925909][ T4406] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.936430][ T4406] team0: Failed to send options change via netlink (err -105) [ 45.944302][ T4406] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 45.960246][ T4406] team0: Port device dummy0 removed [ 45.969351][ T4406] dummy0: entered allmulticast mode [ 45.976457][ T4406] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.009550][ T4410] vlan2: entered allmulticast mode [ 46.014853][ T4410] bond0: entered allmulticast mode [ 46.020065][ T4410] bond_slave_0: entered allmulticast mode [ 46.020334][ T4403] loop1: detected capacity change from 0 to 2048 [ 46.025779][ T4410] bond_slave_1: entered allmulticast mode [ 46.026983][ T4410] dummy0: entered allmulticast mode [ 46.060329][ T4411] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 46.061520][ T4403] Alternate GPT is invalid, using primary GPT. [ 46.075212][ T4403] loop1: p1 p2 p3 [ 46.176819][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 46.176833][ T29] audit: type=1326 audit(1751689727.806:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef902de929 code=0x7ffc0000 [ 46.206191][ T29] audit: type=1326 audit(1751689727.806:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef902de929 code=0x7ffc0000 [ 46.229526][ T29] audit: type=1326 audit(1751689727.806:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef902de929 code=0x7ffc0000 [ 46.252965][ T29] audit: type=1326 audit(1751689727.806:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef902de929 code=0x7ffc0000 [ 46.276394][ T29] audit: type=1326 audit(1751689727.806:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef902de929 code=0x7ffc0000 [ 46.299650][ T29] audit: type=1326 audit(1751689727.806:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef902de929 code=0x7ffc0000 [ 46.322981][ T29] audit: type=1326 audit(1751689727.806:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef902de929 code=0x7ffc0000 [ 46.346196][ T29] audit: type=1326 audit(1751689727.806:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef902de929 code=0x7ffc0000 [ 46.369421][ T29] audit: type=1326 audit(1751689727.806:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef902de929 code=0x7ffc0000 [ 46.392806][ T29] audit: type=1326 audit(1751689727.806:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef902de929 code=0x7ffc0000 [ 46.426387][ T4432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.877414][ T4442] __nla_validate_parse: 1 callbacks suppressed [ 46.877429][ T4442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'. [ 47.037245][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 47.068955][ T4453] bond0: (slave dummy0): Releasing backup interface [ 47.076082][ T4453] dummy0: left allmulticast mode [ 47.082291][ T4453] team0: Failed to send options change via netlink (err -105) [ 47.090189][ T4453] team0: Port device dummy0 added [ 47.100484][ T4453] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.109450][ T4459] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.382'. [ 47.118614][ T4459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.382'. [ 47.133709][ T4453] team0: Failed to send options change via netlink (err -105) [ 47.141491][ T4453] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.150701][ T4453] team0: Port device dummy0 removed [ 47.156761][ T4453] dummy0: entered allmulticast mode [ 47.162377][ T4453] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.263196][ T4472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4472 comm=syz.2.388 [ 47.280109][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 47.335220][ T4480] ip6gre1: entered allmulticast mode [ 47.408771][ T4491] validate_nla: 6 callbacks suppressed [ 47.408786][ T4491] netlink: 'syz.2.397': attribute type 10 has an invalid length. [ 47.423008][ T4491] bond0: (slave dummy0): Releasing backup interface [ 47.431417][ T4491] dummy0: left allmulticast mode [ 47.438879][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 47.443146][ T4491] team0: Failed to send options change via netlink (err -105) [ 47.455159][ T4491] team0: Port device dummy0 added [ 47.469454][ T4491] netlink: 'syz.2.397': attribute type 10 has an invalid length. [ 47.477750][ T4491] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.487180][ T4491] team0: Failed to send options change via netlink (err -105) [ 47.495926][ T4491] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.505101][ T4491] team0: Port device dummy0 removed [ 47.518457][ T4491] dummy0: entered allmulticast mode [ 47.524169][ T4491] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.674824][ T4507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4507 comm=syz.3.403 [ 47.688927][ T4511] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.404'. [ 47.702875][ T4511] netlink: zone id is out of range [ 47.708090][ T4511] netlink: del zone limit has 8 unknown bytes [ 47.738784][ T4515] ip6gre1: entered allmulticast mode [ 47.775393][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 47.788142][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 47.833227][ T4527] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 47.842547][ T4527] bond0: (slave dummy0): Releasing backup interface [ 47.849344][ T4527] dummy0: left allmulticast mode [ 47.855809][ T4527] team0: Failed to send options change via netlink (err -105) [ 47.863406][ T4527] team0: Port device dummy0 added [ 47.872661][ T4527] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 47.881528][ T4527] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.891577][ T4527] team0: Failed to send options change via netlink (err -105) [ 47.899441][ T4527] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.910343][ T4527] team0: Port device dummy0 removed [ 47.916757][ T4527] dummy0: entered allmulticast mode [ 47.922315][ T4527] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.017873][ T4542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4542 comm=syz.1.418 [ 48.045977][ T4548] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.419'. [ 48.055720][ T4548] netlink: zone id is out of range [ 48.061836][ T4548] netlink: del zone limit has 8 unknown bytes [ 48.225039][ T4575] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 48.257571][ T4575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.279154][ T4575] bond1: (slave gretap1): making interface the new active one [ 48.288189][ T4575] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 48.340378][ T4575] bond1 (unregistering): (slave gretap1): Releasing active interface [ 48.349599][ T4575] bond1 (unregistering): Released all slaves [ 48.374365][ T4562] loop1: detected capacity change from 0 to 4096 [ 48.404632][ T4562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.444598][ T4591] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 48.469093][ T4595] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4595 comm=syz.4.438 [ 48.494698][ T4591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.527854][ T4591] bond1: (slave gretap1): making interface the new active one [ 48.538789][ T4591] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 48.556622][ T4591] bond1 (unregistering): (slave gretap1): Releasing active interface [ 48.566322][ T4591] bond1 (unregistering): Released all slaves [ 48.595821][ T4600] netlink: zone id is out of range [ 48.607016][ T4600] netlink: del zone limit has 8 unknown bytes [ 48.682987][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.782131][ T4621] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4621 comm=syz.2.451 [ 48.872530][ T4632] netlink: zone id is out of range [ 48.877736][ T4632] netlink: del zone limit has 8 unknown bytes [ 48.941372][ T4639] loop4: detected capacity change from 0 to 128 [ 48.950834][ T4639] EXT4-fs: Ignoring removed oldalloc option [ 48.999568][ T4639] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.001075][ T4646] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 49.026115][ T4639] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.059636][ T4646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.083623][ T4649] macvlan2: entered promiscuous mode [ 49.089090][ T4649] macvlan2: entered allmulticast mode [ 49.113058][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.161372][ T4649] bond1: entered promiscuous mode [ 49.197187][ T4649] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 49.228463][ T4649] bond1: left promiscuous mode [ 49.260872][ T4634] loop0: detected capacity change from 0 to 4096 [ 49.278819][ T4634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.397918][ T4679] loop3: detected capacity change from 0 to 128 [ 49.404660][ T4679] EXT4-fs: Ignoring removed oldalloc option [ 49.417542][ T4679] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.442605][ T4679] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.598539][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.731440][ T4700] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 49.745728][ T4700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.762593][ T4700] macvlan2: entered promiscuous mode [ 49.767995][ T4700] macvlan2: entered allmulticast mode [ 49.774696][ T4700] bond2: entered promiscuous mode [ 49.780212][ T4700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 49.792623][ T4700] bond2: left promiscuous mode [ 49.798276][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.946133][ T4713] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 49.991221][ T4713] bond3: entered promiscuous mode [ 49.996831][ T4713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 50.004940][ T4711] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 50.015566][ T4713] batadv1: entered promiscuous mode [ 50.020927][ T4713] batadv1: entered allmulticast mode [ 50.027239][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 50.035440][ T4713] bond3: (slave batadv1): making interface the new active one [ 50.043691][ T4713] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 50.060400][ T4713] batadv2: entered promiscuous mode [ 50.065699][ T4713] batadv2: entered allmulticast mode [ 50.071814][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 50.079423][ T4713] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 50.121002][ T4727] netlink: 'syz.2.503': attribute type 27 has an invalid length. [ 50.179750][ T4727] ip6gre1: left allmulticast mode [ 50.187663][ T4734] loop4: detected capacity change from 0 to 2048 [ 50.229316][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.251259][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.259203][ T4734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 50.280564][ T4736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.412086][ T4751] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.428539][ T4751] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1630 with error 28 [ 50.441117][ T4751] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.441117][ T4751] [ 50.450796][ T4751] EXT4-fs (loop4): Total free blocks count 0 [ 50.456887][ T4751] EXT4-fs (loop4): Free/Dirty block details [ 50.462815][ T4751] EXT4-fs (loop4): free_blocks=2415919104 [ 50.468542][ T4751] EXT4-fs (loop4): dirty_blocks=1632 [ 50.473941][ T4751] EXT4-fs (loop4): Block reservation details [ 50.474137][ T4731] loop3: detected capacity change from 0 to 4096 [ 50.480029][ T4751] EXT4-fs (loop4): i_reserved_data_blocks=102 [ 50.495541][ T4731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.563405][ T1022] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 50.643199][ T4766] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.686875][ T4772] bond1: entered promiscuous mode [ 50.700721][ T4772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.738017][ T4772] batadv1: entered promiscuous mode [ 50.743347][ T4772] batadv1: entered allmulticast mode [ 50.750157][ T4772] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 50.758389][ T4772] bond1: (slave batadv1): making interface the new active one [ 50.766615][ T4772] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 50.783263][ T4772] batadv2: entered promiscuous mode [ 50.788502][ T4772] batadv2: entered allmulticast mode [ 50.794763][ T4772] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 50.802802][ T4772] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 50.857511][ T4785] loop1: detected capacity change from 0 to 2048 [ 50.867964][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.893197][ T4785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 50.943308][ T4787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.951645][ T4787] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.029829][ T4794] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.045281][ T4794] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 996 with error 28 [ 51.057801][ T4794] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.057801][ T4794] [ 51.067548][ T4794] EXT4-fs (loop1): Total free blocks count 0 [ 51.073662][ T4794] EXT4-fs (loop1): Free/Dirty block details [ 51.079602][ T4794] EXT4-fs (loop1): free_blocks=2415919104 [ 51.085521][ T4794] EXT4-fs (loop1): dirty_blocks=1008 [ 51.090980][ T4794] EXT4-fs (loop1): Block reservation details [ 51.096988][ T4794] EXT4-fs (loop1): i_reserved_data_blocks=63 [ 51.155392][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 52.189080][ T4817] loop4: detected capacity change from 0 to 4096 [ 52.198350][ T4817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.393855][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.433804][ T4840] __nla_validate_parse: 27 callbacks suppressed [ 52.433818][ T4840] netlink: 168 bytes leftover after parsing attributes in process `syz.1.533'. [ 52.450796][ T4841] validate_nla: 6 callbacks suppressed [ 52.450810][ T4841] netlink: 'syz.4.531': attribute type 4 has an invalid length. [ 52.497637][ T4843] loop3: detected capacity change from 0 to 2048 [ 52.522757][ T4843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 52.550705][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 52.649258][ T4864] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.546'. [ 52.658455][ T4864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 52.672200][ T4862] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.686975][ T4862] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 52.699520][ T4862] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.699520][ T4862] [ 52.709263][ T4862] EXT4-fs (loop3): Total free blocks count 0 [ 52.715280][ T4862] EXT4-fs (loop3): Free/Dirty block details [ 52.721283][ T4862] EXT4-fs (loop3): free_blocks=2415919104 [ 52.727006][ T4862] EXT4-fs (loop3): dirty_blocks=2864 [ 52.732376][ T4862] EXT4-fs (loop3): Block reservation details [ 52.738427][ T4862] EXT4-fs (loop3): i_reserved_data_blocks=179 [ 52.823950][ T41] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 52.906903][ T4877] netlink: 168 bytes leftover after parsing attributes in process `syz.4.551'. [ 52.948509][ T4875] netlink: 'syz.0.550': attribute type 4 has an invalid length. [ 53.405778][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 53.420343][ T4895] loop0: detected capacity change from 0 to 2048 [ 53.441123][ T4895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.583657][ T4919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.569'. [ 53.585350][ T4909] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.618026][ T4909] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1888 with error 28 [ 53.630660][ T4909] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.630660][ T4909] [ 53.640347][ T4909] EXT4-fs (loop0): Total free blocks count 0 [ 53.646352][ T4909] EXT4-fs (loop0): Free/Dirty block details [ 53.652310][ T4909] EXT4-fs (loop0): free_blocks=2415919104 [ 53.658222][ T4909] EXT4-fs (loop0): dirty_blocks=1904 [ 53.663556][ T4909] EXT4-fs (loop0): Block reservation details [ 53.666589][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 53.669641][ T4909] EXT4-fs (loop0): i_reserved_data_blocks=119 [ 53.691591][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 53.775235][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 53.810042][ T4935] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.574'. [ 54.613273][ T4945] netlink: 'syz.4.580': attribute type 13 has an invalid length. [ 54.761537][ T4956] syzkaller0: entered promiscuous mode [ 54.767065][ T4956] syzkaller0: entered allmulticast mode [ 54.806054][ T4966] loop0: detected capacity change from 0 to 2048 [ 54.834783][ T4966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 54.964128][ T4976] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.979118][ T4976] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 54.991829][ T4976] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.991829][ T4976] [ 55.001670][ T4976] EXT4-fs (loop0): Total free blocks count 0 [ 55.007696][ T4976] EXT4-fs (loop0): Free/Dirty block details [ 55.013685][ T4976] EXT4-fs (loop0): free_blocks=2415919104 [ 55.019429][ T4976] EXT4-fs (loop0): dirty_blocks=2176 [ 55.024778][ T4976] EXT4-fs (loop0): Block reservation details [ 55.030930][ T4976] EXT4-fs (loop0): i_reserved_data_blocks=136 [ 55.108012][ T1022] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 55.188763][ T4992] netlink: 'syz.2.597': attribute type 13 has an invalid length. [ 55.854493][ T5015] loop3: detected capacity change from 0 to 2048 [ 55.871911][ T5015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 55.994760][ T5025] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.009706][ T5025] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 56.022206][ T5025] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.022206][ T5025] [ 56.031878][ T5025] EXT4-fs (loop3): Total free blocks count 0 [ 56.037892][ T5025] EXT4-fs (loop3): Free/Dirty block details [ 56.043826][ T5025] EXT4-fs (loop3): free_blocks=2415919104 [ 56.049618][ T5025] EXT4-fs (loop3): dirty_blocks=2512 [ 56.054985][ T5025] EXT4-fs (loop3): Block reservation details [ 56.060994][ T5025] EXT4-fs (loop3): i_reserved_data_blocks=157 [ 56.251292][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 56.759135][ T5050] ================================================================== [ 56.767231][ T5050] BUG: KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event [ 56.775904][ T5050] [ 56.778218][ T5050] write to 0xffff88811a31bbf8 of 1 bytes by task 5049 on cpu 0: [ 56.785835][ T5050] wakeup_source_report_event+0xd6/0x280 [ 56.791468][ T5050] __pm_stay_awake+0x34/0x70 [ 56.796047][ T5050] ep_poll_callback+0x1f6/0x550 [ 56.800889][ T5050] __wake_up+0x66/0xb0 [ 56.804967][ T5050] unix_dgram_peer_wake_relay+0xd3/0xf0 [ 56.810517][ T5050] __wake_up_sync_key+0x52/0x80 [ 56.815392][ T5050] __unix_dgram_recvmsg+0x3b2/0x840 [ 56.820587][ T5050] unix_dgram_recvmsg+0x81/0x90 [ 56.825435][ T5050] sock_recvmsg_nosec+0x107/0x130 [ 56.830454][ T5050] ____sys_recvmsg+0x26f/0x280 [ 56.835208][ T5050] ___sys_recvmsg+0x11f/0x370 [ 56.839876][ T5050] do_recvmmsg+0x1ef/0x540 [ 56.844284][ T5050] __x64_sys_recvmmsg+0xe5/0x170 [ 56.849212][ T5050] x64_sys_call+0x1c6a/0x2fb0 [ 56.853881][ T5050] do_syscall_64+0xd2/0x200 [ 56.858375][ T5050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.864260][ T5050] [ 56.866577][ T5050] read to 0xffff88811a31bbf8 of 1 bytes by task 5050 on cpu 1: [ 56.874107][ T5050] __ep_eventpoll_poll+0x1de/0x4e0 [ 56.879212][ T5050] ep_try_send_events+0x225/0x8b0 [ 56.884228][ T5050] do_epoll_wait+0x2ac/0x690 [ 56.888814][ T5050] __x64_sys_epoll_wait+0x147/0x180 [ 56.894006][ T5050] x64_sys_call+0x26d9/0x2fb0 [ 56.898680][ T5050] do_syscall_64+0xd2/0x200 [ 56.903170][ T5050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.909054][ T5050] [ 56.911392][ T5050] value changed: 0x00 -> 0x01 [ 56.916060][ T5050] [ 56.918392][ T5050] Reported by Kernel Concurrency Sanitizer on: [ 56.924553][ T5050] CPU: 1 UID: 0 PID: 5050 Comm: syz.4.620 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 56.936871][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.946916][ T5050] ==================================================================