last executing test programs: 1.264940988s ago: executing program 4 (id=319): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.264587348s ago: executing program 4 (id=320): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1100000004000000040000000100750000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statx(0xffffffffffffffff, 0x0, 0x100, 0x800, 0x0) 1.067444344s ago: executing program 3 (id=323): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) 987.24915ms ago: executing program 0 (id=325): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000016c0)=[{0xb6, 0xfc, 0x0, 0x2000000}]}) 986.80842ms ago: executing program 4 (id=326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 977.477931ms ago: executing program 4 (id=327): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 938.140914ms ago: executing program 4 (id=328): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) 809.940694ms ago: executing program 0 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 807.363445ms ago: executing program 1 (id=331): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2}]}) 729.138711ms ago: executing program 1 (id=332): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) 692.900124ms ago: executing program 1 (id=334): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 640.037658ms ago: executing program 1 (id=335): ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 639.450618ms ago: executing program 0 (id=336): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x62040200) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x8) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x5d1003, 0x1, 0xc}, 0x18) 534.112047ms ago: executing program 2 (id=338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 521.949428ms ago: executing program 1 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 450.699153ms ago: executing program 1 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) close_range(r2, r3, 0x0) 449.045134ms ago: executing program 0 (id=351): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdir(0x0, 0x16) open(0x0, 0x48400, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'erspan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 432.986945ms ago: executing program 3 (id=342): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6(0xa, 0x3, 0xff) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 413.260487ms ago: executing program 3 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 331.237483ms ago: executing program 0 (id=344): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r1, @ANYBLOB="1b3193ec2c1f04099c5b0b3806000000000000000897c217b761f30405e868720100005476814b649dbe8101000000010000008364fa435f79eabacd51bf00ff39b3"], 0x3c}}, 0x0) 318.237154ms ago: executing program 3 (id=347): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 309.069455ms ago: executing program 0 (id=348): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 235.329951ms ago: executing program 3 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 230.563661ms ago: executing program 2 (id=350): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 194.736834ms ago: executing program 2 (id=352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 135.124589ms ago: executing program 2 (id=353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 134.580779ms ago: executing program 2 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) 0s ago: executing program 4 (id=355): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 23.174255][ T29] audit: type=1400 audit(1755730569.944:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.175103][ T3291] cgroup: Unknown subsys name 'net' [ 23.196992][ T29] audit: type=1400 audit(1755730569.944:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.224355][ T29] audit: type=1400 audit(1755730569.974:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.369666][ T3291] cgroup: Unknown subsys name 'cpuset' [ 23.375787][ T3291] cgroup: Unknown subsys name 'rlimit' [ 23.485864][ T29] audit: type=1400 audit(1755730570.254:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.509135][ T29] audit: type=1400 audit(1755730570.254:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.529578][ T29] audit: type=1400 audit(1755730570.254:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.549912][ T29] audit: type=1400 audit(1755730570.254:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.570213][ T29] audit: type=1400 audit(1755730570.264:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.577225][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.594975][ T29] audit: type=1400 audit(1755730570.264:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.626744][ T29] audit: type=1400 audit(1755730570.374:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.672804][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.322564][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 25.375491][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 25.408179][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.415286][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.422550][ T3304] bridge_slave_0: entered allmulticast mode [ 25.428831][ T3304] bridge_slave_0: entered promiscuous mode [ 25.437559][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.444632][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.451828][ T3304] bridge_slave_1: entered allmulticast mode [ 25.458156][ T3304] bridge_slave_1: entered promiscuous mode [ 25.484229][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 25.496713][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 25.532951][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.540162][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.547263][ T3307] bridge_slave_0: entered allmulticast mode [ 25.553821][ T3307] bridge_slave_0: entered promiscuous mode [ 25.561383][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.581489][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.588532][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.595687][ T3307] bridge_slave_1: entered allmulticast mode [ 25.602087][ T3307] bridge_slave_1: entered promiscuous mode [ 25.609237][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.618445][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 25.668740][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.678705][ T3304] team0: Port device team_slave_0 added [ 25.696148][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.705269][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.712730][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.719942][ T3308] bridge_slave_0: entered allmulticast mode [ 25.726209][ T3308] bridge_slave_0: entered promiscuous mode [ 25.733493][ T3304] team0: Port device team_slave_1 added [ 25.750548][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.757813][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.764969][ T3308] bridge_slave_1: entered allmulticast mode [ 25.771290][ T3308] bridge_slave_1: entered promiscuous mode [ 25.802491][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.809586][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.817384][ T3301] bridge_slave_0: entered allmulticast mode [ 25.824022][ T3301] bridge_slave_0: entered promiscuous mode [ 25.831636][ T3307] team0: Port device team_slave_0 added [ 25.841892][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.848895][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.875257][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.890838][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.897857][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.905034][ T3301] bridge_slave_1: entered allmulticast mode [ 25.911290][ T3301] bridge_slave_1: entered promiscuous mode [ 25.922882][ T3307] team0: Port device team_slave_1 added [ 25.929480][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.938799][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.945783][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.971742][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.005037][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.015562][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.022646][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.029821][ T3302] bridge_slave_0: entered allmulticast mode [ 26.035979][ T3302] bridge_slave_0: entered promiscuous mode [ 26.043161][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.052477][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.059468][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.085439][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.106095][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.120108][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.127180][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.134533][ T3302] bridge_slave_1: entered allmulticast mode [ 26.140993][ T3302] bridge_slave_1: entered promiscuous mode [ 26.147282][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.154272][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.180237][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.204654][ T3308] team0: Port device team_slave_0 added [ 26.222894][ T3304] hsr_slave_0: entered promiscuous mode [ 26.228820][ T3304] hsr_slave_1: entered promiscuous mode [ 26.235520][ T3301] team0: Port device team_slave_0 added [ 26.242326][ T3301] team0: Port device team_slave_1 added [ 26.248656][ T3308] team0: Port device team_slave_1 added [ 26.256172][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.285882][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.307766][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.314748][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.340895][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.371601][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.378559][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.404446][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.417301][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.424253][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.450156][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.467420][ T3307] hsr_slave_0: entered promiscuous mode [ 26.473354][ T3307] hsr_slave_1: entered promiscuous mode [ 26.479233][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 26.484950][ T3307] Cannot create hsr debugfs directory [ 26.499578][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.506574][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.532699][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.543947][ T3302] team0: Port device team_slave_0 added [ 26.565438][ T3302] team0: Port device team_slave_1 added [ 26.593496][ T3301] hsr_slave_0: entered promiscuous mode [ 26.599445][ T3301] hsr_slave_1: entered promiscuous mode [ 26.605176][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 26.610937][ T3301] Cannot create hsr debugfs directory [ 26.626084][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.633045][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.658928][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.670055][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.677044][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.702937][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.730126][ T3308] hsr_slave_0: entered promiscuous mode [ 26.736134][ T3308] hsr_slave_1: entered promiscuous mode [ 26.742131][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 26.747875][ T3308] Cannot create hsr debugfs directory [ 26.832402][ T3302] hsr_slave_0: entered promiscuous mode [ 26.838377][ T3302] hsr_slave_1: entered promiscuous mode [ 26.844282][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 26.850056][ T3302] Cannot create hsr debugfs directory [ 26.891245][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.912711][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.931987][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.940701][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.987577][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.996512][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.006852][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.020281][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.047781][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.056980][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.066111][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.075383][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.106319][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.121107][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.143008][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.152942][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.175085][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.191862][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.200975][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.209831][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.223581][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.232586][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.252412][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.259472][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.268334][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.275416][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.291601][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.330327][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.342200][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.368475][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.384239][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.391328][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.400789][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.407844][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.418165][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.425210][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.442505][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.449740][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.467555][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.484401][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.506455][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.514570][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.526585][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.550915][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.557996][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.571790][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.592071][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.599171][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.627224][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.644100][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.651209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.662670][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.669793][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.688048][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.698612][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.743843][ T3304] veth0_vlan: entered promiscuous mode [ 27.763129][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.773782][ T3304] veth1_vlan: entered promiscuous mode [ 27.802974][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.831349][ T3301] veth0_vlan: entered promiscuous mode [ 27.841422][ T3301] veth1_vlan: entered promiscuous mode [ 27.855705][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.865405][ T3304] veth0_macvtap: entered promiscuous mode [ 27.880394][ T3304] veth1_macvtap: entered promiscuous mode [ 27.906325][ T3301] veth0_macvtap: entered promiscuous mode [ 27.918926][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.932385][ T3301] veth1_macvtap: entered promiscuous mode [ 27.941749][ T3307] veth0_vlan: entered promiscuous mode [ 27.954521][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.963820][ T3307] veth1_vlan: entered promiscuous mode [ 27.972009][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.984059][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.001406][ T162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.018264][ T3307] veth0_macvtap: entered promiscuous mode [ 28.030576][ T162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.044915][ T3308] veth0_vlan: entered promiscuous mode [ 28.064822][ T162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.073939][ T162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.084838][ T3308] veth1_vlan: entered promiscuous mode [ 28.092165][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.101179][ T3307] veth1_macvtap: entered promiscuous mode [ 28.122458][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.135410][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.154002][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.163218][ T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.179414][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.188583][ T3308] veth0_macvtap: entered promiscuous mode [ 28.195696][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.200166][ T3308] veth1_macvtap: entered promiscuous mode [ 28.222528][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 28.222541][ T29] audit: type=1400 audit(1755730574.994:90): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.225426][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.228696][ T29] audit: type=1400 audit(1755730574.994:91): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.279064][ T29] audit: type=1400 audit(1755730575.004:92): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.318415][ T29] audit: type=1400 audit(1755730575.054:93): avc: denied { create } for pid=3471 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.323166][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.337585][ T29] audit: type=1400 audit(1755730575.054:94): avc: denied { write } for pid=3471 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.362803][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.375942][ T3302] veth0_vlan: entered promiscuous mode [ 28.382156][ T29] audit: type=1400 audit(1755730575.134:95): avc: denied { map_create } for pid=3473 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.400941][ T29] audit: type=1400 audit(1755730575.134:96): avc: denied { bpf } for pid=3473 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.421249][ T29] audit: type=1400 audit(1755730575.134:97): avc: denied { map_read map_write } for pid=3473 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.445997][ T3302] veth1_vlan: entered promiscuous mode [ 28.454739][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.459461][ T29] audit: type=1400 audit(1755730575.154:98): avc: denied { prog_load } for pid=3473 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.482144][ T29] audit: type=1400 audit(1755730575.154:99): avc: denied { perfmon } for pid=3473 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.498410][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.521341][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.538273][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.549462][ T3302] veth0_macvtap: entered promiscuous mode [ 28.561421][ T3302] veth1_macvtap: entered promiscuous mode [ 28.568339][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.586807][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.600774][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.614642][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.629655][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.650248][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.659763][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.702504][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.739468][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.775744][ T3488] tipc: Started in network mode [ 28.780797][ T3488] tipc: Node identity 0ec4d95e9894, cluster identity 4711 [ 28.787998][ T3488] tipc: Enabled bearer , priority 0 [ 28.796273][ T3487] tipc: Resetting bearer [ 28.816711][ T3487] tipc: Disabling bearer [ 28.870035][ T3503] netlink: 'syz.1.12': attribute type 30 has an invalid length. [ 28.934994][ T3503] Zero length message leads to an empty skb [ 29.036261][ T3519] loop1: detected capacity change from 0 to 1024 [ 29.052974][ T3514] syzkaller0: entered promiscuous mode [ 29.058522][ T3514] syzkaller0: entered allmulticast mode [ 29.066313][ T3528] Illegal XDP return value 4294967274 on prog (id 19) dev N/A, expect packet loss! [ 29.188243][ T3537] loop4: detected capacity change from 0 to 128 [ 29.224583][ T3537] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 29.251071][ T3537] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 29.298933][ T3544] loop4: detected capacity change from 0 to 1024 [ 29.313599][ T3544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.375479][ T3549] loop1: detected capacity change from 0 to 512 [ 29.382077][ T3549] ======================================================= [ 29.382077][ T3549] WARNING: The mand mount option has been deprecated and [ 29.382077][ T3549] and is ignored by this kernel. Remove the mand [ 29.382077][ T3549] option from the mount to silence this warning. [ 29.382077][ T3549] ======================================================= [ 29.418221][ T3549] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.452571][ T3549] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 29.482991][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.500452][ T3549] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 29.509306][ T3549] EXT4-fs (loop1): orphan cleanup on readonly fs [ 29.527138][ T3549] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.29: Invalid block bitmap block 0 in block_group 0 [ 29.542106][ T3549] EXT4-fs (loop1): Remounting filesystem read-only [ 29.549135][ T3549] EXT4-fs (loop1): 1 orphan inode deleted [ 29.555495][ T3549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.633517][ T3549] syz.1.29 (3549) used greatest stack depth: 9592 bytes left [ 29.652502][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.756998][ T3577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 29.777339][ T3582] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 29.815120][ T3584] loop4: detected capacity change from 0 to 1024 [ 29.864822][ T3582] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 29.872437][ T3582] netlink: 224 bytes leftover after parsing attributes in process `syz.0.43'. [ 29.885113][ T3587] loop3: detected capacity change from 0 to 1024 [ 29.930132][ T3587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.052181][ T3598] netlink: 'syz.1.48': attribute type 30 has an invalid length. [ 30.071204][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.271275][ T3608] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.297381][ T3617] loop3: detected capacity change from 0 to 512 [ 30.307610][ T3617] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.318316][ T3617] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.331535][ T3617] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.392561][ T3617] EXT4-fs (loop3): 1 truncate cleaned up [ 30.400997][ T3617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.618157][ C0] hrtimer: interrupt took 30851 ns [ 30.686659][ T3632] wireguard0: entered promiscuous mode [ 30.692638][ T3632] wireguard0: entered allmulticast mode [ 30.693384][ T3633] loop4: detected capacity change from 0 to 512 [ 30.755095][ T3633] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.62: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 30.788821][ T3633] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.62: Bad quota inode: 3, type: 0 [ 30.815184][ T3633] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 30.831259][ T3633] EXT4-fs (loop4): mount failed [ 31.273236][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.307449][ T3652] netlink: 'syz.2.67': attribute type 30 has an invalid length. [ 31.368663][ T3658] loop4: detected capacity change from 0 to 1024 [ 31.376734][ T3658] EXT4-fs: Ignoring removed orlov option [ 31.382481][ T3658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.399041][ T3650] wireguard0: entered promiscuous mode [ 31.406149][ T3650] wireguard0: entered allmulticast mode [ 31.450252][ T3658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.481554][ T3658] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 31.553197][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.572505][ T3666] wireguard0: entered promiscuous mode [ 31.579820][ T3666] wireguard0: entered allmulticast mode [ 31.725061][ T3679] loop1: detected capacity change from 0 to 128 [ 31.748690][ T3679] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.782253][ T3679] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.870637][ T3683] loop0: detected capacity change from 0 to 512 [ 31.913659][ T3683] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.76: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 31.963171][ T3683] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.76: Bad quota inode: 3, type: 0 [ 32.008314][ T3683] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 32.040029][ T3696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 32.064822][ T3683] EXT4-fs (loop0): mount failed [ 32.133368][ T3701] netlink: 'syz.0.85': attribute type 30 has an invalid length. [ 32.234434][ T3705] loop1: detected capacity change from 0 to 1024 [ 32.255802][ T3705] EXT4-fs: Ignoring removed orlov option [ 32.261695][ T3705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.305034][ T3705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.381139][ T3705] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 32.432744][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.686949][ T3724] netlink: 5 bytes leftover after parsing attributes in process `syz.0.94'. [ 32.711887][ T3722] wireguard0: entered promiscuous mode [ 32.717975][ T3722] wireguard0: entered allmulticast mode [ 32.756144][ T3724] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 32.778563][ T3724] 0ªî{X¹¦: entered allmulticast mode [ 32.786094][ T3724] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 32.928981][ T3732] loop2: detected capacity change from 0 to 128 [ 32.935791][ T3732] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.948365][ T3732] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.004130][ T3736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.042578][ T3736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.053744][ T3740] loop2: detected capacity change from 0 to 512 [ 33.073249][ T3740] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.97: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 33.091783][ T3740] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.97: Bad quota inode: 3, type: 0 [ 33.103780][ T3740] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 33.119170][ T3740] EXT4-fs (loop2): mount failed [ 33.149027][ T3736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.183779][ T3749] netlink: 'syz.4.100': attribute type 30 has an invalid length. [ 33.195887][ T3751] loop2: detected capacity change from 0 to 1024 [ 33.203059][ T3751] EXT4-fs: Ignoring removed orlov option [ 33.208803][ T3751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.232362][ T3753] bridge: RTM_NEWNEIGH with invalid ether address [ 33.242098][ T3751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.269154][ T3736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.329236][ T3751] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.357494][ T3764] wireguard0: entered promiscuous mode [ 33.363530][ T3764] wireguard0: entered allmulticast mode [ 33.427622][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.436048][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.461520][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.469853][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.479104][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.520414][ T3769] bridge: RTM_NEWNEIGH with invalid ether address [ 33.572652][ T3776] loop3: detected capacity change from 0 to 128 [ 33.595715][ T3776] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.612476][ T3775] wireguard0: entered promiscuous mode [ 33.618164][ T3775] wireguard0: entered allmulticast mode [ 33.626244][ T3776] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.738028][ T3777] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.786655][ T3783] loop3: detected capacity change from 0 to 512 [ 33.831227][ T3777] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.843236][ T3783] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.113: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 33.871690][ T3783] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.113: Bad quota inode: 3, type: 0 [ 33.908326][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 33.908342][ T29] audit: type=1326 audit(1755730580.251:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ccf8ebe9 code=0x7ffc0000 [ 33.938073][ T29] audit: type=1326 audit(1755730580.251:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb3ccf8ebe9 code=0x7ffc0000 [ 33.961605][ T29] audit: type=1326 audit(1755730580.251:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ccf8ebe9 code=0x7ffc0000 [ 33.985018][ T29] audit: type=1326 audit(1755730580.251:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb3ccf8ebe9 code=0x7ffc0000 [ 34.010428][ T29] audit: type=1326 audit(1755730580.251:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ccf8ebe9 code=0x7ffc0000 [ 34.033953][ T29] audit: type=1326 audit(1755730580.251:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3ccf8ebe9 code=0x7ffc0000 [ 34.057135][ T29] audit: type=1326 audit(1755730580.251:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ccf8ebe9 code=0x7ffc0000 [ 34.080683][ T29] audit: type=1326 audit(1755730580.251:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb3ccf8ebe9 code=0x7ffc0000 [ 34.104131][ T29] audit: type=1326 audit(1755730580.251:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ccf8ebe9 code=0x7ffc0000 [ 34.105947][ T3783] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 34.127364][ T29] audit: type=1326 audit(1755730580.251:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.2.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ccf8ebe9 code=0x7ffc0000 [ 34.151145][ T3802] loop0: detected capacity change from 0 to 1024 [ 34.171197][ T3783] EXT4-fs (loop3): mount failed [ 34.178140][ T3802] EXT4-fs: Ignoring removed orlov option [ 34.178252][ T3802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.201772][ T3777] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.213605][ T3797] ªªªªªª: renamed from vlan0 (while UP) [ 34.213768][ T3802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.277462][ T3777] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.315471][ T3802] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 34.366626][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.377315][ T2175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.386345][ T2175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.417189][ T2175] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.445394][ T2175] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.474292][ T3813] loop2: detected capacity change from 0 to 512 [ 34.527317][ T3813] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.137: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 34.547422][ T3813] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.137: Bad quota inode: 3, type: 0 [ 34.558775][ T3813] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 34.575075][ T3813] EXT4-fs (loop2): mount failed [ 34.638645][ T3830] wireguard0: entered promiscuous mode [ 34.647493][ T3830] wireguard0: entered allmulticast mode [ 34.842272][ T3847] loop3: detected capacity change from 0 to 1024 [ 34.865858][ T3847] EXT4-fs: Ignoring removed orlov option [ 34.871790][ T3847] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.904540][ T3849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.918063][ T3851] ªªªªªª: renamed from vlan0 (while UP) [ 34.925818][ T3847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.984929][ T3847] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 35.011671][ T3849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.028437][ T3863] loop2: detected capacity change from 0 to 512 [ 35.044177][ T3863] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.145: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 35.063691][ T3863] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.145: Bad quota inode: 3, type: 0 [ 35.078166][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.081136][ T3863] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 35.113723][ T3849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.121237][ T3863] EXT4-fs (loop2): mount failed [ 35.177033][ T3849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.280835][ T2175] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.310962][ T2175] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.320505][ T2175] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.329645][ T2175] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.338119][ T3886] netlink: 'syz.2.152': attribute type 49 has an invalid length. [ 35.464361][ T3894] wireguard0: entered promiscuous mode [ 35.470122][ T3894] wireguard0: entered allmulticast mode [ 35.638350][ T3902] vlan2: entered allmulticast mode [ 35.643526][ T3902] dummy0: entered allmulticast mode [ 35.673182][ T3906] ªªªªªª: renamed from vlan0 (while UP) [ 35.797166][ T3897] Set syz1 is full, maxelem 65536 reached [ 35.829195][ T3917] process 'syz.1.164' launched './file0' with NULL argv: empty string added [ 35.874345][ T3915] loop0: detected capacity change from 0 to 8192 [ 35.899162][ T3919] wg2: entered promiscuous mode [ 35.904123][ T3919] wg2: entered allmulticast mode [ 35.914886][ T3925] netlink: 9 bytes leftover after parsing attributes in process `syz.1.168'. [ 35.924421][ T3295] loop0: p1 p2 p4 < > [ 35.933011][ T3295] loop0: p1 start 4261412864 is beyond EOD, truncated [ 35.939958][ T3295] loop0: p2 start 4009754624 is beyond EOD, truncated [ 35.950226][ T3925] 0·: renamed from hsr0 (while UP) [ 35.967759][ T3925] 0·: entered allmulticast mode [ 35.972907][ T3925] hsr_slave_0: entered allmulticast mode [ 35.983793][ T3925] hsr_slave_1: entered allmulticast mode [ 35.995358][ T3915] loop0: p1 p2 p4 < > [ 36.002179][ T3915] loop0: p1 start 4261412864 is beyond EOD, truncated [ 36.006407][ T3925] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 36.009341][ T3915] loop0: p2 start 4009754624 is beyond EOD, truncated [ 36.088610][ T3936] ªªªªªª: renamed from vlan0 (while UP) [ 36.096407][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 36.125098][ T3915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.163'. [ 36.338621][ T3575] udevd[3575]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 36.370087][ T3951] wireguard0: entered promiscuous mode [ 36.376185][ T3951] wireguard0: entered allmulticast mode [ 36.438883][ T3575] udevd[3575]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 36.599917][ T3963] tipc: Started in network mode [ 36.604910][ T3963] tipc: Node identity de280c17de5f, cluster identity 4711 [ 36.612116][ T3963] tipc: Enabled bearer , priority 0 [ 36.631785][ T3962] tipc: Resetting bearer [ 36.700129][ T3944] Set syz1 is full, maxelem 65536 reached [ 36.750811][ T3962] tipc: Disabling bearer [ 36.818067][ T3967] vlan0: entered allmulticast mode [ 36.848188][ T3971] vlan2: entered allmulticast mode [ 36.859586][ T3971] dummy0: entered allmulticast mode [ 36.993514][ T3988] netlink: 32 bytes leftover after parsing attributes in process `syz.3.196'. [ 37.045731][ T3988] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 37.048800][ T3981] loop2: detected capacity change from 0 to 8192 [ 37.053563][ T3988] netlink: 55 bytes leftover after parsing attributes in process `syz.3.196'. [ 37.165773][ T3981] loop2: p1 p2 p4 < > [ 37.170193][ T3981] loop2: p1 start 4261412864 is beyond EOD, truncated [ 37.176982][ T3981] loop2: p2 start 4009754624 is beyond EOD, truncated [ 37.205069][ T3981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 37.263066][ T3981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'. [ 37.349156][ T4001] tipc: Started in network mode [ 37.354125][ T4001] tipc: Node identity 4a112b59b4ea, cluster identity 4711 [ 37.361301][ T4001] tipc: Enabled bearer , priority 0 [ 37.404584][ T4000] tipc: Resetting bearer [ 37.507829][ T4000] tipc: Disabling bearer [ 37.529722][ T4012] mmap: syz.3.207 (4012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.536521][ T3995] Set syz1 is full, maxelem 65536 reached [ 37.584170][ T4010] wireguard0: entered promiscuous mode [ 37.590196][ T4010] wireguard0: entered allmulticast mode [ 37.926821][ T4048] netlink: 9 bytes leftover after parsing attributes in process `syz.4.220'. [ 37.938432][ T4048] 0·: renamed from hsr0 (while UP) [ 37.976575][ T4048] 0·: entered allmulticast mode [ 37.982215][ T4048] hsr_slave_0: entered allmulticast mode [ 37.988112][ T4048] hsr_slave_1: entered allmulticast mode [ 37.997415][ T4048] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 38.016700][ T4057] syz_tun: entered allmulticast mode [ 38.025162][ T4056] syz_tun: left allmulticast mode [ 38.096556][ T4055] tipc: Enabled bearer , priority 0 [ 38.114742][ T4054] tipc: Resetting bearer [ 38.126213][ T4054] tipc: Disabling bearer [ 38.463456][ T4091] wireguard0: entered promiscuous mode [ 38.469718][ T4091] wireguard0: entered allmulticast mode [ 38.518920][ T4094] netlink: 9 bytes leftover after parsing attributes in process `syz.2.236'. [ 38.529975][ T4094] 0·: renamed from hsr0 (while UP) [ 38.545125][ T4094] 0·: entered allmulticast mode [ 38.550175][ T4094] hsr_slave_0: entered allmulticast mode [ 38.558081][ T4094] hsr_slave_1: entered allmulticast mode [ 38.568217][ T4094] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 38.607184][ T4099] syz_tun: entered allmulticast mode [ 38.613752][ T4097] syz_tun: left allmulticast mode [ 38.745175][ T4109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.789734][ T4106] wireguard0: entered promiscuous mode [ 38.796961][ T4106] wireguard0: entered allmulticast mode [ 38.818512][ T4117] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 38.840472][ T4109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.870668][ T4110] tipc: Started in network mode [ 38.875606][ T4110] tipc: Node identity daecdd8b21c, cluster identity 4711 [ 38.882751][ T4110] tipc: Enabled bearer , priority 0 [ 38.896885][ T4107] tipc: Resetting bearer [ 38.907841][ T4107] tipc: Disabling bearer [ 38.922721][ T4109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.978102][ T4109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.015517][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.046735][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.063750][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.078985][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.910345][ T4287] netlink: 'syz.4.255': attribute type 1 has an invalid length. [ 39.924104][ T4287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.935605][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 39.935618][ T29] audit: type=1400 audit(1755730585.826:824): avc: denied { create } for pid=4286 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 39.942476][ T4287] bond1: (slave gretap1): making interface the new active one [ 39.970360][ T4287] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 39.993414][ T29] audit: type=1400 audit(1755730585.826:825): avc: denied { write } for pid=4286 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 40.019624][ T29] audit: type=1400 audit(1755730585.899:826): avc: denied { cpu } for pid=4290 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.063755][ T4293] loop4: detected capacity change from 0 to 512 [ 40.071582][ T4293] journal_path: Non-blockdev passed as './bus' [ 40.077776][ T4293] EXT4-fs: error: could not find journal device path [ 40.117895][ T29] audit: type=1400 audit(1755730585.992:827): avc: denied { connect } for pid=4296 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 40.166876][ T4301] wireguard0: entered promiscuous mode [ 40.172574][ T4301] wireguard0: entered allmulticast mode [ 40.174279][ T29] audit: type=1400 audit(1755730586.047:828): avc: denied { write } for pid=4296 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 40.255868][ T4300] tipc: Started in network mode [ 40.260819][ T4300] tipc: Node identity 46ca18ca7296, cluster identity 4711 [ 40.268110][ T4300] tipc: Enabled bearer , priority 0 [ 40.276492][ T4298] tipc: Resetting bearer [ 40.292983][ T4298] tipc: Disabling bearer [ 40.511455][ T29] audit: type=1326 audit(1755730586.352:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db4e4ebe9 code=0x7ffc0000 [ 40.534732][ T29] audit: type=1326 audit(1755730586.352:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db4e4ebe9 code=0x7ffc0000 [ 40.597052][ T29] audit: type=1326 audit(1755730586.352:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3db4e4ebe9 code=0x7ffc0000 [ 40.620444][ T29] audit: type=1326 audit(1755730586.352:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db4e4ebe9 code=0x7ffc0000 [ 40.643825][ T29] audit: type=1326 audit(1755730586.352:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db4e4ebe9 code=0x7ffc0000 [ 40.711574][ T4342] loop0: detected capacity change from 0 to 512 [ 40.723385][ T4342] journal_path: Non-blockdev passed as './bus' [ 40.729638][ T4342] EXT4-fs: error: could not find journal device path [ 41.052038][ T4402] loop0: detected capacity change from 0 to 512 [ 41.060286][ T4402] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.068051][ T4402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.087835][ T4402] EXT4-fs (loop0): 1 truncate cleaned up [ 41.094200][ T4402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.570134][ T4467] loop1: detected capacity change from 0 to 1024 [ 41.582549][ T4467] EXT4-fs: Ignoring removed bh option [ 41.622529][ T4467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.665420][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.948559][ T4489] syz.4.288 uses obsolete (PF_INET,SOCK_PACKET) [ 42.048819][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.093947][ T4494] loop0: detected capacity change from 0 to 2048 [ 42.170023][ T4494] EXT4-fs (loop0): failed to initialize system zone (-117) [ 42.186524][ T4494] EXT4-fs (loop0): mount failed [ 42.216696][ T4494] geneve2: entered promiscuous mode [ 42.458621][ T4530] netlink: 96 bytes leftover after parsing attributes in process `syz.4.305'. [ 42.498034][ T4533] loop1: detected capacity change from 0 to 1024 [ 42.505603][ T4533] EXT4-fs: Ignoring removed bh option [ 42.529119][ T4533] EXT4-fs: inline encryption not supported [ 42.539348][ T4533] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.556354][ T4533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 42.565309][ T4537] loop3: detected capacity change from 0 to 128 [ 42.584341][ T4533] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.307: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.601859][ T4537] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.616312][ T4533] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.307: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.633018][ T4537] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.651449][ T4551] loop0: detected capacity change from 0 to 512 [ 42.661841][ T4533] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.307: Failed to acquire dquot type 0 [ 42.673470][ T4533] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 42.684201][ T4533] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.307: mark_inode_dirty error [ 42.696620][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.696913][ T4533] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 42.707165][ T4551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.716187][ T4533] EXT4-fs (loop1): 1 orphan inode deleted [ 42.729938][ T4551] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.734452][ T4533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.744496][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.772954][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 42.794680][ T4556] loop3: detected capacity change from 0 to 128 [ 42.834786][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.867358][ T4559] syz.3.315: attempt to access beyond end of device [ 42.867358][ T4559] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 42.881451][ T4559] syz.3.315: attempt to access beyond end of device [ 42.881451][ T4559] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 42.882287][ T4533] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.307: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.954642][ T4559] syz.3.315: attempt to access beyond end of device [ 42.954642][ T4559] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 42.980451][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.995419][ T4570] loop0: detected capacity change from 0 to 512 [ 43.002323][ T4570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.011247][ T4570] EXT4-fs: Ignoring removed i_version option [ 43.017769][ T4559] syz.3.315: attempt to access beyond end of device [ 43.017769][ T4559] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 43.031363][ T4559] syz.3.315: attempt to access beyond end of device [ 43.031363][ T4559] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 43.050155][ T4559] syz.3.315: attempt to access beyond end of device [ 43.050155][ T4559] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 43.060340][ T4570] EXT4-fs (loop0): 1 orphan inode deleted [ 43.064860][ T4559] syz.3.315: attempt to access beyond end of device [ 43.064860][ T4559] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 43.082659][ T4559] syz.3.315: attempt to access beyond end of device [ 43.082659][ T4559] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 43.098111][ T4559] syz.3.315: attempt to access beyond end of device [ 43.098111][ T4559] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 43.111631][ T4559] syz.3.315: attempt to access beyond end of device [ 43.111631][ T4559] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 43.117113][ T4570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.204094][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.256692][ T4581] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.336537][ T4595] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 43.336790][ T4581] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.369574][ T4595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.392594][ T4595] bond1: (slave veth3): Enslaving as an active interface with a down link [ 43.437537][ T4581] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.476160][ T4602] bond1: entered promiscuous mode [ 43.481303][ T4602] bond1: entered allmulticast mode [ 43.490488][ T4602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.514752][ T4602] bond1 (unregistering): Released all slaves [ 43.528509][ T4595] bridge1: entered promiscuous mode [ 43.533755][ T4595] bridge1: entered allmulticast mode [ 43.543422][ T4595] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 43.562909][ T4581] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.690633][ T154] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.702808][ T154] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.721038][ T154] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.774606][ T154] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.876738][ T4633] loop0: detected capacity change from 0 to 164 [ 43.916337][ T4636] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 43.940854][ T4636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 43.963588][ T4636] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 43.971935][ T4636] bond2: (slave batadv1): making interface the new active one [ 43.980608][ T4636] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 44.014254][ T4647] wg2: entered promiscuous mode [ 44.019147][ T4647] wg2: entered allmulticast mode [ 44.074857][ T4654] loop2: detected capacity change from 0 to 512 [ 44.081691][ T4654] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.088697][ T4654] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.100429][ T4654] EXT4-fs (loop2): 1 truncate cleaned up [ 44.106521][ T4654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.256078][ T4658] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.296786][ T4658] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.342752][ T4656] ================================================================== [ 44.351555][ T4656] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 44.359786][ T4656] [ 44.362114][ T4656] write to 0xffff888119852dfc of 4 bytes by task 4654 on cpu 0: [ 44.369991][ T4656] xas_set_mark+0x12b/0x140 [ 44.374660][ T4656] __folio_start_writeback+0x1dd/0x440 [ 44.380104][ T4656] ext4_bio_write_folio+0x5ad/0x9f0 [ 44.385289][ T4656] mpage_process_page_bufs+0x4a1/0x620 [ 44.390732][ T4656] mpage_prepare_extent_to_map+0x786/0xc00 [ 44.396522][ T4656] ext4_do_writepages+0xa05/0x2750 [ 44.401622][ T4656] ext4_writepages+0x176/0x300 [ 44.406365][ T4656] do_writepages+0x1c3/0x310 [ 44.410937][ T4656] file_write_and_wait_range+0x156/0x2c0 [ 44.416556][ T4656] generic_buffers_fsync_noflush+0x45/0x120 [ 44.422435][ T4656] ext4_sync_file+0x1ab/0x690 [ 44.427105][ T4656] vfs_fsync_range+0x10d/0x130 [ 44.431847][ T4656] ext4_buffered_write_iter+0x34f/0x3c0 [ 44.437382][ T4656] ext4_file_write_iter+0xdbf/0xf00 [ 44.442559][ T4656] iter_file_splice_write+0x663/0xa60 [ 44.447914][ T4656] direct_splice_actor+0x153/0x2a0 [ 44.453011][ T4656] splice_direct_to_actor+0x30f/0x680 [ 44.458368][ T4656] do_splice_direct+0xda/0x150 [ 44.463123][ T4656] do_sendfile+0x380/0x650 [ 44.467538][ T4656] __x64_sys_sendfile64+0x105/0x150 [ 44.472716][ T4656] x64_sys_call+0x2bb0/0x2ff0 [ 44.477373][ T4656] do_syscall_64+0xd2/0x200 [ 44.481860][ T4656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.487733][ T4656] [ 44.490033][ T4656] read to 0xffff888119852dfc of 4 bytes by task 4656 on cpu 1: [ 44.497558][ T4656] filemap_write_and_wait_range+0xfc/0x340 [ 44.503374][ T4656] filemap_invalidate_pages+0xa4/0x1a0 [ 44.508812][ T4656] kiocb_invalidate_pages+0x6e/0x80 [ 44.513985][ T4656] __iomap_dio_rw+0x5d4/0x1250 [ 44.518729][ T4656] iomap_dio_rw+0x40/0x90 [ 44.523033][ T4656] ext4_file_write_iter+0xad9/0xf00 [ 44.528212][ T4656] iter_file_splice_write+0x663/0xa60 [ 44.533560][ T4656] direct_splice_actor+0x153/0x2a0 [ 44.538646][ T4656] splice_direct_to_actor+0x30f/0x680 [ 44.544000][ T4656] do_splice_direct+0xda/0x150 [ 44.548762][ T4656] do_sendfile+0x380/0x650 [ 44.553164][ T4656] __x64_sys_sendfile64+0x105/0x150 [ 44.558360][ T4656] x64_sys_call+0x2bb0/0x2ff0 [ 44.563019][ T4656] do_syscall_64+0xd2/0x200 [ 44.567519][ T4656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.573395][ T4656] [ 44.575704][ T4656] value changed: 0x0a000021 -> 0x04000021 [ 44.581400][ T4656] [ 44.583737][ T4656] Reported by Kernel Concurrency Sanitizer on: [ 44.589895][ T4656] CPU: 1 UID: 0 PID: 4656 Comm: syz.2.354 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.599504][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.609547][ T4656] ================================================================== [ 44.620615][ T4658] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.686868][ T4658] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.769207][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.779948][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.790793][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.802167][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.053810][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.