last executing test programs: 2.371742108s ago: executing program 2 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) 1.276324647s ago: executing program 2 (id=33): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x85, &(0x7f0000000380)={r2, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) 1.249633279s ago: executing program 2 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = gettid() tkill(r2, 0x12) 1.205307462s ago: executing program 2 (id=37): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.186477044s ago: executing program 3 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) close(r2) 1.137455078s ago: executing program 3 (id=41): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) 1.100738711s ago: executing program 1 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.078494483s ago: executing program 3 (id=43): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) cachestat(r0, &(0x7f0000000240)={0x3, 0x2}, &(0x7f000009de80), 0x0) 988.84644ms ago: executing program 3 (id=45): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r0, 0x0) 951.020453ms ago: executing program 1 (id=46): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") 889.457228ms ago: executing program 3 (id=49): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 834.855242ms ago: executing program 2 (id=50): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 809.139605ms ago: executing program 3 (id=51): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, &(0x7f0000000080)=[{0xffffffffffffdff6, 0x20006, 0xfffffffffffffffc}], 0x1, 0x6, 0x0, 0x2, 0x7, 0x18}) 773.620187ms ago: executing program 1 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 655.141137ms ago: executing program 1 (id=54): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000000)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x60ff, &(0x7f0000000840)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 595.657542ms ago: executing program 4 (id=56): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x50, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3}, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000)=r3, 0x10) 550.254055ms ago: executing program 2 (id=57): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x6, 0x4, 0xfffc, 0xf37d, 0x4, 0x5, 0xc8, {r1, @in6={{0xa, 0x4e21, 0x186c6677, @private1, 0xde}}, 0x1, 0x1, 0x6afa99fb, 0x6, 0x200}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000000)=0x84) 538.072706ms ago: executing program 4 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 504.865919ms ago: executing program 0 (id=59): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 454.992603ms ago: executing program 4 (id=60): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) 416.729166ms ago: executing program 4 (id=61): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 376.02223ms ago: executing program 1 (id=62): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x22) 358.727101ms ago: executing program 4 (id=63): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 303.024366ms ago: executing program 1 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6e81a000) 286.835707ms ago: executing program 0 (id=65): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x2000000}, 0x40) 225.151012ms ago: executing program 0 (id=66): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000370000007f0000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) 129.416139ms ago: executing program 0 (id=67): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) 52.737506ms ago: executing program 0 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x7fffffff) 18.284869ms ago: executing program 0 (id=69): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e50002"], 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 4 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) kernel console output (not intermixed with test programs): =process permissive=1 [ 28.863627][ T30] audit: type=1400 audit(1754669331.663:61): avc: denied { siginh } for pid=3209 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. [ 37.360748][ T30] audit: type=1400 audit(1754669340.253:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 37.361908][ T3293] cgroup: Unknown subsys name 'net' [ 37.383500][ T30] audit: type=1400 audit(1754669340.253:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 37.410894][ T30] audit: type=1400 audit(1754669340.283:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 37.550671][ T3293] cgroup: Unknown subsys name 'cpuset' [ 37.557076][ T3293] cgroup: Unknown subsys name 'rlimit' [ 37.728771][ T30] audit: type=1400 audit(1754669340.613:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.753354][ T30] audit: type=1400 audit(1754669340.623:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.774280][ T30] audit: type=1400 audit(1754669340.623:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.794764][ T30] audit: type=1400 audit(1754669340.623:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.803783][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 37.815435][ T30] audit: type=1400 audit(1754669340.623:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 37.849385][ T30] audit: type=1400 audit(1754669340.623:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 37.873134][ T30] audit: type=1400 audit(1754669340.723:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.901007][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.062926][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 39.085644][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 39.163415][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 39.188326][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.195824][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.203139][ T3308] bridge_slave_0: entered allmulticast mode [ 39.209587][ T3308] bridge_slave_0: entered promiscuous mode [ 39.216575][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.223685][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.230932][ T3308] bridge_slave_1: entered allmulticast mode [ 39.237404][ T3308] bridge_slave_1: entered promiscuous mode [ 39.253961][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.261140][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.268402][ T3303] bridge_slave_0: entered allmulticast mode [ 39.274961][ T3303] bridge_slave_0: entered promiscuous mode [ 39.283806][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.290967][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.298215][ T3303] bridge_slave_1: entered allmulticast mode [ 39.304675][ T3303] bridge_slave_1: entered promiscuous mode [ 39.323874][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 39.333389][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.355535][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.384661][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 39.399417][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.419774][ T3308] team0: Port device team_slave_0 added [ 39.429343][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.439113][ T3308] team0: Port device team_slave_1 added [ 39.488178][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.495311][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.502617][ T3310] bridge_slave_0: entered allmulticast mode [ 39.509086][ T3310] bridge_slave_0: entered promiscuous mode [ 39.518475][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.525521][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.551557][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.563008][ T3303] team0: Port device team_slave_0 added [ 39.578875][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.585989][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.593146][ T3310] bridge_slave_1: entered allmulticast mode [ 39.599454][ T3310] bridge_slave_1: entered promiscuous mode [ 39.608090][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.615081][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.641654][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.652968][ T3303] team0: Port device team_slave_1 added [ 39.661666][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.668756][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.675972][ T3311] bridge_slave_0: entered allmulticast mode [ 39.682585][ T3311] bridge_slave_0: entered promiscuous mode [ 39.711158][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.718257][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.725644][ T3311] bridge_slave_1: entered allmulticast mode [ 39.732354][ T3311] bridge_slave_1: entered promiscuous mode [ 39.749417][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.756675][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.764057][ T3305] bridge_slave_0: entered allmulticast mode [ 39.770598][ T3305] bridge_slave_0: entered promiscuous mode [ 39.793411][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.803818][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.813048][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.820169][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.827306][ T3305] bridge_slave_1: entered allmulticast mode [ 39.833733][ T3305] bridge_slave_1: entered promiscuous mode [ 39.845579][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.852591][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.878622][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.890442][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.900550][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.916278][ T3308] hsr_slave_0: entered promiscuous mode [ 39.922364][ T3308] hsr_slave_1: entered promiscuous mode [ 39.928624][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.935635][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.961652][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.988857][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.013238][ T3310] team0: Port device team_slave_0 added [ 40.025444][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.041497][ T3311] team0: Port device team_slave_0 added [ 40.058218][ T3310] team0: Port device team_slave_1 added [ 40.076308][ T3311] team0: Port device team_slave_1 added [ 40.098455][ T3305] team0: Port device team_slave_0 added [ 40.111435][ T3303] hsr_slave_0: entered promiscuous mode [ 40.117648][ T3303] hsr_slave_1: entered promiscuous mode [ 40.123475][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 40.129196][ T3303] Cannot create hsr debugfs directory [ 40.137187][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.144206][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.170176][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.182973][ T3305] team0: Port device team_slave_1 added [ 40.188948][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.195938][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.221894][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.252913][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.259942][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.285911][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.307467][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.314497][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.340451][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.351482][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.358446][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.384543][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.412936][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.419933][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.446161][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.470064][ T3310] hsr_slave_0: entered promiscuous mode [ 40.476120][ T3310] hsr_slave_1: entered promiscuous mode [ 40.482228][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 40.487965][ T3310] Cannot create hsr debugfs directory [ 40.543861][ T3311] hsr_slave_0: entered promiscuous mode [ 40.550064][ T3311] hsr_slave_1: entered promiscuous mode [ 40.555913][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 40.561685][ T3311] Cannot create hsr debugfs directory [ 40.585817][ T3305] hsr_slave_0: entered promiscuous mode [ 40.591973][ T3305] hsr_slave_1: entered promiscuous mode [ 40.597937][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 40.603883][ T3305] Cannot create hsr debugfs directory [ 40.722117][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.733690][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.752419][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.771574][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.802631][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.817740][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.826887][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.838390][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.870239][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.879163][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.888267][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.897172][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.930305][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.938926][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.948858][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.966061][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.995058][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.008810][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.017233][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.026184][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.038162][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.089280][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.103921][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.115520][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.128054][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.146193][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.153295][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.162268][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.169323][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.181909][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.188975][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.217981][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.228460][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.242251][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.250801][ T1625] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.258052][ T1625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.280324][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.303276][ T1625] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.310417][ T1625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.319218][ T1625] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.326338][ T1625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.338334][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.353055][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.384651][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.391869][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.402002][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.409552][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.425329][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.437083][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.461796][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.485944][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.496400][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.521574][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.528714][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.538087][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.545236][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.569050][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.579613][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.627364][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.643089][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.685225][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.742758][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.838643][ T3303] veth0_vlan: entered promiscuous mode [ 41.858893][ T3305] veth0_vlan: entered promiscuous mode [ 41.882695][ T3305] veth1_vlan: entered promiscuous mode [ 41.890879][ T3303] veth1_vlan: entered promiscuous mode [ 41.920333][ T3310] veth0_vlan: entered promiscuous mode [ 41.930066][ T3308] veth0_vlan: entered promiscuous mode [ 41.941831][ T3308] veth1_vlan: entered promiscuous mode [ 41.955191][ T3310] veth1_vlan: entered promiscuous mode [ 41.966491][ T3305] veth0_macvtap: entered promiscuous mode [ 41.977422][ T3303] veth0_macvtap: entered promiscuous mode [ 41.985285][ T3303] veth1_macvtap: entered promiscuous mode [ 41.996645][ T3311] veth0_vlan: entered promiscuous mode [ 42.006072][ T3305] veth1_macvtap: entered promiscuous mode [ 42.019439][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.031744][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.044012][ T3311] veth1_vlan: entered promiscuous mode [ 42.054722][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.069280][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.077665][ T3310] veth0_macvtap: entered promiscuous mode [ 42.087964][ T3308] veth0_macvtap: entered promiscuous mode [ 42.094627][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.111647][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.122415][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.133368][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.143932][ T3310] veth1_macvtap: entered promiscuous mode [ 42.151498][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.165125][ T3311] veth0_macvtap: entered promiscuous mode [ 42.173021][ T3308] veth1_macvtap: entered promiscuous mode [ 42.185519][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.198336][ T3311] veth1_macvtap: entered promiscuous mode [ 42.210732][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.219542][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.219661][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.241416][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.257820][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.267510][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.285422][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.298410][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.309438][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.323461][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.342365][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.349701][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.369687][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.390560][ T3474] loop1: detected capacity change from 0 to 512 [ 42.414869][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.462088][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 42.462107][ T30] audit: type=1400 audit(1754669345.343:99): avc: denied { map_create } for pid=3478 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.487048][ T30] audit: type=1400 audit(1754669345.343:100): avc: denied { map_read map_write } for pid=3478 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.506927][ T30] audit: type=1400 audit(1754669345.343:101): avc: denied { prog_run } for pid=3480 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.527844][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.555734][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.568544][ T3485] loop0: detected capacity change from 0 to 512 [ 42.588815][ T3479] loop4: detected capacity change from 0 to 512 [ 42.595296][ T1012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.607662][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.607788][ T3474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.617457][ T3479] journal_path: Non-blockdev passed as '.' [ 42.634248][ T3485] ======================================================= [ 42.634248][ T3485] WARNING: The mand mount option has been deprecated and [ 42.634248][ T3485] and is ignored by this kernel. Remove the mand [ 42.634248][ T3485] option from the mount to silence this warning. [ 42.634248][ T3485] ======================================================= [ 42.634839][ T3479] EXT4-fs: error: could not find journal device path [ 42.635901][ T1012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.720491][ T3474] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.722268][ T30] audit: type=1400 audit(1754669345.403:102): avc: denied { write } for pid=3480 comm="syz.2.6" name="raw" dev="proc" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.753065][ T30] audit: type=1400 audit(1754669345.613:103): avc: denied { mount } for pid=3473 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.777608][ T3491] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7'. [ 42.803180][ T3491] hsr_slave_0: left promiscuous mode [ 42.810335][ T3474] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2: corrupted inode contents [ 42.822244][ T3491] hsr_slave_1: left promiscuous mode [ 42.832450][ T30] audit: type=1400 audit(1754669345.693:104): avc: denied { add_name } for pid=3473 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.853038][ T30] audit: type=1400 audit(1754669345.693:105): avc: denied { create } for pid=3473 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.875565][ T3474] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2: mark_inode_dirty error [ 42.887078][ T1012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.896443][ T1012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.908037][ T3474] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2: corrupted inode contents [ 42.907985][ T3485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.908245][ T3474] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2: mark_inode_dirty error [ 42.940367][ T3485] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.954615][ T30] audit: type=1400 audit(1754669345.783:106): avc: denied { read } for pid=3498 comm="syz.4.9" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.977349][ T30] audit: type=1400 audit(1754669345.783:107): avc: denied { open } for pid=3498 comm="syz.4.9" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.000515][ T30] audit: type=1400 audit(1754669345.803:108): avc: denied { ioctl } for pid=3498 comm="syz.4.9" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.017151][ T3485] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1: corrupted inode contents [ 43.027602][ T3474] syz.1.2 (3474) used greatest stack depth: 10896 bytes left [ 43.056192][ T3485] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1: mark_inode_dirty error [ 43.068190][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.072136][ T3485] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1: corrupted inode contents [ 43.091936][ T3500] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1: corrupted inode contents [ 43.103850][ T3500] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1: mark_inode_dirty error [ 43.115304][ T3500] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1: corrupted inode contents [ 43.183183][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.311685][ T3520] ªªªªª: renamed from vlan1 (while UP) [ 43.369386][ T3526] loop3: detected capacity change from 0 to 1024 [ 43.399223][ T3526] EXT4-fs: Ignoring removed orlov option [ 43.437845][ T3526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.474264][ T3526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 43.498240][ T3537] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 43.498240][ T3537] program syz.1.26 not setting count and/or reply_len properly [ 43.635625][ T3526] syz.3.22 (3526) used greatest stack depth: 10176 bytes left [ 43.655511][ T3535] mmap: syz.0.24 (3535) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.672038][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.973015][ T3565] loop4: detected capacity change from 0 to 1024 [ 43.997821][ T3565] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.008825][ T3565] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.044344][ T3565] JBD2: no valid journal superblock found [ 44.050379][ T3565] EXT4-fs (loop4): Could not load journal inode [ 44.081150][ T3565] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 44.131352][ T3578] loop1: detected capacity change from 0 to 512 [ 44.138426][ T3578] EXT4-fs: Ignoring removed oldalloc option [ 44.187618][ T3578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.46: Parent and EA inode have the same ino 15 [ 44.220060][ T3578] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.238535][ T3578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.46: Parent and EA inode have the same ino 15 [ 44.254397][ T3578] EXT4-fs (loop1): 1 orphan inode deleted [ 44.265414][ T3578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.266675][ T3373] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.297609][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.308849][ T3588] loop2: detected capacity change from 0 to 1024 [ 44.318068][ T3588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.338849][ T3373] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.356359][ T3588] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.378600][ T3588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.475711][ T3597] fido_id[3597]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.500009][ T3603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 44.507560][ C0] hrtimer: interrupt took 24994 ns [ 44.519763][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.669772][ T3618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 44.749239][ T3622] loop4: detected capacity change from 0 to 2048 [ 44.803435][ T3622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.074019][ T3308] ================================================================== [ 45.082151][ T3308] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 45.089653][ T3308] [ 45.091999][ T3308] read-write to 0xffff888118d58478 of 8 bytes by task 290 on cpu 0: [ 45.099993][ T3308] __xa_clear_mark+0xf5/0x1e0 [ 45.104695][ T3308] __folio_end_writeback+0x177/0x470 [ 45.110146][ T3308] folio_end_writeback+0x71/0x3d0 [ 45.115313][ T3308] ext4_finish_bio+0x459/0x8c0 [ 45.120145][ T3308] ext4_release_io_end+0x9f/0x1f0 [ 45.125463][ T3308] ext4_end_io_end+0x18d/0x240 [ 45.130343][ T3308] ext4_end_io_rsv_work+0x151/0x1e0 [ 45.135570][ T3308] process_scheduled_works+0x4ce/0x9d0 [ 45.141063][ T3308] worker_thread+0x582/0x770 [ 45.145687][ T3308] kthread+0x486/0x510 [ 45.149862][ T3308] ret_from_fork+0xda/0x150 [ 45.154385][ T3308] ret_from_fork_asm+0x1a/0x30 [ 45.159182][ T3308] [ 45.161514][ T3308] read to 0xffff888118d58478 of 8 bytes by task 3308 on cpu 1: [ 45.169065][ T3308] xas_find_marked+0x218/0x620 [ 45.173865][ T3308] find_get_entry+0x5d/0x380 [ 45.178494][ T3308] filemap_get_folios_tag+0x13b/0x210 [ 45.183883][ T3308] filemap_fdatawait_keep_errors+0x6c/0x180 [ 45.189814][ T3308] sync_inodes_sb+0x39c/0x440 [ 45.194526][ T3308] sync_filesystem+0x102/0x190 [ 45.199315][ T3308] generic_shutdown_super+0x44/0x210 [ 45.203521][ T3641] netlink: 'syz.0.69': attribute type 2 has an invalid length. [ 45.204638][ T3308] kill_block_super+0x2a/0x70 [ 45.212260][ T3641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 45.216877][ T3308] ext4_kill_sb+0x42/0x80 [ 45.228174][ T3641] Zero length message leads to an empty skb [ 45.229969][ T3308] deactivate_locked_super+0x72/0x1c0 [ 45.241268][ T3308] deactivate_super+0x97/0xa0 [ 45.245984][ T3308] cleanup_mnt+0x269/0x2e0 [ 45.250425][ T3308] __cleanup_mnt+0x19/0x20 [ 45.254944][ T3308] task_work_run+0x131/0x1a0 [ 45.259544][ T3308] exit_to_user_mode_loop+0xe4/0x100 [ 45.264846][ T3308] do_syscall_64+0x1d6/0x200 [ 45.269498][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.275415][ T3308] [ 45.277747][ T3308] value changed: 0xfffffffffffff800 -> 0xffffffffffff0000 [ 45.284862][ T3308] [ 45.287198][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 45.293378][ T3308] CPU: 1 UID: 0 PID: 3308 Comm: syz-executor Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 45.305802][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.315866][ T3308] ================================================================== [ 45.333134][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.368460][ T3643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'.