last executing test programs: 2.981945963s ago: executing program 2 (id=536): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 2.951408544s ago: executing program 2 (id=538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 2.916885496s ago: executing program 2 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x14d1, {0x0, 0x0, 0x1}, {0x1, 0xff, 0x1}, 0xfd, 0xfe}, {0x3, 0x3, {0x0, 0xff, 0x4}, {}, 0xfd}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 2.716266664s ago: executing program 1 (id=551): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000003c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1.844818581s ago: executing program 1 (id=579): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) 1.130557342s ago: executing program 0 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 1.083274733s ago: executing program 0 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.064308285s ago: executing program 1 (id=590): sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x4040000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) 1.030553986s ago: executing program 0 (id=592): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.006121407s ago: executing program 1 (id=593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x9a167000) 999.513647ms ago: executing program 0 (id=595): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18002000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000870000008500000006000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 901.624561ms ago: executing program 0 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r2, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 860.460313ms ago: executing program 4 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 766.889717ms ago: executing program 4 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 733.282988ms ago: executing program 4 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_io_uring_setup(0x379b, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x100003, 0xb8}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 669.712991ms ago: executing program 0 (id=602): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x6}, 0x86f4, 0x1, 0x43a1bd76, 0x9, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="c235535a17ac64791bbe00309033", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 641.405622ms ago: executing program 2 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xfd, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x200090, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) 590.088785ms ago: executing program 2 (id=604): vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, 0x13) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="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", @ANYBLOB="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", @ANYRESOCT=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 439.244581ms ago: executing program 3 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 435.183551ms ago: executing program 4 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f00000002c0), 0xc, &(0x7f0000000240)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x1000000, 0x27dfdbfd, {}, [{0x4}]}, 0x18}}, 0x0) 381.017274ms ago: executing program 4 (id=608): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 321.881966ms ago: executing program 3 (id=609): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x7, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 298.059947ms ago: executing program 3 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) 276.239278ms ago: executing program 1 (id=611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 159.638462ms ago: executing program 1 (id=612): fsopen(0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000100)='./file1\x00', 0x201001a, &(0x7f0000000080)=ANY=[], 0x1, 0x740, &(0x7f0000000140)="$eJzs3U9v2/b5APBHjt24LtBf8dtQFFmasmkPCZA6ktw6MHrSZMphK0sGKRcJdhiKJhmCOu3QbMDiHYpeuu1F7NDr3kTfxG57Db3vsnkg9cd/YstZklpF9vkY9fcr8iG/DymVj6lQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUWuv1+uNWnSz3vat5GTt9by/OWX+eH3fH2qmjBtRK/+LxcV4YzjpjZ/vz369/HU5Lg4fXYzFslmM3Vdef+3Dn83PjZefktCZePho9/NPd3bufjXrRGZkI+1lRT/bbG2kSVb0k7XV1fr1m50i6WTdtLhdDNLNpJ2nrUE/T660ryaNtbWVJF2+3d/ubay3uul44o33mvX6avLR8lbayot+7/pHy0X7ZtbtZr2NKqacXcbcSH7zZf5xNkgGaWszSe7d37m7clqSZVDjSYKapwU1681mo9FsNlY/WPvgRr0+36wvxqEJ9SPi0CJJvT4/ftHGa8PX9kljvRQnz//7aYlypuYOPliMKc9ccuBQCTM3N6r/0Y0serEdtyI59qcd65FHPzZPmD/yfcQfq871dOq4Zf1eHNX/cZV/Y3/2hfLX5fH/SpdOqv8n5HJ2Pw/jUezG5/Fp7MRO3I2vZp7R2f5sRBq9yKKIfmSxGa1qSjKaksRarMZq1OPXcTM6UUQSnciiG2kUcTuKGERavaLakUcarRhEP/JI4kq042ok0Yi1WIuVSCKN5bgd/diOXmzEerSqtdyL+9V+X5mS4ySo8SRBzSlBo2JevvAq84/9QVCvz4/mHVf/b0zq/1+r+vDw3bOoTszE+SOPz407z+/gDc9ob1z/Y2/v33ulWWcEAAAAPG+16t332qWXJo87WTf91YyzAgAAAJ6n6lKmi2WzUPbejFrn3KGAl2aUGAAAAPDc1OLS6F2ApXhr/H7AsKk79wcAAIAXQ3W+f6lslsreW1Gb3AmlPgmam2GCAAAAwDP78/499nfjyD12x7cyLU//y37tm61b79YetMpprQejjwmcO7rGQedC7dXRSqpmdX70qJ1erI3ufjm5CeYPo+beaff6r+X5wrMmsP9Oxtt3hu2dyZxqlKVO1k2X2/3uh41otV6dG6S3Br//4v4fIsrR/9LbfLUW9+7v3F3+7MudO1Uu35Rr+ebBgcsmnjSX38Wbw5g3z8djW7wbtYUyl/po3KXhuPWD2z+3/+yUXn6CMb8dx1xeGrZLh7d/sRyzsXzS1i/Vzo+WH235K5MN/W+2/Ntx8DtX3hk2x2TRnJJFtS+aB/f/kX3xRFnEO6dnsTLOYv/OmIezWHnGLABm5d6kCh2uuwuTe+xXdfdf/3di3ZmYcpQ7m+r+bVwZxly5UB1Y5y8cc0SvH1tX9s4dqbFPX9f/FleHMVfHwSfV2DxfiIjxuI1q3O/KBb47cdyiO94hD34b1+ce7b53v4q9+0WzubJaf79e/6AZC9VmjJoy038uHs305VB7AP6nXa6u/5/2HTvHR5zbL8219+Ptsv3FgbPqsiZNKt7/Ty4pWI7P4svYiTtxrfq0QXXFwbHjLh24DOFaXB4le/xZ69KBb3i5dspZ3TB2/LfLk8QOv14GAF4kl0+pw5P6P/layzLifHxYldDhufu1A+fdi/vn3eN/PzhSy6efHR+s5QDAjyPNf6gtDf5Uy8sHjbW1RmtwM03yfvvjJM/WN9Ik6w3SvH2z1dtIk628P+i3+92y80m2nhZJsb211c8HSaefJ1v9Yvye8uir34t0s9UbZO1iq5u2ijRp93uDVnuQrGdFO9na/mU3K77e29vrzEVSbKXtrJO1W4Os30uK/nbeTpeTpEjTUeDNNE+y9bQ3yDpZ2e0lW3l2PvLbySf97vZmmqynRTvPtgb9vMpmPFbW6/TzzWq1y7Pd1QDwk/Hw0e7nn+7s3P3q+M5inDir6vxj+uLDzqy3EQA4bFqVfuzqMwAAAAAAAAAAAAAAYCZO+fzf03dqR6bMRcSPNdYL19n7+kzGGn/AY3bPzrmfyA5/vPPdgSnJc1zzyxHxNIvXnmqpkzoLEXFKzIwPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwjP8EAAD//72kP3M=") 159.405332ms ago: executing program 3 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x2, 0x40, 0x1, 0x6, 0x3ff, 0xc2, 0x9, 0x1}}}}]}, 0x58}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 144.203073ms ago: executing program 2 (id=614): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x140, 0x0) 60.465367ms ago: executing program 3 (id=615): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 12.779109ms ago: executing program 4 (id=616): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x2d}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 0s ago: executing program 3 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r3, &(0x7f0000000340), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 28.896264][ T29] audit: type=1400 audit(1764196150.817:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.919287][ T29] audit: type=1400 audit(1764196150.837:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.920200][ T3304] cgroup: Unknown subsys name 'net' [ 28.946921][ T29] audit: type=1400 audit(1764196150.867:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.060522][ T3304] cgroup: Unknown subsys name 'cpuset' [ 29.066809][ T3304] cgroup: Unknown subsys name 'rlimit' [ 29.237071][ T29] audit: type=1400 audit(1764196151.157:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.261706][ T29] audit: type=1400 audit(1764196151.157:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.282188][ T29] audit: type=1400 audit(1764196151.157:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.302578][ T29] audit: type=1400 audit(1764196151.157:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.310538][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.322830][ T29] audit: type=1400 audit(1764196151.167:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.322853][ T29] audit: type=1400 audit(1764196151.167:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.379536][ T29] audit: type=1400 audit(1764196151.297:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.434986][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.362414][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.399625][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.456931][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.484114][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.491298][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.498447][ T3314] bridge_slave_0: entered allmulticast mode [ 31.504884][ T3314] bridge_slave_0: entered promiscuous mode [ 31.513232][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.520358][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.527491][ T3314] bridge_slave_1: entered allmulticast mode [ 31.533865][ T3314] bridge_slave_1: entered promiscuous mode [ 31.569351][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.582590][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 31.601481][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.618218][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.627410][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.634498][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.641700][ T3313] bridge_slave_0: entered allmulticast mode [ 31.648121][ T3313] bridge_slave_0: entered promiscuous mode [ 31.674111][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.681232][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.688362][ T3313] bridge_slave_1: entered allmulticast mode [ 31.694928][ T3313] bridge_slave_1: entered promiscuous mode [ 31.712695][ T3314] team0: Port device team_slave_0 added [ 31.731744][ T3314] team0: Port device team_slave_1 added [ 31.744319][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.751490][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.758672][ T3315] bridge_slave_0: entered allmulticast mode [ 31.765106][ T3315] bridge_slave_0: entered promiscuous mode [ 31.781162][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.799328][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.806396][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.813584][ T3315] bridge_slave_1: entered allmulticast mode [ 31.820014][ T3315] bridge_slave_1: entered promiscuous mode [ 31.835174][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.842131][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.868068][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.879583][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.889217][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.896305][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.903533][ T3323] bridge_slave_0: entered allmulticast mode [ 31.909843][ T3323] bridge_slave_0: entered promiscuous mode [ 31.925949][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.933094][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.940193][ T3318] bridge_slave_0: entered allmulticast mode [ 31.946782][ T3318] bridge_slave_0: entered promiscuous mode [ 31.953384][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.960356][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.986350][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.001629][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.008703][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.015857][ T3323] bridge_slave_1: entered allmulticast mode [ 32.022358][ T3323] bridge_slave_1: entered promiscuous mode [ 32.033477][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.040650][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.047723][ T3318] bridge_slave_1: entered allmulticast mode [ 32.054261][ T3318] bridge_slave_1: entered promiscuous mode [ 32.077491][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.092171][ T3313] team0: Port device team_slave_0 added [ 32.098806][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.113483][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.129006][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.138831][ T3313] team0: Port device team_slave_1 added [ 32.146004][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.174178][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.192901][ T3315] team0: Port device team_slave_0 added [ 32.200504][ T3314] hsr_slave_0: entered promiscuous mode [ 32.206313][ T3314] hsr_slave_1: entered promiscuous mode [ 32.221792][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.228727][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.254694][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.266064][ T3315] team0: Port device team_slave_1 added [ 32.277318][ T3318] team0: Port device team_slave_0 added [ 32.283215][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.290202][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.316231][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.340088][ T3323] team0: Port device team_slave_0 added [ 32.346523][ T3318] team0: Port device team_slave_1 added [ 32.357906][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.364959][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.390939][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.402273][ T3323] team0: Port device team_slave_1 added [ 32.422071][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.429003][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.454934][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.481440][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.488382][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.514316][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.539665][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.546608][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.572665][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.591207][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.598154][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.624069][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.636926][ T3313] hsr_slave_0: entered promiscuous mode [ 32.642829][ T3313] hsr_slave_1: entered promiscuous mode [ 32.648574][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 32.654339][ T3313] Cannot create hsr debugfs directory [ 32.676839][ T3315] hsr_slave_0: entered promiscuous mode [ 32.682823][ T3315] hsr_slave_1: entered promiscuous mode [ 32.688622][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.694447][ T3315] Cannot create hsr debugfs directory [ 32.700136][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.707073][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.733106][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.808657][ T3318] hsr_slave_0: entered promiscuous mode [ 32.814711][ T3318] hsr_slave_1: entered promiscuous mode [ 32.820761][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 32.826489][ T3318] Cannot create hsr debugfs directory [ 32.843570][ T3323] hsr_slave_0: entered promiscuous mode [ 32.849460][ T3323] hsr_slave_1: entered promiscuous mode [ 32.855317][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 32.861045][ T3323] Cannot create hsr debugfs directory [ 32.974826][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.983203][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.003085][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.014046][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.046196][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.056206][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.067875][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.077316][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.111051][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.121800][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.131243][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.145964][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.164282][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.183313][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.197366][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.210601][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.219450][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.239766][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.250095][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.257135][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.265833][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.279987][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.290413][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.297473][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.307062][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.324882][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.338259][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.360784][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.377218][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.384303][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.406887][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.413941][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.425137][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.454544][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.471355][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.481730][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.514214][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.526060][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.539463][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.551296][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.563212][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.573402][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.580500][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.597295][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.604434][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.613230][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.620334][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.633694][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.644567][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.662335][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.669379][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.679177][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.686235][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.695063][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.702122][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.763311][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.792541][ T3314] veth0_vlan: entered promiscuous mode [ 33.806924][ T3314] veth1_vlan: entered promiscuous mode [ 33.836002][ T3314] veth0_macvtap: entered promiscuous mode [ 33.860302][ T3314] veth1_macvtap: entered promiscuous mode [ 33.884332][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.895008][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.903996][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.916246][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.928366][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.960024][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.990368][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.010307][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.030132][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.044226][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 34.044238][ T29] audit: type=1400 audit(1764196155.967:81): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.mGp7Mz/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.054061][ T3313] veth0_vlan: entered promiscuous mode [ 34.074616][ T29] audit: type=1400 audit(1764196155.967:82): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.102100][ T29] audit: type=1400 audit(1764196155.967:83): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.mGp7Mz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.105598][ T3323] veth0_vlan: entered promiscuous mode [ 34.127426][ T29] audit: type=1400 audit(1764196155.967:84): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.154619][ T29] audit: type=1400 audit(1764196155.967:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.mGp7Mz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.174353][ T3313] veth1_vlan: entered promiscuous mode [ 34.181278][ T29] audit: type=1400 audit(1764196155.967:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.mGp7Mz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.197468][ T3318] veth0_vlan: entered promiscuous mode [ 34.214085][ T29] audit: type=1400 audit(1764196155.967:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.229252][ T3315] veth0_vlan: entered promiscuous mode [ 34.246992][ T3315] veth1_vlan: entered promiscuous mode [ 34.255414][ T3323] veth1_vlan: entered promiscuous mode [ 34.261896][ T29] audit: type=1400 audit(1764196156.187:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.278120][ T3318] veth1_vlan: entered promiscuous mode [ 34.285412][ T29] audit: type=1400 audit(1764196156.187:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.302502][ T3318] veth0_macvtap: entered promiscuous mode [ 34.321848][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.334399][ T3313] veth0_macvtap: entered promiscuous mode [ 34.349052][ T3313] veth1_macvtap: entered promiscuous mode [ 34.358527][ T3315] veth0_macvtap: entered promiscuous mode [ 34.365931][ T3318] veth1_macvtap: entered promiscuous mode [ 34.376141][ T29] audit: type=1400 audit(1764196156.297:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.383159][ T3315] veth1_macvtap: entered promiscuous mode [ 34.415119][ T3323] veth0_macvtap: entered promiscuous mode [ 34.424149][ T3482] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 34.429173][ T3323] veth1_macvtap: entered promiscuous mode [ 34.440971][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.456731][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.472679][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.480915][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.491294][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.516151][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.523542][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.534229][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.541615][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.558226][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.586187][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.621005][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.634122][ T1000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.651503][ T1000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.678653][ T1000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.709065][ T1000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.724726][ T1000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.742153][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.750633][ T3501] vhci_hcd: invalid port number 9 [ 34.764150][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.780070][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.789526][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.798449][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.827422][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.861048][ T3514] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 34.869018][ T3507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 34.869508][ T3514] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 34.887493][ T3514] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 34.945065][ T3514] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 34.973611][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.042635][ T3533] netlink: 'syz.2.21': attribute type 4 has an invalid length. [ 35.050327][ T3533] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21'. [ 35.104497][ T3533] .`: renamed from bond0 (while UP) [ 35.114214][ T3539] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 35.136726][ T3541] netlink: 'syz.4.25': attribute type 3 has an invalid length. [ 35.144424][ T3541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 35.212385][ T3546] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 35.236538][ T3546] vhci_hcd: invalid port number 96 [ 35.241795][ T3546] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 35.567528][ T3583] netlink: 'syz.4.44': attribute type 15 has an invalid length. [ 35.593963][ T3585] netlink: 76 bytes leftover after parsing attributes in process `syz.4.45'. [ 35.871531][ T3593] capability: warning: `syz.4.48' uses 32-bit capabilities (legacy support in use) [ 36.162334][ T3608] loop1: detected capacity change from 0 to 512 [ 36.171889][ T3608] ======================================================= [ 36.171889][ T3608] WARNING: The mand mount option has been deprecated and [ 36.171889][ T3608] and is ignored by this kernel. Remove the mand [ 36.171889][ T3608] option from the mount to silence this warning. [ 36.171889][ T3608] ======================================================= [ 36.210852][ T3608] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.262516][ T3608] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 36.270564][ T3608] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 36.278924][ T3608] System zones: 0-1, 15-15, 18-18, 34-34 [ 36.287772][ T3608] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.294508][ T3608] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 36.309092][ T3608] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 36.316621][ T3608] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.54: bg 0: block 40: padding at end of block bitmap is not set [ 36.330855][ T3608] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 36.339882][ T3608] EXT4-fs (loop1): 1 truncate cleaned up [ 36.345985][ T3608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.371700][ T3608] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.54: bad symlink. [ 36.394596][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.425843][ T3628] syzkaller1: entered promiscuous mode [ 36.431529][ T3628] syzkaller1: entered allmulticast mode [ 37.097334][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 37.333516][ T3694] loop2: detected capacity change from 0 to 128 [ 37.341878][ T3696] Zero length message leads to an empty skb [ 37.422215][ T3703] syz.2.92: attempt to access beyond end of device [ 37.422215][ T3703] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 37.422278][ T3702] lo speed is unknown, defaulting to 1000 [ 37.445143][ T3705] capability: warning: `syz.3.96' uses deprecated v2 capabilities in a way that may be insecure [ 37.445538][ T3702] lo speed is unknown, defaulting to 1000 [ 37.462822][ T3702] lo speed is unknown, defaulting to 1000 [ 37.468968][ T3702] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.477080][ T3702] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 37.490598][ T3702] lo speed is unknown, defaulting to 1000 [ 37.505091][ T3702] lo speed is unknown, defaulting to 1000 [ 37.511442][ T3702] lo speed is unknown, defaulting to 1000 [ 37.517463][ T3702] lo speed is unknown, defaulting to 1000 [ 37.521020][ T3703] syz.2.92: attempt to access beyond end of device [ 37.521020][ T3703] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 37.524223][ T3702] lo speed is unknown, defaulting to 1000 [ 37.563987][ T3703] syz.2.92: attempt to access beyond end of device [ 37.563987][ T3703] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 37.604597][ T3703] syz.2.92: attempt to access beyond end of device [ 37.604597][ T3703] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 37.637484][ T3703] syz.2.92: attempt to access beyond end of device [ 37.637484][ T3703] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 37.664966][ T3714] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 37.834603][ T3728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'. [ 37.843694][ T3728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'. [ 37.888116][ T3732] veth0_vlan: entered allmulticast mode [ 37.945951][ T3739] ÿÿÿÿÿÿ: renamed from vlan1 [ 38.023117][ T3743] 9pnet_fd: Insufficient options for proto=fd [ 38.498473][ T3764] bond0: (slave bond_slave_0): Releasing backup interface [ 38.560012][ T3766] hub 2-0:1.0: USB hub found [ 38.565895][ T3766] hub 2-0:1.0: 8 ports detected [ 38.641472][ T3773] loop3: detected capacity change from 0 to 512 [ 38.671569][ T3773] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.684738][ T3773] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.740039][ T3773] EXT4-fs (loop3): 1 orphan inode deleted [ 38.745820][ T3773] EXT4-fs (loop3): 1 truncate cleaned up [ 38.778374][ T3773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.841897][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.912700][ T3784] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3784 comm=syz.2.127 [ 38.925143][ T3784] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3784 comm=syz.2.127 [ 38.962329][ T3788] mmap: syz.2.129 (3788) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.066101][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 39.066114][ T29] audit: type=1400 audit(1764196160.987:261): avc: denied { create } for pid=3797 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.098523][ T29] audit: type=1400 audit(1764196160.987:262): avc: denied { write } for pid=3797 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.167486][ T3806] loop0: detected capacity change from 0 to 512 [ 39.188491][ T3806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.236235][ T3815] loop2: detected capacity change from 0 to 164 [ 39.236572][ T3806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.262977][ T3806] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.273487][ T29] audit: type=1400 audit(1764196161.187:263): avc: denied { mount } for pid=3812 comm="syz.2.133" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 39.314120][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.335545][ T29] audit: type=1400 audit(1764196161.227:264): avc: denied { write } for pid=3805 comm="syz.0.132" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.350055][ T3815] syz.2.133: attempt to access beyond end of device [ 39.350055][ T3815] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 39.357585][ T29] audit: type=1400 audit(1764196161.227:265): avc: denied { open } for pid=3805 comm="syz.0.132" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.383440][ T3815] syz.2.133: attempt to access beyond end of device [ 39.383440][ T3815] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 39.394091][ T29] audit: type=1400 audit(1764196161.227:266): avc: denied { read } for pid=3805 comm="syz.0.132" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.456745][ T3821] only policy match revision 0 supported [ 39.456758][ T3821] unable to load match [ 39.474925][ T29] audit: type=1400 audit(1764196161.397:267): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 39.505311][ T3824] loop2: detected capacity change from 0 to 512 [ 39.513771][ T3824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.533657][ T3824] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.575374][ T3824] EXT4-fs (loop2): 1 truncate cleaned up [ 39.602511][ T3824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.623670][ T29] audit: type=1400 audit(1764196161.547:268): avc: denied { setattr } for pid=3823 comm="syz.2.136" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.671931][ T3828] loop1: detected capacity change from 0 to 4096 [ 39.699265][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.709076][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.750188][ T29] audit: type=1400 audit(1764196161.567:269): avc: denied { remove_name } for pid=3823 comm="syz.2.136" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.772684][ T29] audit: type=1400 audit(1764196161.567:270): avc: denied { unlink } for pid=3823 comm="syz.2.136" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.165865][ T3884] netlink: 59 bytes leftover after parsing attributes in process `syz.3.152'. [ 40.281787][ T3898] loop3: detected capacity change from 0 to 512 [ 40.309471][ T3898] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.340122][ T3898] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.155: bad orphan inode 131083 [ 40.355089][ T3898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.404116][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.442415][ T3917] loop0: detected capacity change from 0 to 128 [ 40.462657][ T3917] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.479657][ T3917] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.547393][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.562830][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.839254][ T3980] netlink: 'syz.0.172': attribute type 4 has an invalid length. [ 41.067780][ T4014] Driver unsupported XDP return value 0 on prog (id 126) dev N/A, expect packet loss! [ 41.093097][ T4016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4016 comm=syz.3.179 [ 41.105531][ T4016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4016 comm=syz.3.179 [ 41.130342][ T4023] loop1: detected capacity change from 0 to 512 [ 41.155750][ T4019] loop0: detected capacity change from 0 to 2048 [ 41.172510][ T4023] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.189421][ T4023] EXT4-fs (loop1): 1 truncate cleaned up [ 41.196912][ T4023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.275379][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.331325][ T4019] Alternate GPT is invalid, using primary GPT. [ 41.337774][ T4019] loop0: p2 p3 p7 [ 41.354199][ T4012] Set syz1 is full, maxelem 65536 reached [ 41.370658][ T4043] bridge0: port 3(vlan2) entered blocking state [ 41.376992][ T4043] bridge0: port 3(vlan2) entered disabled state [ 41.392394][ T4043] vlan2: entered allmulticast mode [ 41.397531][ T4043] bridge0: entered allmulticast mode [ 41.407709][ T4043] vlan2: left allmulticast mode [ 41.412690][ T4043] bridge0: left allmulticast mode [ 41.624350][ T4079] loop1: detected capacity change from 0 to 512 [ 41.653530][ T4079] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 41.717426][ T4079] netlink: 124 bytes leftover after parsing attributes in process `syz.1.190'. [ 41.726424][ T4079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.190'. [ 41.861147][ T1000] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.024768][ T4134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 42.034357][ T4139] netlink: 'syz.4.204': attribute type 4 has an invalid length. [ 42.089957][ T10] lo speed is unknown, defaulting to 1000 [ 42.095739][ T10] syz2: Port: 1 Link DOWN [ 42.223369][ T4159] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 42.265265][ T4163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.220'. [ 42.384308][ T4176] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.226'. [ 42.394154][ T4176] netlink: zone id is out of range [ 42.399351][ T4176] netlink: zone id is out of range [ 42.426735][ T4176] netlink: set zone limit has 8 unknown bytes [ 42.449979][ T4177] loop2: detected capacity change from 0 to 2048 [ 42.519829][ T4177] Alternate GPT is invalid, using primary GPT. [ 42.526244][ T4177] loop2: p2 p3 p7 [ 42.695996][ T4172] Set syz1 is full, maxelem 65536 reached [ 42.775211][ T4186] netlink: 96 bytes leftover after parsing attributes in process `syz.2.230'. [ 42.845697][ T4194] loop4: detected capacity change from 0 to 2048 [ 42.862583][ T4193] vhci_hcd: invalid port number 9 [ 42.907130][ T4194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.016206][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.052070][ T4209] loop2: detected capacity change from 0 to 512 [ 43.140907][ T4209] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 43.159392][ T4209] System zones: 0-2, 18-18, 34-34 [ 43.174818][ T4209] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 43.189406][ T4209] EXT4-fs (loop2): Remounting filesystem read-only [ 43.196452][ T4209] EXT4-fs (loop2): 1 truncate cleaned up [ 43.202771][ T4209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.215473][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.226028][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.236988][ T4209] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.248143][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.306201][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.939595][ T4114] Bluetooth: hci0: command 0x1003 tx timeout [ 43.939631][ T3505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.130335][ T4260] loop4: detected capacity change from 0 to 512 [ 44.147601][ T4260] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 44.169705][ T4260] netlink: 124 bytes leftover after parsing attributes in process `syz.4.261'. [ 44.178754][ T4260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.261'. [ 44.265706][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 44.265723][ T29] audit: type=1400 audit(1764196166.187:314): avc: denied { read } for pid=4263 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.399920][ T4270] futex_wake_op: syz.3.266 tries to shift op by 32; fix this program [ 44.408461][ T29] audit: type=1400 audit(1764196166.327:315): avc: denied { ioctl } for pid=4268 comm="syz.3.266" path="socket:[7314]" dev="sockfs" ino=7314 ioctlcmd=0x8b33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.458980][ T4274] loop3: detected capacity change from 0 to 512 [ 44.460989][ T4272] smc: net device bond0 applied user defined pnetid SYZ0 [ 44.478255][ T29] audit: type=1400 audit(1764196166.357:316): avc: denied { create } for pid=4269 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.498145][ T29] audit: type=1400 audit(1764196166.367:317): avc: denied { bind } for pid=4269 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.512046][ T4272] smc: net device bond0 erased user defined pnetid SYZ0 [ 44.519364][ T29] audit: type=1400 audit(1764196166.367:318): avc: denied { connect } for pid=4269 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.544641][ T29] audit: type=1400 audit(1764196166.367:319): avc: denied { write } for pid=4269 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.585241][ T4274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.623752][ T4274] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.639391][ T4291] syz.4.273 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.702881][ T29] audit: type=1400 audit(1764196166.597:320): avc: denied { append } for pid=4273 comm="syz.3.268" path="/76/file1/hugetlb.2MB.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.795483][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.804831][ T4297] syz.4.277 (4297) used greatest stack depth: 10160 bytes left [ 44.841106][ T29] audit: type=1400 audit(1764196166.757:321): avc: denied { relabelfrom } for pid=4300 comm="syz.3.279" name="NETLINK" dev="sockfs" ino=7358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.865216][ T29] audit: type=1400 audit(1764196166.767:322): avc: denied { relabelto } for pid=4300 comm="syz.3.279" name="NETLINK" dev="sockfs" ino=7358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 44.939186][ T29] audit: type=1400 audit(1764196166.857:323): avc: denied { kexec_image_load } for pid=4303 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 45.056370][ T4314] netlink: 96 bytes leftover after parsing attributes in process `syz.2.285'. [ 45.397920][ T4340] syz.0.299 (4340) used greatest stack depth: 9792 bytes left [ 45.476004][ T4366] syz.4.309 uses obsolete (PF_INET,SOCK_PACKET) [ 45.854682][ T4383] loop3: detected capacity change from 0 to 512 [ 45.867672][ T4383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.887092][ T4383] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 45.903671][ T4383] EXT4-fs (loop3): 1 truncate cleaned up [ 45.909889][ T4383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.938714][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.998472][ T4389] loop4: detected capacity change from 0 to 4096 [ 46.021027][ T4389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.041405][ T4392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.055240][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.104238][ T4392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.131890][ T4400] wg2: entered promiscuous mode [ 46.136780][ T4400] wg2: entered allmulticast mode [ 46.153264][ T4392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.208797][ T4406] SELinux: failed to load policy [ 46.233647][ T4392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.258548][ T4415] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.291135][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.298290][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.327965][ T4417] wg2: left promiscuous mode [ 46.332849][ T4417] wg2: left allmulticast mode [ 46.365572][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.381701][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.442321][ T1000] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.457100][ T4423] lo speed is unknown, defaulting to 1000 [ 46.465299][ T1000] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.475153][ T1000] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.496865][ T1000] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.587440][ T1000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.605322][ T1000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.635631][ T4441] veth0: entered promiscuous mode [ 46.645021][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 46.658394][ T4444] ------------[ cut here ]------------ [ 46.664353][ T4444] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 46.682598][ T4444] WARNING: CPU: 0 PID: 4444 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 46.692931][ T4444] Modules linked in: [ 46.696908][ T4444] CPU: 0 UID: 0 PID: 4444 Comm: syz.0.342 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.706610][ T4444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.716722][ T4444] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 46.723050][ T4444] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 f2 f6 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 46.742726][ T4444] RSP: 0018:ffffc900104c7408 EFLAGS: 00010282 [ 46.748825][ T4444] RAX: 7cbee37281ee6600 RBX: ffff88810a5e3ae0 RCX: 0000000000080000 [ 46.756830][ T4444] RDX: ffffc90001d82000 RSI: 0000000000005e37 RDI: 0000000000005e38 [ 46.764864][ T4444] RBP: 0000000000000000 R08: 0001c900104c7257 R09: 0000000000000000 [ 46.772862][ T4444] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88810a5e3aa0 [ 46.780857][ T4444] R13: ffff8881264a0000 R14: ffff8881264a0000 R15: ffff88810a5e3ad8 [ 46.788908][ T4444] FS: 00007f7e546376c0(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000 [ 46.797868][ T4444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.804475][ T4444] CR2: ffffffff93000000 CR3: 000000011b5e4000 CR4: 00000000003506f0 [ 46.812539][ T4444] Call Trace: [ 46.816019][ T4444] [ 46.819047][ T4444] reg_set_min_max+0x215/0x260 [ 46.823920][ T4444] check_cond_jmp_op+0x130d/0x19e0 [ 46.829075][ T4444] do_check+0x3363/0x8460 [ 46.833469][ T4444] do_check_common+0xc5e/0x12b0 [ 46.838343][ T4444] bpf_check+0xaaae/0xd9d0 [ 46.842844][ T4444] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 46.848928][ T4444] ? alloc_pages_bulk_noprof+0x4a6/0x530 [ 46.854692][ T4444] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 46.860650][ T4444] ? pcpu_block_update+0x232/0x3b0 [ 46.865814][ T4444] ? _find_next_zero_bit+0x64/0xa0 [ 46.871009][ T4444] ? pcpu_block_update+0x24e/0x3b0 [ 46.876128][ T4444] ? pcpu_block_refresh_hint+0x157/0x170 [ 46.881880][ T4444] ? pcpu_block_refresh_hint+0x157/0x170 [ 46.887572][ T4444] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 46.893681][ T4444] ? css_rstat_updated+0xb7/0x240 [ 46.898766][ T4444] ? __rcu_read_unlock+0x4f/0x70 [ 46.903742][ T4444] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 46.909597][ T4444] ? bpf_prog_alloc+0x5b/0x150 [ 46.914389][ T4444] ? pcpu_alloc_noprof+0xd29/0x1250 [ 46.919681][ T4444] ? should_fail_ex+0x30/0x280 [ 46.924528][ T4444] ? should_failslab+0x8c/0xb0 [ 46.929314][ T4444] ? __kmalloc_noprof+0x2a2/0x570 [ 46.934539][ T4444] ? security_bpf_prog_load+0x60/0x140 [ 46.940082][ T4444] ? selinux_bpf_prog_load+0xad/0xd0 [ 46.945373][ T4444] ? security_bpf_prog_load+0x9e/0x140 [ 46.951014][ T4444] bpf_prog_load+0xf6e/0x1100 [ 46.955808][ T4444] ? security_bpf+0x2b/0x90 [ 46.960457][ T4444] __sys_bpf+0x469/0x7c0 [ 46.964786][ T4444] __x64_sys_bpf+0x41/0x50 [ 46.969205][ T4444] x64_sys_call+0x2aee/0x3000 [ 46.973900][ T4444] do_syscall_64+0xd2/0x200 [ 46.978437][ T4444] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.984554][ T4444] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.990435][ T4444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.996330][ T4444] RIP: 0033:0x7f7e55bcf749 [ 47.000757][ T4444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.020385][ T4444] RSP: 002b:00007f7e54637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.028864][ T4444] RAX: ffffffffffffffda RBX: 00007f7e55e25fa0 RCX: 00007f7e55bcf749 [ 47.036972][ T4444] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 47.044995][ T4444] RBP: 00007f7e55c53f91 R08: 0000000000000000 R09: 0000000000000000 [ 47.053024][ T4444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.062733][ T4444] R13: 00007f7e55e26038 R14: 00007f7e55e25fa0 R15: 00007ffcd331dcd8 [ 47.071998][ T4444] [ 47.075026][ T4444] ---[ end trace 0000000000000000 ]--- [ 47.080836][ T1000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.100594][ T4441] veth0 (unregistering): left promiscuous mode [ 47.112217][ T1000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.160632][ C1] hrtimer: interrupt took 29791 ns [ 47.247595][ T4455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4455 comm=syz.1.347 [ 47.486185][ T4475] loop0: detected capacity change from 0 to 1024 [ 47.507000][ T4479] lo speed is unknown, defaulting to 1000 [ 47.520047][ T4475] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 47.551881][ T4475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 47.564163][ T4475] EXT4-fs (loop0): failed to initialize system zone (-117) [ 47.571819][ T4475] EXT4-fs (loop0): mount failed [ 47.664574][ T4501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 47.674645][ T4501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.366'. [ 47.684596][ T4499] netlink: 'syz.2.364': attribute type 10 has an invalid length. [ 47.692686][ T4499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.364'. [ 47.720053][ T4499] team0: Port device geneve1 added [ 47.840833][ T4517] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4517 comm=syz.3.374 [ 47.853402][ T4517] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4517 comm=syz.3.374 [ 47.914708][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 47.923727][ T4522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.377'. [ 47.932741][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 47.942034][ T4522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.377'. [ 47.951094][ T4522] netlink: 'syz.3.377': attribute type 6 has an invalid length. [ 48.025667][ T4535] netlink: 'syz.0.381': attribute type 10 has an invalid length. [ 48.033566][ T4535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.381'. [ 48.046697][ T4535] team0: Port device geneve1 added [ 48.137342][ T4546] syz_tun: entered allmulticast mode [ 48.144144][ T4545] syz_tun: left allmulticast mode [ 48.331537][ T4557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.391'. [ 48.479019][ T4564] loop3: detected capacity change from 0 to 512 [ 48.520398][ T4564] EXT4-fs: inline encryption not supported [ 48.537438][ T4564] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 48.578493][ T4564] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.394: invalid indirect mapped block 2683928664 (level 1) [ 48.593918][ T4564] EXT4-fs (loop3): 1 truncate cleaned up [ 48.604404][ T4564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.622482][ T4564] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.394: Invalid block bitmap block 3 in block_group 0 [ 48.635995][ T4586] loop0: detected capacity change from 0 to 512 [ 48.647969][ T4586] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.658410][ T4585] lo speed is unknown, defaulting to 1000 [ 48.664453][ T4564] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.394: Invalid block bitmap block 3 in block_group 0 [ 48.667331][ T4586] EXT4-fs (loop0): 1 truncate cleaned up [ 48.684070][ T4586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.696650][ T4564] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.394: Invalid block bitmap block 3 in block_group 0 [ 48.730758][ T4564] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.394: Invalid block bitmap block 3 in block_group 0 [ 48.772593][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.919275][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.357046][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 49.357059][ T29] audit: type=1400 audit(1764196171.277:498): avc: denied { write } for pid=4616 comm="syz.3.416" name="rt_cache" dev="proc" ino=4026532805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.430177][ T29] audit: type=1400 audit(1764196171.317:499): avc: denied { bind } for pid=4616 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.578403][ T29] audit: type=1400 audit(1764196171.457:500): avc: denied { write } for pid=4618 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.800918][ T29] audit: type=1400 audit(1764196171.717:501): avc: denied { write } for pid=4633 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.820869][ T29] audit: type=1400 audit(1764196171.717:502): avc: denied { nlmsg_write } for pid=4633 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.893727][ T4638] xt_hashlimit: max too large, truncated to 1048576 [ 49.967369][ T29] audit: type=1400 audit(1764196171.887:503): avc: denied { write } for pid=4643 comm="syz.1.427" lport=34904 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 50.001236][ T29] audit: type=1400 audit(1764196171.917:504): avc: denied { setopt } for pid=4643 comm="syz.1.427" lport=34904 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 50.247005][ T4680] loop3: detected capacity change from 0 to 2048 [ 50.257741][ T29] audit: type=1400 audit(1764196172.177:505): avc: denied { read } for pid=4684 comm="syz.0.445" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.280434][ T29] audit: type=1400 audit(1764196172.177:506): avc: denied { open } for pid=4684 comm="syz.0.445" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.304292][ T29] audit: type=1400 audit(1764196172.197:507): avc: denied { connect } for pid=4684 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 50.330180][ T3517] loop3: p1 < > p4 [ 50.334629][ T3517] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.363835][ T4680] loop3: p1 < > p4 [ 50.368329][ T4680] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.481276][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 50.502508][ T4065] udevd[4065]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 50.731483][ T4718] loop3: detected capacity change from 0 to 4096 [ 50.754841][ T4718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.979531][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.060468][ T4735] loop3: detected capacity change from 0 to 512 [ 51.068277][ T4735] EXT4-fs: Ignoring removed orlov option [ 51.078157][ T4735] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 51.087339][ T4735] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.463: corrupted in-inode xattr: e_value size too large [ 51.101717][ T4735] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.463: couldn't read orphan inode 15 (err -117) [ 51.114177][ T4735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.139329][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.228951][ T4748] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.269071][ T4754] netlink: 'syz.1.471': attribute type 30 has an invalid length. [ 51.321179][ T4748] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.371055][ T4748] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.421515][ T4748] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.556694][ T1000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.574877][ T1000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.592349][ T1000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.600972][ T1000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.958443][ T4801] sctp: [Deprecated]: syz.4.493 (pid 4801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 51.958443][ T4801] Use struct sctp_sack_info instead [ 51.983173][ T4801] sctp: [Deprecated]: syz.4.493 (pid 4801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 51.983173][ T4801] Use struct sctp_sack_info instead [ 52.027860][ T4808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.042376][ T4810] __nla_validate_parse: 12 callbacks suppressed [ 52.042386][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.496'. [ 52.104261][ T4808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.118890][ T4815] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.195939][ T4808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.232660][ T4817] veth0: entered promiscuous mode [ 52.245421][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 52.257426][ T4808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.310932][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.327993][ T1000] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.347586][ T1000] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.364270][ T1000] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.664856][ T4857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.742962][ T4857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.844654][ T4857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.923264][ T4857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.948225][ T4872] netlink: 132 bytes leftover after parsing attributes in process `syz.3.524'. [ 52.997247][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.015386][ T1000] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.023776][ T1000] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.054496][ T1000] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.479480][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 53.500364][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 53.517862][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 53.530230][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 53.542448][ T4911] team1: entered promiscuous mode [ 53.547493][ T4911] team1: entered allmulticast mode [ 53.566020][ T4911] 8021q: adding VLAN 0 to HW filter on device team1 [ 53.598421][ T4919] loop4: detected capacity change from 0 to 128 [ 53.659457][ T4927] netlink: 'syz.0.550': attribute type 30 has an invalid length. [ 53.881198][ T4951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 53.901359][ T4951] team1: entered promiscuous mode [ 53.906429][ T4951] team1: entered allmulticast mode [ 53.912056][ T4951] 8021q: adding VLAN 0 to HW filter on device team1 [ 54.013217][ T4963] loop0: detected capacity change from 0 to 512 [ 54.021278][ T4962] loop3: detected capacity change from 0 to 764 [ 54.049211][ T4963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.079967][ T4962] iso9660: Unknown parameter '€' [ 54.210757][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.552786][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 54.552800][ T29] audit: type=1400 audit(1764196176.477:581): avc: denied { create } for pid=4997 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 54.590328][ T4998] lo speed is unknown, defaulting to 1000 [ 54.932150][ T5010] loop4: detected capacity change from 0 to 512 [ 54.938829][ T5010] EXT4-fs: inline encryption not supported [ 54.945404][ T5010] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.956701][ T5010] EXT4-fs (loop4): 1 truncate cleaned up [ 54.963010][ T5010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.987895][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.202178][ T5018] syzkaller0: entered promiscuous mode [ 55.207734][ T5018] syzkaller0: entered allmulticast mode [ 55.214790][ T5018] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 55.348513][ T5026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.397744][ T5037] netlink: 96 bytes leftover after parsing attributes in process `syz.4.594'. [ 55.424958][ T5026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.439592][ T29] audit: type=1400 audit(1764196177.357:582): avc: denied { create } for pid=5040 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.459352][ T29] audit: type=1400 audit(1764196177.357:583): avc: denied { bind } for pid=5040 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.533375][ T5026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.603067][ T5026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.685146][ T1000] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.705383][ T1000] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.729190][ T1000] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.759731][ T1000] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.771884][ T5058] 9pnet_fd: Insufficient options for proto=fd [ 55.816205][ T5060] loop2: detected capacity change from 0 to 128 [ 55.851754][ T29] audit: type=1400 audit(1764196177.777:584): avc: denied { mount } for pid=5059 comm="syz.2.604" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.928458][ T5063] kernel profiling enabled (shift: 17) [ 55.993583][ T5060] syz.2.604: attempt to access beyond end of device [ 55.993583][ T5060] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 56.029896][ T5060] syz.2.604: attempt to access beyond end of device [ 56.029896][ T5060] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 56.045817][ T5072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=5072 comm=syz.3.609 [ 56.059731][ T5060] syz.2.604: attempt to access beyond end of device [ 56.059731][ T5060] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 56.078148][ T5060] syz.2.604: attempt to access beyond end of device [ 56.078148][ T5060] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 56.101485][ T5074] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.610'. [ 56.122016][ T5060] syz.2.604: attempt to access beyond end of device [ 56.122016][ T5060] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 56.136043][ T5060] syz.2.604: attempt to access beyond end of device [ 56.136043][ T5060] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 56.161105][ T5060] syz.2.604: attempt to access beyond end of device [ 56.161105][ T5060] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 56.179881][ T5060] syz.2.604: attempt to access beyond end of device [ 56.179881][ T5060] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 56.193604][ T5060] syz.2.604: attempt to access beyond end of device [ 56.193604][ T5060] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 56.207138][ T5060] syz.2.604: attempt to access beyond end of device [ 56.207138][ T5060] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 56.250764][ T29] audit: type=1400 audit(1764196178.167:585): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.298800][ T29] audit: type=1400 audit(1764196178.217:586): avc: denied { setopt } for pid=5079 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.355592][ T29] audit: type=1400 audit(1764196178.267:587): avc: denied { read } for pid=5079 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.395270][ T3004] ================================================================== [ 56.403405][ T3004] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 56.410028][ T3004] [ 56.412357][ T3004] read-write to 0xffff888106ab89c0 of 4 bytes by task 3517 on cpu 0: [ 56.420425][ T3004] dont_mount+0x2a/0x40 [ 56.424588][ T3004] vfs_unlink+0x28f/0x420 [ 56.428931][ T3004] do_unlinkat+0x24e/0x480 [ 56.433377][ T3004] __x64_sys_unlink+0x2e/0x40 [ 56.438074][ T3004] x64_sys_call+0x2dcf/0x3000 [ 56.442749][ T3004] do_syscall_64+0xd2/0x200 [ 56.447256][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.453148][ T3004] [ 56.455465][ T3004] read to 0xffff888106ab89c0 of 4 bytes by task 3004 on cpu 1: [ 56.463012][ T3004] lookup_fast+0xf0/0x320 [ 56.467348][ T3004] walk_component+0x3f/0x220 [ 56.471948][ T3004] path_lookupat+0xfe/0x2a0 [ 56.476455][ T3004] filename_lookup+0x147/0x340 [ 56.481224][ T3004] do_readlinkat+0x7d/0x320 [ 56.485740][ T3004] __x64_sys_readlink+0x47/0x60 [ 56.490583][ T3004] x64_sys_call+0x28de/0x3000 [ 56.495257][ T3004] do_syscall_64+0xd2/0x200 [ 56.499754][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.505658][ T3004] [ 56.507974][ T3004] value changed: 0x00300080 -> 0x00004080 [ 56.513679][ T3004] [ 56.515999][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 56.522145][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.532992][ T3004] Tainted: [W]=WARN [ 56.536791][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.546839][ T3004] ================================================================== [ 56.557587][ T29] audit: type=1400 audit(1764196178.477:588): avc: denied { read write } for pid=5090 comm="syz.3.617" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.558193][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 56.580963][ T29] audit: type=1400 audit(1764196178.477:589): avc: denied { open } for pid=5090 comm="syz.3.617" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.588581][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 56.625549][ T5089] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.616' sets config #1 [ 56.634873][ T5088] loop1: detected capacity change from 0 to 764 [ 56.641632][ T5088] iso9660: Unknown parameter '€' [ 56.650094][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 56.658219][ T10] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 56.669577][ T29] audit: type=1400 audit(1764196178.547:590): avc: denied { write } for pid=5087 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 56.771721][ T5093] fido_id[5093]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory