last executing test programs: 44.248947903s ago: executing program 2 (id=78): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 43.146317317s ago: executing program 2 (id=90): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4439, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 42.874651483s ago: executing program 2 (id=95): prctl$PR_GET_CHILD_SUBREAPER(0x25) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000003, &(0x7f0000000380)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@delalloc}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 42.547741873s ago: executing program 2 (id=103): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 42.316013166s ago: executing program 2 (id=105): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 41.91691295s ago: executing program 2 (id=111): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 41.858249353s ago: executing program 32 (id=111): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 8.813891902s ago: executing program 4 (id=670): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x94, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.384284147s ago: executing program 4 (id=681): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) 8.298218143s ago: executing program 4 (id=685): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.356300377s ago: executing program 4 (id=727): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000bde000/0x1000)=nil, 0x1000) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.197381646s ago: executing program 4 (id=733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%pS \x00'}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x8596, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r1}, 0x18) 5.871111685s ago: executing program 4 (id=740): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 5.868006165s ago: executing program 33 (id=740): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.223780668s ago: executing program 1 (id=839): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 1.160420602s ago: executing program 3 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r1, 0x1) 1.075721226s ago: executing program 3 (id=848): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r0, 0x4, 0x6c00) write$UHID_INPUT(r0, &(0x7f00000011c0)={0x8, {"31442c0a4c29f71093243ec5395742dd90c72226073e22ab63947ea50c4460eb526c1e3744a9ca1230866c9b0c173eed8cab9d1aa302f7e290e59d3fc63f157b29d0aeef11c15da90b4f00607e9257160fb78f54d730e03bb906c541047ac2a8d56d9c2d7b2f8ed12ff06d9005fd46c4189027d2dc5b2b5f63d63c60abfab39833f13e603890909a6debcb54249a07c213a286201f98324c5bd2a1b793bf7bcf48e86bcdbdc02f5eedca80151c92020fdb4db44d99d247d5c75c60c9beac3d9945bcb3fd52a0958c4c3979ca9bd70840bc60ed939e9e4d09afe19b394d9d5d28ac7237421f9051ab4700c41d196994785f3f9876b0673b19a7bc8c68a07158c13c3a2b75144d1c5565071f229bde90d0f57df84974d375b0b6e61354a23b3afef76fb81401dc38b69182dc2829d853f3818129c40ecd9c85c30c67d64a13dc3e75938bbfd653c51766c838be5619be5e1ae938583a385f25c87a92d36e67c6b2a97937552fe1ded723d90305713ca40f626ab2606ec694428646e4e1d478b31a30d1099f31c77800f18936efff8950bceda5c30395cad5fca9cadbe28ff02209e3b2e51f8d22281dbd1111c6d17afca5571ba66762c495e6c97a97ffc554f171f0445c6fbb7cb1a09557c429f7849e75397bff9bb5ab01e2d3911df4b257fe81342fae980f7d6894e5bb611c92b16bd9e8dddf9543e5d28e2144bc78eeef02c6da25b56d33bf235172a0fe6a8cfef346eb6d5f5699685231d336495d65fca151381cd84c745fe580a2e4f2b345d89dfad4d4f45622d0e19509db7fc4be37d2ed8fb2efd2370036d08da446552b87fa1d30ee97191bb0171f5320fa4c81ef22f0a347f384813249f24a073fcb2bb144567acba03f93528d416ca27e0f49d127f77b81a2f60a39d9c5c8f3e1f0f812663fc6ceebada129a909e58ec8fd2f1405798c9b94d4c5f373e14baa2b5975e60732c07307bc4f6d5de124825315419423d113f3482197f196c4d7360b9dfc0c180901171638cbe6dc1577d2b86f24ab1cd16778db382b46466fce9ee6418fb91a1124ba50ce3041cac4678772f5db0d80b4c153ab9d557343bf59a25ad90af1fede148e734f407a94ebadd369bd16c99838039e6bb1f62ef49f6a4c00e5346e3c5eb125af77ebc16894613d1e4050a201496d0c1614e7747c2895cef9982e52af312c28289f39721add8c190ce7c6834836575b63ab6737067d267343952b11c0176e9c906857f6e2ffd95d5ce20766b03cc532e0a11bcb091ec449cba7e89dc4a978a546b0c3a6bf9dd22fc92b04d450dbd2518dc20066400fd11e4d1f17ee732063c4f3cf0d24183c5bdd7e9ac03b99b0acf8c8379e2e4581bb2787c452e6a3853cc654b7e82c331d0abb18df15b02748da0ab648ff43e6cd9eadc1b7f974670a762a7b70020142f03aa9817632b1c3fdc409d9ddf0585f87d5784e436fd8b3d8cf68bb0e62ea5a0c3af0a2202dfc63ee2271fe2ecbf11b2a4372fd6141b53fd1b4023a205df811c8308841b33c33ef718d5fbebff453564e4fc35ab0f1bc7be9274da25afab9039d6d5247e88730198a57e2965b5e5dc48c7d8b8499e5b9ca34a4b7b2fc14b968d9b370d0a892cd63f83446e804c73d7784e4cb10a1bba4608510ba880371fd6113fa440e89dfba8b545b67777eb0fa764c411885f4b2fff181ca6a6ba87318869430cb6acf0f39de176756497502571762449ba9a94b0591137c4c375c8a2b70b2243936d1967add1f07debd5ef0c2f1fc10ebac10f27befed17c6b75871a94dcc5c67abf0ccffeef3a50bff406476e28d9a6602f65c3ae48470cbc6294b4d3a830a288e90d792a9c7cc188a52fff8af3143458d9e2c4605640538a9c915a70792fcfbe2210c5e86a6498f3b6666a368df6717cad06d5744142bde2def01bf17bdd5c2b835be72703d3dd2eaf7cd3e795c40c72b52da860e2d18ca32d7d6f3497260e7489a627df2cdd20f69a92b0958d326b4550516cf2b141ee4bed3c630d1d8c2020c6144bceece9227cf6f77ed25f7e1f3dc3cdc8fecb77d8407b1f0cad703664eff4b78fa3649dd2e16d2df7995ad08736096e1cf514cb3f7bea06ce556f0bfa07eb10ffc4157455dee5327934a34fbefe11e6e5a2356c44d8e8105af5fc32bd916b0e54357c23ea488b8bfb2b81eeaaa87c2de401f51b899db0d657cb33d6b1800c331f6eb907c3803645891cef5ab91ede0777b18e68d20cf727e3315baec5b25a34e538ee06fbc80a90dfc75a640bdb3dc967368fdd1c5003e67a993a289e88dfd823054081e05bc1d486046ed352305270d714b40a6f8e14ce2274bb34de2e7594e3d74319e17f9fdc8f11e8ce55d488a4fa24fa6d00d30c6a13cd1895b676792380640b974dca3b3271c7e219b1db3fd1dc0a6151b3482c9297b8b934929dc646df519439a13e0660eb557558feae7e505422eda008f2a2a8c4852481dd91cf36344c885939cfc86dde36a3bbcd042395670815211ce605f5089a745780a79c0d9f9af7fbd3ccb3f7b7bfca1dcb0cec9afd7c4222da94dfbd04647e8ea557996fbbd5786a8010edd647cdef7d915c24cc9c30968dcb4948d90c843f22fe263835a549a20c44a7fc0356f2f25a5986c181f3e40a5a62715f2535ac9d10debae80db84670e09d00564b44a372e088cdfea3766b5c4d4e42f076b83e45016c4b4ddbab7381759304ae14492588ef9db81139f54a17a6948e10ea5d0831a88c77e55e8d64899360c73976a091c39a12638d5e97d1b6c97a1cca4723ed954e3545271708efee3e8062c4f07a2d8cc5a757bb6eb7c23320ecceab75a5727b73cd7854a63f81001ea6a385634e41c78fd73de33c28e58e669526fc2b6afbc2c3dc83287f6443e137ae13dd84d768088395546554fc6b12c03c5edbc0a527f62efdbfc46c4e520a150437b2d7465f34f5c4beb5b664d0a0a7e67a27bc3ba6d9e9857c7d1480b1a4fc5ca08bc21dafc3ee21001d2de7eab5f6d52cb846f94335bffbc49515c76017e4a2edfd4a40b79b37c95ad8dc0fad620a7e5dd6be06888a347085010e123f631fdd84887983a798fe203a42b58d39dc63829a3c8145a4c45ea1f7ed0672e341136eaf2ee0b1a76c3d83ca414c951d4195e374adb40feaba5212f23ba053e86397153bf1404b92c0f77e97c60e2bbcfa4dcc9520e77525625af42cec9f360adc24907cab3a878e40d158561d5ecb39fe00f1b30d992066e77e06406173a0248cdc30c0596de34d1584af0c650479c595a47fcaa6753d909cab215bab44b690a4c40e42cfb7261a80e4dd7c10288f2c021317b6e0875c7ae1128783e4e9f2ed29ea77aed7f5f2df52a6fdb901d42c95e2c1d252a5846c81f74485cd1dacc8dfd689b399247006b360f0bcd85f82821982e28972aaf1aebf46309f52ba94b17817e21b6c242e8bf5f61b9095419d3ea8bd3e69266d84fdb2ca8714686ff80f3f36210b7e9d8384480f2de56389e0ea7d4db384cdd4549d4ec83ae87bc7f99305fddea649cff25772db431001a5b21ba025b1da15b2b97e90a42d32bc636181bd328d526aa97a0d0e1500030566d1e95da170b2a1670842c936cd594db4aab354cd6ec82b29be3ae3f109e183af094556ee06e8fb178d5b888b5ac9d6237df46804160734cb20a2ba664402dcba5306e9b18192b9b86539919e4e6d32124fa98f4aa8b69d1a3ed9140ab8407ac00ddf8143bf1163da42f1b5a33f3a162866181ddd90d5bfd78cfc75158ca8fb120a17eba012e88f69c997fce26ea081449de49c3e972a4c49f140e3b50aef55191f65622ffe6c33186fd565df7b880db9c25ee39509eee4f87b34c1a0fb97318657e2b5261b5dc3c596d6b9f7fae27a8941510261e0a17208251c28869185c157c7a6f5006c2c8cf7d67ad1b74bd8111fb7e17ec00336628f3651078ed4678571f0ab6e10c5178efbef2ed16cc6f7f01bd9b52a61102fd19228bfaf06ca879a8a49b7f4faa0d375df2998f54613fc1d33f2e1a8ee0332ea3b63101c7009e29fd44f3aeea5c0ab382c405605155a60ef7bf05dd31e420e4df43ff38a72f6a47a80ed7997903c6bc4363a95b0920108a1ee60325c5d848f7ad1cd90073a424baf2aa23badb24d6b8c25151d991036d8443fd89abcafbe55b8468fe428e1cfdac0a9c3c9e6bf464e0ac3a67c31f63c9ec44f0c0c9f5c97ad44390b3f281ccd3499d1d66841a5775c8479550d2c1636b8a4de5f37b94ee9a47243cc4a47bab4d3420d1b5ad3e4fb634c73b6d4525915e44066094fbee72bd850ab83cc70ed47e119be5e609ebd292993f78cf92b9ea33cd77d713fd18f2c43b51280372dff422a71d1065702ddf5ddf4362f6777d9ef365f942d5fa5d3a0ea936826ac64385615a1df4fa3076ac818f5a3b9f3b449a2c655f165fc6d7bf83b54a2394e6b05286fd7c1555e0f53c0f3754636f93a57cc3459153442370668678572612e86ca7384a7bb33c71053467fa6f83d462b5204186f1d1f0a3fc3c98226acc7df83dd131392a746c25c3e42780e2d802182674ef1fd005353149f75e358399cba76ea36a76ed21e9d505e6e0b87873ac0d26746e35d0ff9e435d28b27340165ca12b8bf31daaef63ad7cc27791e3bdbb93ca65b3617efe1a7897b0f37ad4dc49a996d487b0d6fdb7b6fbd536ee0b070e99bfc75459aec1d3205a89c1e221f2c4eaa1725d4c32f502655fcece0094bf93a2f28e1ccb3c32208b8e38f77e6195247fe096fb08e173b226012002de279e2f853b000773569b0ce731a913aa83bf4c18288a1283846acd40d3283873743c10aab220d287ba1868fcf1f73a2859df5e5fff4ef56cea2dd393ce7d9de36bf1b6664aac690c8aa9cdcb5239630bb0a1859c6354493fcbe580db0007ef1ae66f2dcf4de4e029f92f519d09e4c807c3e110a94791bb982da89faf350fb3a1992df5d5c77f2e895cf047aead4edd8ed4527320b14a2f60e0f3ba7a6833e074c592efeea59810361a349a2ea9611efcf9e2ff49b0c712befebb9c866dfb919fb53b9f680c60c1cba096c6ac8075a97a7fbefa8f669210f2761445ee77cf51087772c4854d0dfcab3125719654fa15f23c59630e4d40c23d9cf1e05eda446cbeb9cfda4a103fdb0269766fa098bea50d9663653e59b912a3583ca5f7bac4435222525205025c578a5b9768e63297638a9b77afef9fd5c8ef97208896db4fd77e8a5057dbfef2b3eeaec02831cedc27d466d5b8f9ecab06860085da4377d3c9bd4750ddc93690b9a9552aac579b83bc393e7b55de21d4e15d3f4e1047da191b1c6b3375b5250ad74dec72cc0f15bb870bc8ab16617d00c9a93c99624de315484d11a9b42941f2d12132d097b6b600564a40428b2dc0d7d23aaa86595e12d1e200d4fbfa26bea0e6e2c334ece67dcb30153981e20d0c77d7aeec896bcb93602e22ed2ccc2104d5c7e0f21558a2162943921ed413f011402aa69a95d3ed59cb8bf9b0f8ec2d7401a2413bb76a770fcebf419a0378711e97efb1ff202d6a76cfadb115a4fd2405ae13c0642c5dff807ba66544e73df47760a8897f5dfdc7b40197f74a2e19a17dbba00422b7ac17ced2cd3913afcf3772fafb956260e62951d0bb4e72955bf3faf31e5c220c6c0bed8a7d4c7d9368065449133e14236b7f80d3f630764e2508fef35b9c75a74a013f144275fbc99374041a76c17bbf069a8cb39ef2fd7f12600de70c54530a64b5864620f9ee9745177d8a329c06b2ab97bda51b3cb96e12d812a100cb6afc246342da", 0x1000}}, 0x1006) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.00849953s ago: executing program 1 (id=852): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) unshare(0x24020400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f00000020c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x3, 0x647, 0x0, 0x40000, 0x1000}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) 777.379554ms ago: executing program 5 (id=858): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 635.970562ms ago: executing program 6 (id=864): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x10, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x8000}, 0x90) 625.751173ms ago: executing program 1 (id=865): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_ACTION={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) 609.639014ms ago: executing program 0 (id=866): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc989, 0x0, 0x1, 0x274}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x4e14, 0x912a, 0x41, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x4) 579.679846ms ago: executing program 5 (id=867): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000004000), 0x0}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) 578.238526ms ago: executing program 6 (id=868): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) waitid(0x20, 0x0, 0x0, 0xe, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00'}) 508.53037ms ago: executing program 1 (id=869): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x120000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 505.88809ms ago: executing program 0 (id=870): r0 = syz_io_uring_setup(0xbc0, &(0x7f0000000280)={0x0, 0x5568, 0x10000, 0x2, 0x282}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe459d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 451.172313ms ago: executing program 6 (id=871): socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x0, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x83da, 0x16, 0x0, 0x0) 406.590236ms ago: executing program 6 (id=872): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffc}]}}]}, 0x3c}}, 0x800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 315.056951ms ago: executing program 0 (id=873): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xff, {0x0, 0x7f}, 0x0, 0x2}) 276.103493ms ago: executing program 1 (id=874): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) open(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="680100000001"], 0x168}}, 0x0) 266.797884ms ago: executing program 6 (id=875): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x102, &(0x7f0000000380)={0x0, 0x2d48, 0x10000, 0x3, 0x2000089}, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 215.985607ms ago: executing program 6 (id=876): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) fcntl$setpipe(r2, 0x407, 0x100000) 199.469118ms ago: executing program 0 (id=877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 198.841608ms ago: executing program 5 (id=878): r0 = syz_io_uring_setup(0x6368, &(0x7f00000008c0)={0x0, 0xfffffffe, 0x80, 0x0, 0x6}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) r2 = eventfd2(0xbfb, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000240)=r2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x20000001}) io_uring_enter(r0, 0x1, 0x10a5, 0x4, 0x0, 0x0) 191.393128ms ago: executing program 3 (id=879): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x49) flock(r2, 0x1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 166.1054ms ago: executing program 3 (id=880): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 162.86907ms ago: executing program 1 (id=881): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x1a}, 0x40b7}], 0x1, 0x40002021, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 144.613861ms ago: executing program 5 (id=882): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmmsg$inet(r1, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000d40)="d7797d72", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003040)="a38bcf58d8", 0x5}], 0x1}}], 0x3, 0x4040040) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x8081, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 131.159892ms ago: executing program 0 (id=883): sendmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x4000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 93.215024ms ago: executing program 5 (id=884): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff1000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 85.741695ms ago: executing program 0 (id=885): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x3, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 36.085397ms ago: executing program 3 (id=886): socket(0x25, 0x80005, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100, 0x0, 0x79}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$dir(0xffffffffffffff9c, 0x0, 0x440b82, 0x90) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 30.310868ms ago: executing program 5 (id=887): socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$isdn(0x22, 0x2, 0x2) r2 = dup3(r1, r0, 0x0) bind$isdn_base(r2, &(0x7f0000000000)={0x22, 0x9, 0x6, 0xe, 0x3e}, 0x6) 0s ago: executing program 3 (id=888): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. [ 34.191506][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 34.191524][ T29] audit: type=1400 audit(1770577038.874:70): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.221124][ T29] audit: type=1400 audit(1770577038.904:71): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.223684][ T3302] cgroup: Unknown subsys name 'net' [ 34.249177][ T29] audit: type=1400 audit(1770577038.934:72): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.447154][ T3302] cgroup: Unknown subsys name 'cpuset' [ 34.453892][ T3302] cgroup: Unknown subsys name 'rlimit' [ 34.625544][ T29] audit: type=1400 audit(1770577039.304:73): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.649382][ T29] audit: type=1400 audit(1770577039.314:74): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.670038][ T29] audit: type=1400 audit(1770577039.314:75): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.690414][ T29] audit: type=1400 audit(1770577039.314:76): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.713014][ T29] audit: type=1400 audit(1770577039.334:77): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.734067][ T29] audit: type=1400 audit(1770577039.334:78): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.759037][ T29] audit: type=1400 audit(1770577039.334:79): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.789360][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.837100][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.704571][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.798579][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.805698][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.812997][ T3321] bridge_slave_0: entered allmulticast mode [ 36.819580][ T3321] bridge_slave_0: entered promiscuous mode [ 36.828655][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.835844][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.843093][ T3321] bridge_slave_1: entered allmulticast mode [ 36.849619][ T3321] bridge_slave_1: entered promiscuous mode [ 36.888009][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.900161][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.936686][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.946473][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.959836][ T3321] team0: Port device team_slave_0 added [ 36.972409][ T3321] team0: Port device team_slave_1 added [ 37.011243][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.018282][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.044256][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.070165][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.077200][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.103655][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.171788][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.178957][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.186358][ T3314] bridge_slave_0: entered allmulticast mode [ 37.192870][ T3314] bridge_slave_0: entered promiscuous mode [ 37.205316][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 37.219203][ T3321] hsr_slave_0: entered promiscuous mode [ 37.225349][ T3321] hsr_slave_1: entered promiscuous mode [ 37.232053][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.239325][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.246862][ T3314] bridge_slave_1: entered allmulticast mode [ 37.253305][ T3314] bridge_slave_1: entered promiscuous mode [ 37.259860][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.266989][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.274121][ T3317] bridge_slave_0: entered allmulticast mode [ 37.280688][ T3317] bridge_slave_0: entered promiscuous mode [ 37.290457][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.312528][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.319802][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.327140][ T3317] bridge_slave_1: entered allmulticast mode [ 37.333675][ T3317] bridge_slave_1: entered promiscuous mode [ 37.355252][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.382977][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.400760][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.430603][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.472393][ T3317] team0: Port device team_slave_0 added [ 37.478911][ T3314] team0: Port device team_slave_0 added [ 37.492283][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.499405][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.506649][ T3316] bridge_slave_0: entered allmulticast mode [ 37.513182][ T3316] bridge_slave_0: entered promiscuous mode [ 37.524799][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.531936][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.539295][ T3316] bridge_slave_1: entered allmulticast mode [ 37.545681][ T3316] bridge_slave_1: entered promiscuous mode [ 37.552846][ T3314] team0: Port device team_slave_1 added [ 37.559254][ T3317] team0: Port device team_slave_1 added [ 37.577541][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.584684][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.592203][ T3320] bridge_slave_0: entered allmulticast mode [ 37.598724][ T3320] bridge_slave_0: entered promiscuous mode [ 37.623420][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.632913][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.639927][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.665942][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.676827][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.683925][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.691260][ T3320] bridge_slave_1: entered allmulticast mode [ 37.697999][ T3320] bridge_slave_1: entered promiscuous mode [ 37.712235][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.719308][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.745478][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.757537][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.767017][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.774006][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.800116][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.811379][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.818388][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.844529][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.892724][ T3316] team0: Port device team_slave_0 added [ 37.902957][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.917926][ T3316] team0: Port device team_slave_1 added [ 37.939194][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.955097][ T3317] hsr_slave_0: entered promiscuous mode [ 37.961482][ T3317] hsr_slave_1: entered promiscuous mode [ 37.967402][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 37.973164][ T3317] Cannot create hsr debugfs directory [ 37.994712][ T3314] hsr_slave_0: entered promiscuous mode [ 38.000893][ T3314] hsr_slave_1: entered promiscuous mode [ 38.006992][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.012734][ T3314] Cannot create hsr debugfs directory [ 38.022991][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.030029][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.055989][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.079419][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.086453][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.112437][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.131073][ T3320] team0: Port device team_slave_0 added [ 38.156820][ T3316] hsr_slave_0: entered promiscuous mode [ 38.163178][ T3316] hsr_slave_1: entered promiscuous mode [ 38.169410][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 38.175174][ T3316] Cannot create hsr debugfs directory [ 38.185878][ T3320] team0: Port device team_slave_1 added [ 38.222807][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.229849][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.255907][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.267183][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.274130][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.300205][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.397213][ T3320] hsr_slave_0: entered promiscuous mode [ 38.403390][ T3320] hsr_slave_1: entered promiscuous mode [ 38.409471][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 38.415216][ T3320] Cannot create hsr debugfs directory [ 38.447443][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.458694][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.476103][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.492668][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.544733][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.562305][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.577874][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.587032][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.610337][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.625743][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.635456][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.644823][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.687818][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.701749][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.711318][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.736688][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.764936][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.776406][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.792641][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.801985][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.820687][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.832333][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.852427][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.863748][ T2002] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.870941][ T2002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.881945][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.901053][ T2496] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.908195][ T2496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.923910][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.943952][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.956090][ T2002] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.963376][ T2002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.979892][ T2002] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.987020][ T2002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.007617][ T2496] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.014716][ T2496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.025383][ T2496] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.032486][ T2496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.071603][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.095327][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.105883][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.148933][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.168746][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.183002][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.190168][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.208345][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.217456][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.224576][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.250849][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.258152][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.268325][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.275509][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.306081][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.340587][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.370487][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.381211][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.406007][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.459375][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.529181][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.609982][ T3314] veth0_vlan: entered promiscuous mode [ 39.637410][ T3314] veth1_vlan: entered promiscuous mode [ 39.646244][ T3317] veth0_vlan: entered promiscuous mode [ 39.664343][ T3316] veth0_vlan: entered promiscuous mode [ 39.673196][ T3321] veth0_vlan: entered promiscuous mode [ 39.689213][ T3321] veth1_vlan: entered promiscuous mode [ 39.700319][ T3316] veth1_vlan: entered promiscuous mode [ 39.710283][ T3317] veth1_vlan: entered promiscuous mode [ 39.736139][ T3314] veth0_macvtap: entered promiscuous mode [ 39.748325][ T3314] veth1_macvtap: entered promiscuous mode [ 39.755499][ T3320] veth0_vlan: entered promiscuous mode [ 39.771069][ T3321] veth0_macvtap: entered promiscuous mode [ 39.780157][ T3320] veth1_vlan: entered promiscuous mode [ 39.790375][ T3316] veth0_macvtap: entered promiscuous mode [ 39.798285][ T3321] veth1_macvtap: entered promiscuous mode [ 39.804914][ T3316] veth1_macvtap: entered promiscuous mode [ 39.819259][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.831217][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.845192][ T3317] veth0_macvtap: entered promiscuous mode [ 39.856152][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.864196][ T3317] veth1_macvtap: entered promiscuous mode [ 39.880042][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.888107][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.904286][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.918632][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.925922][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.936945][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.950382][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 39.950420][ T29] audit: type=1400 audit(1770577044.634:90): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.QBqxtK/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.968838][ T3320] veth0_macvtap: entered promiscuous mode [ 39.988651][ T29] audit: type=1400 audit(1770577044.634:91): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.010800][ T29] audit: type=1400 audit(1770577044.634:92): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.QBqxtK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.036371][ T29] audit: type=1400 audit(1770577044.634:93): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.049122][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.058465][ T29] audit: type=1400 audit(1770577044.634:94): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.QBqxtK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.092449][ T29] audit: type=1400 audit(1770577044.634:95): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.QBqxtK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.120252][ T29] audit: type=1400 audit(1770577044.644:96): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.140883][ T29] audit: type=1400 audit(1770577044.674:97): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.163792][ T29] audit: type=1400 audit(1770577044.684:98): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.188145][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.211117][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.229369][ T29] audit: type=1400 audit(1770577044.914:99): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.259782][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.280635][ T3320] veth1_macvtap: entered promiscuous mode [ 40.287989][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.311010][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.325429][ T3482] loop0: detected capacity change from 0 to 2048 [ 40.335277][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.357685][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.370229][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.379243][ T3306] loop0: p3 < > p4 < > [ 40.383472][ T3306] loop0: partition table partially beyond EOD, truncated [ 40.395239][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.428344][ T3306] loop0: p3 start 4284289 is beyond EOD, truncated [ 40.452694][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.479211][ T3482] loop0: p3 < > p4 < > [ 40.483460][ T3482] loop0: partition table partially beyond EOD, truncated [ 40.500646][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.518412][ T3482] loop0: p3 start 4284289 is beyond EOD, truncated [ 40.526858][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.552533][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.610408][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.637199][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.665016][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.691688][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 40.704984][ T3506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 40.717342][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.741421][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.766629][ T3402] IPVS: starting estimator thread 0... [ 40.796815][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.835284][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.835759][ C1] hrtimer: interrupt took 33359 ns [ 40.860592][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.869555][ T3511] IPVS: using max 2208 ests per chain, 110400 per kthread [ 41.142911][ T3536] SELinux: failed to load policy [ 41.304878][ T3550] loop3: detected capacity change from 0 to 512 [ 41.313422][ T3550] EXT4-fs: Ignoring removed nobh option [ 41.327306][ T3550] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.340672][ T3550] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.357914][ T3552] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.376031][ T3548] netlink: 208 bytes leftover after parsing attributes in process `syz.4.25'. [ 41.385272][ T3548] netlink: 208 bytes leftover after parsing attributes in process `syz.4.25'. [ 41.397300][ T3552] netlink: 'syz.0.27': attribute type 12 has an invalid length. [ 41.405055][ T3552] netlink: 'syz.0.27': attribute type 29 has an invalid length. [ 41.412786][ T3552] netlink: 148 bytes leftover after parsing attributes in process `syz.0.27'. [ 41.421838][ T3552] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 41.429475][ T3552] netlink: 43 bytes leftover after parsing attributes in process `syz.0.27'. [ 41.444239][ T3550] EXT4-fs (loop3): 1 truncate cleaned up [ 41.447348][ T3552] Zero length message leads to an empty skb [ 41.459202][ T3550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.514526][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.521954][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.545125][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.593383][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.624631][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.703221][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.712335][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.726065][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.738276][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.016667][ T3586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'. [ 42.093029][ T3589] syz.1.38: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 42.107606][ T3589] CPU: 1 UID: 0 PID: 3589 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.107662][ T3589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 42.107685][ T3589] Call Trace: [ 42.107697][ T3589] [ 42.107708][ T3589] __dump_stack+0x1d/0x30 [ 42.107750][ T3589] dump_stack_lvl+0x95/0xd0 [ 42.107791][ T3589] dump_stack+0x15/0x1b [ 42.107818][ T3589] warn_alloc+0x145/0x1c0 [ 42.107859][ T3589] ? kmem_cache_free+0xdf/0x380 [ 42.107894][ T3589] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 42.108009][ T3589] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 42.108121][ T3589] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 42.108162][ T3589] ? slow_avc_audit+0x14c/0x190 [ 42.108266][ T3589] ? should_fail_ex+0x30/0x280 [ 42.108304][ T3589] ? should_failslab+0x8c/0xb0 [ 42.108332][ T3589] vmalloc_user_noprof+0x7d/0xb0 [ 42.108415][ T3589] ? xskq_create+0x80/0xe0 [ 42.108525][ T3589] xskq_create+0x80/0xe0 [ 42.108623][ T3589] xsk_init_queue+0x91/0xe0 [ 42.108658][ T3589] xsk_setsockopt+0x3f5/0x640 [ 42.108687][ T3589] ? __pfx_xsk_setsockopt+0x10/0x10 [ 42.108838][ T3589] __sys_setsockopt+0x184/0x200 [ 42.108908][ T3589] __x64_sys_setsockopt+0x64/0x80 [ 42.108989][ T3589] x64_sys_call+0x21d5/0x3000 [ 42.109018][ T3589] do_syscall_64+0xc0/0x2a0 [ 42.109050][ T3589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.109074][ T3589] RIP: 0033:0x7fed28d8aeb9 [ 42.109169][ T3589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.109214][ T3589] RSP: 002b:00007fed277c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 42.109236][ T3589] RAX: ffffffffffffffda RBX: 00007fed29006090 RCX: 00007fed28d8aeb9 [ 42.109251][ T3589] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 42.109288][ T3589] RBP: 00007fed28df8c1f R08: 0000000000000004 R09: 0000000000000000 [ 42.109302][ T3589] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.109315][ T3589] R13: 00007fed29006128 R14: 00007fed29006090 R15: 00007ffd62a503b8 [ 42.109335][ T3589] [ 42.109346][ T3589] Mem-Info: [ 42.283771][ T3402] Process accounting resumed [ 42.285996][ T3589] active_anon:6097 inactive_anon:0 isolated_anon:0 [ 42.285996][ T3589] active_file:8209 inactive_file:2281 isolated_file:0 [ 42.285996][ T3589] unevictable:0 dirty:1463 writeback:0 [ 42.285996][ T3589] slab_reclaimable:3062 slab_unreclaimable:14261 [ 42.285996][ T3589] mapped:28997 shmem:320 pagetables:1164 [ 42.285996][ T3589] sec_pagetables:0 bounce:0 [ 42.285996][ T3589] kernel_misc_reclaimable:0 [ 42.285996][ T3589] free:1860842 free_pcp:9174 free_cma:0 [ 42.374011][ T3589] Node 0 active_anon:24620kB inactive_anon:0kB active_file:32836kB inactive_file:9124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115988kB dirty:5852kB writeback:0kB shmem:1628kB kernel_stack:3456kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 42.401819][ T3589] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 42.431925][ T3589] lowmem_reserve[]: 0 2879 7858 7858 [ 42.437377][ T3589] Node 0 DMA32 free:2944740kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948372kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 42.468782][ T3589] lowmem_reserve[]: 0 0 4978 4978 [ 42.474002][ T3589] Node 0 Normal free:4483268kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26012kB inactive_anon:0kB active_file:32836kB inactive_file:9124kB unevictable:0kB writepending:5852kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:31232kB local_pcp:19664kB free_cma:0kB [ 42.507091][ T3589] lowmem_reserve[]: 0 0 0 0 [ 42.511755][ T3589] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 42.524652][ T3589] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944740kB [ 42.540944][ T3589] Node 0 Normal: 1*4kB (U) 44*8kB (ME) 64*16kB (UME) 41*32kB (UM) 14*64kB (M) 3*128kB (UM) 3*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (ME) 1091*4096kB (M) = 4483204kB [ 42.558502][ T3589] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 42.567930][ T3589] 11415 total pagecache pages [ 42.572642][ T3589] 0 pages in swap cache [ 42.576860][ T3589] Free swap = 124996kB [ 42.581207][ T3589] Total swap = 124996kB [ 42.585437][ T3589] 2097051 pages RAM [ 42.589355][ T3589] 0 pages HighMem/MovableOnly [ 42.594317][ T3589] 81558 pages reserved [ 42.671459][ T3594] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.678765][ T3594] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.745530][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.755788][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.793781][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.833011][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.848161][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.885821][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.273699][ T3626] loop2: detected capacity change from 0 to 512 [ 43.383423][ T3626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.403145][ T3626] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.465623][ T3626] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.52: bg 0: block 217: padding at end of block bitmap is not set [ 43.613345][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.259511][ T3660] all: renamed from veth1_to_bond [ 44.329223][ T3663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.64'. [ 44.855854][ T3684] capability: warning: `syz.3.71' uses deprecated v2 capabilities in a way that may be insecure [ 45.091322][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 45.091340][ T29] audit: type=1326 audit(1770577049.774:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.1.72" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed28d8aeb9 code=0x0 [ 45.266354][ T29] audit: type=1400 audit(1770577049.944:201): avc: denied { cpu } for pid=3704 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.483153][ T29] audit: type=1400 audit(1770577050.154:202): avc: denied { read } for pid=3711 comm="syz.0.79" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.506099][ T29] audit: type=1400 audit(1770577050.154:203): avc: denied { open } for pid=3711 comm="syz.0.79" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.752453][ T3718] loop0: detected capacity change from 0 to 1024 [ 45.760306][ T3718] EXT4-fs: Ignoring removed orlov option [ 45.843739][ T3718] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 46.015505][ T29] audit: type=1400 audit(1770577050.694:204): avc: denied { watch } for pid=3721 comm="syz.1.82" path="/23" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.054796][ T3718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.131376][ T29] audit: type=1400 audit(1770577050.814:205): avc: denied { map } for pid=3717 comm="syz.0.81" path="/14/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.195514][ T29] audit: type=1400 audit(1770577050.814:206): avc: denied { execute } for pid=3717 comm="syz.0.81" path="/14/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.252292][ T29] audit: type=1400 audit(1770577050.884:207): avc: denied { append } for pid=3717 comm="syz.0.81" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.307087][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.525674][ T3741] bridge0: port 3(vlan2) entered blocking state [ 46.532256][ T3741] bridge0: port 3(vlan2) entered disabled state [ 46.539655][ T3741] vlan2: entered allmulticast mode [ 46.544886][ T3741] bridge0: entered allmulticast mode [ 46.551314][ T3741] vlan2: left allmulticast mode [ 46.556247][ T3741] bridge0: left allmulticast mode [ 46.662067][ T29] audit: type=1400 audit(1770577051.344:208): avc: denied { listen } for pid=3747 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.742470][ T3746] syzkaller0: entered promiscuous mode [ 46.748356][ T3746] syzkaller0: entered allmulticast mode [ 46.808327][ T3755] loop2: detected capacity change from 0 to 512 [ 46.863347][ T3755] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.869921][ T3755] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 46.879690][ T3755] EXT4-fs (loop2): 1 truncate cleaned up [ 46.886467][ T3755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.936701][ T3755] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.95: corrupted in-inode xattr: e_value out of bounds [ 47.015911][ T29] audit: type=1326 audit(1770577051.694:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3766 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed28d8aeb9 code=0x7ffc0000 [ 47.031535][ T3755] EXT4-fs (loop2): Remounting filesystem read-only [ 47.084329][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.224752][ T3774] loop2: detected capacity change from 0 to 8192 [ 47.232297][ T3774] ======================================================= [ 47.232297][ T3774] WARNING: The mand mount option has been deprecated and [ 47.232297][ T3774] and is ignored by this kernel. Remove the mand [ 47.232297][ T3774] option from the mount to silence this warning. [ 47.232297][ T3774] ======================================================= [ 47.274146][ T3776] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 47.307171][ T3776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.419010][ T3780] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 47.605258][ T3790] loop3: detected capacity change from 0 to 512 [ 47.634695][ T3790] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.681249][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.692628][ T3790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.722407][ T3790] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.109: lblock 23 mapped to illegal pblock 18 (length 1) [ 47.780487][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.918633][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.940978][ T3799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 47.950008][ T3799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 48.048814][ T3799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 48.057886][ T3799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 48.158836][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.276321][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.295333][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.335259][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.354747][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.364546][ T37] bridge_slave_1: left allmulticast mode [ 48.370347][ T37] bridge_slave_1: left promiscuous mode [ 48.376133][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.438644][ T37] bridge_slave_0: left allmulticast mode [ 48.444377][ T37] bridge_slave_0: left promiscuous mode [ 48.450285][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.469651][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.600454][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.612805][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.631817][ T37] bond0 (unregistering): Released all slaves [ 48.739888][ T37] hsr_slave_0: left promiscuous mode [ 48.766174][ T37] hsr_slave_1: left promiscuous mode [ 48.772021][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.779558][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.817671][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.825244][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.865480][ T37] veth1_macvtap: left promiscuous mode [ 48.876391][ T37] veth0_macvtap: left promiscuous mode [ 48.882047][ T37] veth1_vlan: left promiscuous mode [ 48.900588][ T37] veth0_vlan: left promiscuous mode [ 49.060949][ T37] team0 (unregistering): Port device team_slave_1 removed [ 49.084770][ T37] team0 (unregistering): Port device team_slave_0 removed [ 49.158980][ T3838] netlink: 'syz.4.121': attribute type 12 has an invalid length. [ 49.167313][ T3838] netlink: 'syz.4.121': attribute type 29 has an invalid length. [ 49.176033][ T3838] netlink: 148 bytes leftover after parsing attributes in process `syz.4.121'. [ 49.185051][ T3838] netlink: 'syz.4.121': attribute type 2 has an invalid length. [ 49.192826][ T3838] netlink: 23 bytes leftover after parsing attributes in process `syz.4.121'. [ 49.471485][ T3795] chnl_net:caif_netlink_parms(): no params data found [ 49.606535][ T3875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 49.615585][ T3875] netlink: 'syz.4.128': attribute type 12 has an invalid length. [ 49.663100][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.670350][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.736541][ T3795] bridge_slave_0: entered allmulticast mode [ 49.744575][ T3795] bridge_slave_0: entered promiscuous mode [ 49.755335][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.762558][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.790251][ T3795] bridge_slave_1: entered allmulticast mode [ 49.800897][ T3795] bridge_slave_1: entered promiscuous mode [ 49.821183][ T3875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 49.830187][ T3875] netlink: 'syz.4.128': attribute type 12 has an invalid length. [ 49.857379][ T31] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.912818][ T3795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.926784][ T31] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.950202][ T3795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.979650][ T31] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.020564][ T31] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.035085][ T3795] team0: Port device team_slave_0 added [ 50.052839][ T3795] team0: Port device team_slave_1 added [ 50.107097][ T3795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.114221][ T3795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.140194][ T3795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.187673][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 50.187692][ T29] audit: type=1400 audit(1770577054.874:226): avc: denied { setopt } for pid=3901 comm="syz.1.135" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.217331][ T3795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.224342][ T3795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.250420][ T3795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.326917][ T3795] hsr_slave_0: entered promiscuous mode [ 50.398630][ T29] audit: type=1400 audit(1770577055.084:227): avc: denied { shutdown } for pid=3906 comm="syz.1.137" lport=56548 faddr=fc00::fc fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.417658][ T3795] hsr_slave_1: entered promiscuous mode [ 50.437514][ T3795] debugfs: 'hsr0' already exists in 'hsr' [ 50.443327][ T3795] Cannot create hsr debugfs directory [ 50.477608][ T3916] netlink: 104 bytes leftover after parsing attributes in process `syz.4.139'. [ 50.486815][ T29] audit: type=1400 audit(1770577055.164:228): avc: denied { nlmsg_read } for pid=3915 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.799281][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.812964][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.834703][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.855257][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.013703][ T3936] loop0: detected capacity change from 0 to 512 [ 51.039244][ T3795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.052090][ T3795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.085565][ T3936] EXT4-fs (loop0): 1 orphan inode deleted [ 51.096480][ T3936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.096630][ T31] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 51.110950][ T3795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.118910][ T31] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 51.144703][ T3936] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.169621][ T3795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.201983][ T29] audit: type=1400 audit(1770577055.884:229): avc: denied { read } for pid=3935 comm="syz.0.144" path="/23/file1/blkio.bfq.io_wait_time_recursive" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.227077][ T29] audit: type=1400 audit(1770577055.884:230): avc: denied { ioctl } for pid=3935 comm="syz.0.144" path="/23/file1/blkio.bfq.io_wait_time_recursive" dev="loop0" ino=16 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.294259][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.304882][ T3795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.319224][ T3795] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.329838][ T3963] Illegal XDP return value 4294967294 on prog (id 31) dev N/A, expect packet loss! [ 51.360164][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.367303][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.385865][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.393053][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.449572][ T3795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.460167][ T3795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.525943][ T29] audit: type=1400 audit(1770577056.204:231): avc: denied { create } for pid=3977 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.628537][ T29] audit: type=1400 audit(1770577056.214:232): avc: denied { write } for pid=3977 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.647991][ T29] audit: type=1400 audit(1770577056.224:233): avc: denied { create } for pid=3978 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.668067][ T29] audit: type=1400 audit(1770577056.234:234): avc: denied { connect } for pid=3978 comm="syz.0.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.740425][ T3795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.037036][ T3795] veth0_vlan: entered promiscuous mode [ 52.057515][ T3795] veth1_vlan: entered promiscuous mode [ 52.100850][ T3795] veth0_macvtap: entered promiscuous mode [ 52.108658][ T3795] veth1_macvtap: entered promiscuous mode [ 52.120384][ T3795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.142091][ T3795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.162322][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.186551][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.195517][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.210989][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.287385][ T4059] loop3: detected capacity change from 0 to 128 [ 52.847798][ T4130] SELinux: failed to load policy [ 52.920737][ T4134] loop0: detected capacity change from 0 to 4096 [ 52.942951][ T4134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.077646][ T4147] syz.4.183 (4147) used greatest stack depth: 9336 bytes left [ 53.098912][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.305207][ T4166] SELinux: failed to load policy [ 53.372165][ T4173] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 53.424162][ T4179] loop5: detected capacity change from 0 to 2048 [ 53.468982][ T4179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.546899][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.647777][ T4181] macvlan2: entered promiscuous mode [ 53.653720][ T4181] batman_adv: batadv0: Adding interface: macvlan2 [ 53.660390][ T4181] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.686122][ T4181] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 54.233913][ T4212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4212 comm=syz.4.206 [ 54.251853][ T4210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 54.337172][ T4212] netlink: 'syz.4.206': attribute type 1 has an invalid length. [ 54.534879][ T4214] bond1: (slave bridge1): making interface the new active one [ 54.544235][ T4214] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 54.768344][ T4216] loop0: detected capacity change from 0 to 8192 [ 54.829855][ T3314] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 54.837790][ T3314] FAT-fs (loop0): Filesystem has been set read-only [ 54.999217][ T4252] netlink: 24 bytes leftover after parsing attributes in process `syz.5.223'. [ 55.164954][ T4268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.228'. [ 55.174050][ T4268] netlink: 'syz.5.228': attribute type 5 has an invalid length. [ 55.181810][ T4268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.228'. [ 55.194814][ T4268] geneve2: entered promiscuous mode [ 55.200242][ T4268] geneve2: entered allmulticast mode [ 55.231856][ T4085] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 65535 - 0 [ 55.241119][ T4085] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 65535 - 0 [ 55.253083][ T4085] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 65535 - 0 [ 55.262367][ T4085] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 65535 - 0 [ 55.290091][ T4270] netlink: 'syz.5.229': attribute type 4 has an invalid length. [ 55.303206][ T4270] netlink: 'syz.5.229': attribute type 17 has an invalid length. [ 55.341463][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 55.341482][ T29] audit: type=1400 audit(1770577060.024:301): avc: denied { write } for pid=4271 comm="syz.5.230" path="socket:[7032]" dev="sockfs" ino=7032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.528879][ T4279] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 55.541881][ T4279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.557125][ T4279] bond1: (slave gretap1): making interface the new active one [ 55.565629][ T4279] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 55.594222][ T29] audit: type=1400 audit(1770577060.274:302): avc: denied { bind } for pid=4281 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.354487][ T29] audit: type=1400 audit(1770577061.024:303): avc: denied { create } for pid=4306 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 56.374561][ T29] audit: type=1400 audit(1770577061.034:304): avc: denied { sys_admin } for pid=4306 comm="syz.4.244" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 56.609334][ T29] audit: type=1400 audit(1770577061.294:305): avc: denied { setopt } for pid=4311 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.747815][ T4296] loop3: detected capacity change from 0 to 1024 [ 56.778958][ T29] audit: type=1400 audit(1770577061.464:306): avc: denied { create } for pid=4323 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 56.831340][ T29] audit: type=1400 audit(1770577061.514:307): avc: denied { module_request } for pid=4325 comm="syz.1.251" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.902719][ T29] audit: type=1400 audit(1770577061.584:308): avc: denied { create } for pid=4332 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.964689][ T29] audit: type=1400 audit(1770577061.614:309): avc: denied { read } for pid=4332 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.984597][ T29] audit: type=1400 audit(1770577061.614:310): avc: denied { write } for pid=4332 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.004817][ T4296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.021295][ T4089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.032249][ T4089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.053664][ T4296] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.240: Allocating blocks 385-513 which overlap fs metadata [ 57.105671][ T4296] EXT4-fs (loop3): pa ffff888107dfe070: logic 0, phys. 113, len 25 [ 57.114012][ T4296] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 57.153492][ T4089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.163924][ T4089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.228678][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.250326][ T4089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.261062][ T4089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.400393][ T4089] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.410893][ T4089] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.563285][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.715683][ T4089] bridge_slave_1: left allmulticast mode [ 57.721598][ T4089] bridge_slave_1: left promiscuous mode [ 57.727388][ T4089] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.736813][ T4089] bridge_slave_0: left allmulticast mode [ 57.742568][ T4089] bridge_slave_0: left promiscuous mode [ 57.748356][ T4089] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.814668][ T4356] netlink: 48 bytes leftover after parsing attributes in process `syz.5.259'. [ 57.877660][ T4089] bond1 (unregistering): (slave bridge1): Releasing active interface [ 57.958752][ T4089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.980553][ T4089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.002048][ T4089] bond0 (unregistering): Released all slaves [ 58.025140][ T4089] bond1 (unregistering): Released all slaves [ 58.091502][ T4089] hsr_slave_0: left promiscuous mode [ 58.098564][ T4089] hsr_slave_1: left promiscuous mode [ 58.104975][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.112617][ T4089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.120812][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.128448][ T4089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.141969][ T4089] veth1_macvtap: left promiscuous mode [ 58.147594][ T4089] veth0_macvtap: left promiscuous mode [ 58.153291][ T4089] veth1_vlan: left promiscuous mode [ 58.158726][ T4089] veth0_vlan: left promiscuous mode [ 58.241087][ T4089] team0 (unregistering): Port device team_slave_1 removed [ 58.251621][ T4089] team0 (unregistering): Port device team_slave_0 removed [ 58.363016][ T4343] chnl_net:caif_netlink_parms(): no params data found [ 58.407049][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.414428][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.422350][ T4343] bridge_slave_0: entered allmulticast mode [ 58.429016][ T4343] bridge_slave_0: entered promiscuous mode [ 58.436038][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.443260][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.450940][ T4343] bridge_slave_1: entered allmulticast mode [ 58.458133][ T4343] bridge_slave_1: entered promiscuous mode [ 58.477316][ T4343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.488092][ T4343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.510156][ T4343] team0: Port device team_slave_0 added [ 58.517755][ T4343] team0: Port device team_slave_1 added [ 58.535971][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.543070][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.569291][ T4343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.580889][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.587950][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.614452][ T4343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.645683][ T4343] hsr_slave_0: entered promiscuous mode [ 58.652140][ T4343] hsr_slave_1: entered promiscuous mode [ 59.012928][ T4389] netlink: 64 bytes leftover after parsing attributes in process `syz.5.268'. [ 59.062990][ T4391] netlink: 'syz.5.269': attribute type 2 has an invalid length. [ 59.070758][ T4391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.269'. [ 59.080581][ T4391] netlink: 'syz.5.269': attribute type 2 has an invalid length. [ 59.088362][ T4391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.269'. [ 59.162558][ T4398] loop5: detected capacity change from 0 to 128 [ 59.172259][ T4398] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 59.182499][ T4398] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.195313][ T4398] ext2 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.237299][ T3795] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.260211][ T4401] geneve3: entered promiscuous mode [ 59.397330][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.406028][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.415819][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.424531][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.434342][ T4409] netlink: 566 bytes leftover after parsing attributes in process `syz.5.277'. [ 59.576361][ T3624] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.578362][ T4350] Bluetooth: hci0: command 0x1003 tx timeout [ 59.588959][ T4349] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 59.660284][ T4322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.672083][ T4343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.683765][ T4343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.693576][ T4343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.718661][ T4413] loop0: detected capacity change from 0 to 128 [ 59.727833][ T4343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.752774][ T4413] syz.0.278: attempt to access beyond end of device [ 59.752774][ T4413] loop0: rw=8423425, sector=102, nr_sectors = 32 limit=128 [ 59.768928][ T4413] syz.0.278: attempt to access beyond end of device [ 59.768928][ T4413] loop0: rw=8423425, sector=102, nr_sectors = 32 limit=128 [ 59.839085][ T4343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.895735][ T4343] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.950736][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.957992][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.999776][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.006937][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.018072][ T4447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.284'. [ 60.221370][ T4478] loop5: detected capacity change from 0 to 512 [ 60.236685][ T4480] batadv_slave_1: entered promiscuous mode [ 60.261664][ T4473] capability: warning: `syz.1.290' uses 32-bit capabilities (legacy support in use) [ 60.263449][ T4476] batadv_slave_1: left promiscuous mode [ 60.288208][ T4478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.294127][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.318677][ T4478] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.395909][ T4494] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.291: corrupted inode contents [ 60.448613][ T4494] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.291: mark_inode_dirty error [ 60.534678][ T4494] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.291: corrupted inode contents [ 60.626861][ T4494] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.291: mark_inode_dirty error [ 60.693079][ T4343] veth0_vlan: entered promiscuous mode [ 60.721106][ T4343] veth1_vlan: entered promiscuous mode [ 60.736866][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 60.736960][ T29] audit: type=1400 audit(1770577065.424:345): avc: denied { create } for pid=4477 comm="syz.5.291" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 60.792508][ T4478] Set syz1 is full, maxelem 65536 reached [ 60.799733][ T4509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 60.818827][ T4343] veth0_macvtap: entered promiscuous mode [ 60.842605][ T4343] veth1_macvtap: entered promiscuous mode [ 60.856439][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.870203][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.907720][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.932104][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.945639][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.955036][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.964081][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.030120][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 61.352500][ T4538] IPv4: Oversized IP packet from 127.202.26.0 [ 61.455636][ T4545] SELinux: unknown common r [ 61.461337][ T4545] SELinux: failed to load policy [ 61.461995][ T29] audit: type=1400 audit(1770577066.144:346): avc: denied { getopt } for pid=4548 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.506899][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 61.520415][ T4551] loop0: detected capacity change from 0 to 512 [ 61.528057][ T4547] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 61.554823][ T4551] EXT4-fs (loop0): 1 orphan inode deleted [ 61.564719][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.312'. [ 61.573664][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.312'. [ 61.582652][ T4089] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 61.592722][ T4089] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 61.623243][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 61.624060][ T4551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.633653][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 61.684269][ T4551] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.744032][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.756555][ T60] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 61.766861][ T60] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 62.222223][ T4601] ipip0: entered promiscuous mode [ 62.417010][ T29] audit: type=1400 audit(1770577067.094:347): avc: denied { connect } for pid=4618 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.532292][ T29] audit: type=1400 audit(1770577067.204:348): avc: denied { ioctl } for pid=4624 comm="syz.1.334" path="socket:[8007]" dev="sockfs" ino=8007 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.720786][ T4649] loop5: detected capacity change from 0 to 512 [ 62.730281][ T4649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.750703][ T4649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.763679][ T4649] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.794904][ T29] audit: type=1400 audit(1770577067.464:349): avc: denied { add_name } for pid=4646 comm="syz.5.346" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.837518][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.854115][ T4656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 62.898830][ T4662] syz_tun: entered allmulticast mode [ 62.971181][ T29] audit: type=1400 audit(1770577067.654:350): avc: denied { accept } for pid=4663 comm="syz.0.351" lport=46993 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.994639][ T29] audit: type=1400 audit(1770577067.654:351): avc: denied { write } for pid=4663 comm="syz.0.351" lport=46993 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 63.019034][ T29] audit: type=1400 audit(1770577067.654:352): avc: denied { setopt } for pid=4663 comm="syz.0.351" lport=46993 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 63.120044][ T4673] geneve2: entered promiscuous mode [ 63.125414][ T4673] geneve2: entered allmulticast mode [ 63.148018][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.168479][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.190428][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.206378][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 63.320834][ T4693] loop3: detected capacity change from 0 to 1024 [ 63.336848][ T4693] EXT4-fs: Ignoring removed orlov option [ 63.358863][ T4693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.388980][ T4693] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.419056][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.444071][ T4703] loop3: detected capacity change from 0 to 512 [ 63.451094][ T4703] EXT4-fs: Ignoring removed i_version option [ 63.474660][ T4703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.487943][ T4703] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.579834][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.062811][ T4745] loop0: detected capacity change from 0 to 128 [ 64.073584][ T4745] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.086565][ T4745] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.127651][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.450327][ T4754] loop5: detected capacity change from 0 to 1024 [ 64.457949][ T4754] EXT4-fs: Ignoring removed orlov option [ 64.471419][ T4754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.570917][ T4764] __nla_validate_parse: 2 callbacks suppressed [ 64.570939][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 64.611253][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.621421][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.630655][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 64.646432][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.655518][ T31] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.669349][ T4773] netlink: 'syz.1.384': attribute type 29 has an invalid length. [ 64.686723][ T4773] netlink: 'syz.1.384': attribute type 29 has an invalid length. [ 64.717115][ T4773] netlink: 500 bytes leftover after parsing attributes in process `syz.1.384'. [ 64.779121][ T4782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 64.789266][ T4782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.000837][ T4585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.084329][ T4791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.390'. [ 65.093316][ T4791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 65.127990][ T4795] netlink: 'syz.0.392': attribute type 3 has an invalid length. [ 65.135783][ T4795] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.392'. [ 65.329057][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.843768][ T4854] loop5: detected capacity change from 0 to 512 [ 65.858955][ T4854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.873809][ T4854] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.899899][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 65.899918][ T29] audit: type=1400 audit(1770577070.584:371): avc: denied { bind } for pid=4858 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.925401][ T29] audit: type=1400 audit(1770577070.584:372): avc: denied { setopt } for pid=4858 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.965410][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.086020][ T1000] kernel write not supported for file bpf-prog (pid: 1000 comm: kworker/1:2) [ 66.102390][ T29] audit: type=1400 audit(1770577070.764:373): avc: denied { bind } for pid=4869 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.206505][ T4873] loop4: detected capacity change from 0 to 512 [ 66.226484][ T4873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 66.243249][ T4873] System zones: 1-12 [ 66.253142][ T4873] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.419: corrupted in-inode xattr: e_value size too large [ 66.325235][ T4873] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.419: couldn't read orphan inode 15 (err -117) [ 66.349008][ T4880] netlink: 268 bytes leftover after parsing attributes in process `syz.0.421'. [ 66.368525][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 66.386144][ T4873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.823681][ T29] audit: type=1326 audit(1770577071.504:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4895 comm="syz.5.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cf346aeb9 code=0x0 [ 67.495279][ T4904] loop0: detected capacity change from 0 to 512 [ 67.545599][ T4904] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #11: block 530: comm syz.0.431: lblock 4 mapped to illegal pblock 530 (length 1) [ 67.606802][ T4904] ------------[ cut here ]------------ [ 67.611703][ T4907] process 'syz.1.432' launched './file1' with NULL argv: empty string added [ 67.612312][ T4904] EA inode 11 i_nlink=2 [ 67.612341][ T4904] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.0.431/4904 [ 67.635866][ T4904] Modules linked in: [ 67.639824][ T4904] CPU: 0 UID: 0 PID: 4904 Comm: syz.0.431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.649608][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 67.660418][ T4904] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 67.667405][ T4904] Code: 64 e4 9a ff 4c 8d 2d bd 1f 3e 05 49 8d 7e 40 e8 74 ce b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 c9 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f de d0 03 66 66 66 66 66 66 2e [ 67.687124][ T4904] RSP: 0018:ffffc90000e07778 EFLAGS: 00010246 [ 67.693317][ T4904] RAX: ffff88811b1dab90 RBX: ffff888107eb6080 RCX: ffffffff81be1d78 [ 67.696439][ T29] audit: type=1400 audit(1770577072.374:375): avc: denied { execute_no_trans } for pid=4906 comm="syz.1.432" path="/104/file1" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.701347][ T4904] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3d20 [ 67.732711][ T4904] RBP: 000000000000000b R08: 0001888107eb6033 R09: 0000000000000000 [ 67.740792][ T4904] R10: ffffc90000e076a8 R11: 0001c90000e076a8 R12: ffff888107eb6030 [ 67.748928][ T4904] R13: ffffffff86fc3d20 R14: ffff888107eb5fe8 R15: 0000000000000001 [ 67.757069][ T4904] FS: 00007f1ed912f6c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 67.766055][ T4904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.772906][ T4904] CR2: 0000000100000000 CR3: 0000000126158000 CR4: 00000000003506f0 [ 67.780961][ T4904] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 67.789036][ T4904] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 67.797107][ T4904] Call Trace: [ 67.800441][ T4904] [ 67.803413][ T4904] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 67.809483][ T4904] ? errseq_check+0x2c/0x50 [ 67.814050][ T4904] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 67.819834][ T4904] ? ext4_truncate+0x92b/0xad0 [ 67.825103][ T4904] ext4_evict_inode+0xa1f/0xd40 [ 67.830291][ T4904] ? __pfx_ext4_evict_inode+0x10/0x10 [ 67.835717][ T4904] evict+0x2af/0x510 [ 67.839732][ T4904] ? __dquot_initialize+0x146/0x7c0 [ 67.845068][ T4904] iput+0x4b9/0x650 [ 67.848974][ T4904] ext4_process_orphan+0x1a9/0x1c0 [ 67.854329][ T4904] ext4_orphan_cleanup+0x6a8/0xa00 [ 67.859557][ T4904] ext4_fill_super+0x3476/0x3800 [ 67.864537][ T4904] ? set_blocksize+0x1a3/0x310 [ 67.869473][ T4904] ? setup_bdev_super+0x30e/0x370 [ 67.874716][ T4904] ? __pfx_ext4_fill_super+0x10/0x10 [ 67.880106][ T4904] get_tree_bdev_flags+0x291/0x300 [ 67.885266][ T4904] ? __pfx_ext4_fill_super+0x10/0x10 [ 67.890793][ T4904] get_tree_bdev+0x1f/0x30 [ 67.895441][ T4904] ext4_get_tree+0x1c/0x30 [ 67.900018][ T4904] vfs_get_tree+0x57/0x1d0 [ 67.904486][ T4904] do_new_mount+0x288/0x700 [ 67.909081][ T4904] path_mount+0x4d0/0xbc0 [ 67.913509][ T4904] ? user_path_at+0xbf/0x130 [ 67.918319][ T4904] __se_sys_mount+0x28c/0x2e0 [ 67.923322][ T4904] __x64_sys_mount+0x67/0x80 [ 67.928065][ T4904] x64_sys_call+0x2cca/0x3000 [ 67.932803][ T4904] do_syscall_64+0xc0/0x2a0 [ 67.937424][ T4904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.943362][ T4904] RIP: 0033:0x7f1eda6dc14a [ 67.947843][ T4904] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.967750][ T4904] RSP: 002b:00007f1ed912ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.976245][ T4904] RAX: ffffffffffffffda RBX: 00007f1ed912eee0 RCX: 00007f1eda6dc14a [ 67.984333][ T4904] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f1ed912eea0 [ 67.992395][ T4904] RBP: 0000200000000180 R08: 00007f1ed912eee0 R09: 0000000000800718 [ 68.000484][ T4904] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 68.008524][ T4904] R13: 00007f1ed912eea0 R14: 0000000000000482 R15: 0000200000000200 [ 68.016795][ T4904] [ 68.019950][ T4904] ---[ end trace 0000000000000000 ]--- [ 68.026098][ T4904] EXT4-fs (loop0): 1 orphan inode deleted [ 68.032615][ T4904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.096562][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.281167][ T4922] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4922 comm=syz.0.438 [ 68.394624][ T4924] bridge_slave_0: left allmulticast mode [ 68.400514][ T4924] bridge_slave_0: left promiscuous mode [ 68.406299][ T4924] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.440523][ T4924] bridge_slave_1: left allmulticast mode [ 68.446288][ T4924] bridge_slave_1: left promiscuous mode [ 68.452238][ T4924] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.495026][ T4924] bond0: (slave bond_slave_0): Releasing backup interface [ 68.529609][ T4924] bond0: (slave bond_slave_1): Releasing backup interface [ 68.565652][ T4924] team0: Port device team_slave_0 removed [ 68.603737][ T4924] team0: Port device team_slave_1 removed [ 68.611034][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.618596][ T4924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.650162][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.657734][ T4924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.708426][ T4924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.770736][ T29] audit: type=1400 audit(1770577073.444:376): avc: denied { bind } for pid=4928 comm="syz.0.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.790149][ T29] audit: type=1400 audit(1770577073.444:377): avc: denied { node_bind } for pid=4928 comm="syz.0.441" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 68.876277][ T29] audit: type=1400 audit(1770577073.454:378): avc: denied { create } for pid=4930 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 68.895782][ T29] audit: type=1400 audit(1770577073.504:379): avc: denied { ioctl } for pid=4930 comm="syz.1.442" path="socket:[9472]" dev="sockfs" ino=9472 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 68.920809][ T4933] netlink: 'syz.1.444': attribute type 6 has an invalid length. [ 68.928537][ T4933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.444'. [ 69.160927][ T29] audit: type=1400 audit(1770577073.844:380): avc: denied { bind } for pid=4950 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.225280][ T4949] loop5: detected capacity change from 0 to 2048 [ 69.244618][ T4343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.276368][ T4949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.299125][ T4949] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.872577][ T4089] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 69.898094][ T4983] team0 (unregistering): Port device team_slave_0 removed [ 69.914878][ T4983] team0 (unregistering): Port device team_slave_1 removed [ 69.922719][ T4089] EXT4-fs (loop5): Remounting filesystem read-only [ 69.963985][ T4992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.052190][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.071099][ T4999] __nla_validate_parse: 1 callbacks suppressed [ 70.071119][ T4999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.470'. [ 70.123518][ T4999] gtp0: entered promiscuous mode [ 70.150916][ T5005] ªªªªªª: renamed from vlan0 (while UP) [ 70.352277][ T5008] loop4: detected capacity change from 0 to 8192 [ 70.670678][ T5033] syzkaller1: entered promiscuous mode [ 70.676463][ T5033] syzkaller1: entered allmulticast mode [ 70.688728][ T5042] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 70.862251][ T5050] loop3: detected capacity change from 0 to 128 [ 70.929311][ T5050] FAT-fs (loop3): Directory bread(block 32) failed [ 70.965754][ T5050] FAT-fs (loop3): Directory bread(block 33) failed [ 70.978298][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 70.978346][ T29] audit: type=1400 audit(1770577075.664:398): avc: denied { watch_reads } for pid=5060 comm="syz.0.497" path="/104" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.025044][ T5050] FAT-fs (loop3): Directory bread(block 34) failed [ 71.041160][ T5050] FAT-fs (loop3): Directory bread(block 35) failed [ 71.061393][ T5050] FAT-fs (loop3): Directory bread(block 36) failed [ 71.084473][ T5050] FAT-fs (loop3): Directory bread(block 37) failed [ 71.101280][ T5050] FAT-fs (loop3): Directory bread(block 38) failed [ 71.108756][ T5068] loop0: detected capacity change from 0 to 4096 [ 71.118178][ T5050] FAT-fs (loop3): Directory bread(block 39) failed [ 71.130001][ T5050] FAT-fs (loop3): Directory bread(block 40) failed [ 71.141448][ T5068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.154327][ T5050] FAT-fs (loop3): Directory bread(block 41) failed [ 71.185522][ T5068] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=4096, device loop0 blocksize: 4096 [ 71.199539][ T5068] grow_buffers: requested out-of-range block 144115188075855872 for device loop0 [ 71.208989][ T5068] EXT4-fs warning (device loop0): ext4_resize_fs:2019: can't read last block, resize aborted [ 71.250227][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.566851][ T5099] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.512'. [ 71.586689][ T5099] netlink: zone id is out of range [ 71.593189][ T5099] netlink: zone id is out of range [ 71.642809][ T5099] netlink: zone id is out of range [ 71.653091][ T5099] netlink: del zone limit has 8 unknown bytes [ 71.914137][ T29] audit: type=1400 audit(1770577076.564:399): avc: denied { execute } for pid=5114 comm="syz.3.519" path="/91/cpu.stat" dev="tmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.965247][ T29] audit: type=1400 audit(1770577076.634:400): avc: denied { mounton } for pid=5118 comm="syz.3.520" path="/92/file0" dev="tmpfs" ino=498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.462083][ T29] audit: type=1400 audit(1770577077.144:401): avc: denied { allowed } for pid=5125 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.692763][ T29] audit: type=1400 audit(1770577077.324:402): avc: denied { setopt } for pid=5128 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.787866][ T29] audit: type=1400 audit(1770577077.474:403): avc: denied { mount } for pid=5131 comm="syz.1.526" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 72.947579][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.965685][ T3624] Bluetooth: hci0: unexpected event 0x0f length: 0 < 4 [ 73.211231][ T29] audit: type=1326 audit(1770577077.894:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.3.535" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89a081aeb9 code=0x0 [ 73.347056][ T29] audit: type=1400 audit(1770577078.034:405): avc: denied { bind } for pid=5166 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.376523][ T29] audit: type=1400 audit(1770577078.034:406): avc: denied { name_bind } for pid=5166 comm="syz.1.538" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 73.397517][ T29] audit: type=1400 audit(1770577078.034:407): avc: denied { node_bind } for pid=5166 comm="syz.1.538" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 73.545304][ T5176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 73.628247][ T5181] bridge_slave_0: left allmulticast mode [ 73.634079][ T5181] bridge_slave_0: left promiscuous mode [ 73.639907][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.663020][ T5181] bridge_slave_1: left allmulticast mode [ 73.668798][ T5181] bridge_slave_1: left promiscuous mode [ 73.674503][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.697088][ T5181] bond0: (slave bond_slave_0): Releasing backup interface [ 73.722516][ T5181] bond0: (slave bond_slave_1): Releasing backup interface [ 73.733495][ T5181] team0: Port device team_slave_0 removed [ 73.747776][ T5181] team0: Port device team_slave_1 removed [ 73.766330][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.794031][ T5181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.814493][ T5181] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.888699][ T5190] loop5: detected capacity change from 0 to 512 [ 73.914242][ T5190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.929967][ T5190] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.957661][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.006491][ T5199] mmap: syz.5.550 (5199) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.073400][ T37] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.082393][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 74.093116][ T37] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.102208][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 74.121252][ T37] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.130311][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 74.140080][ T37] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.149109][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 74.194720][ T3395] IPVS: starting estimator thread 0... [ 74.261806][ T5209] netlink: 7 bytes leftover after parsing attributes in process `syz.3.554'. [ 74.271686][ T5209] netlink: 7 bytes leftover after parsing attributes in process `syz.3.554'. [ 74.286441][ T5206] IPVS: using max 2160 ests per chain, 108000 per kthread [ 74.347079][ T5216] bridge_slave_0: left allmulticast mode [ 74.352805][ T5216] bridge_slave_0: left promiscuous mode [ 74.358670][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.369008][ T5216] bridge_slave_1: left allmulticast mode [ 74.374752][ T5216] bridge_slave_1: left promiscuous mode [ 74.380791][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.390534][ T5216] bond0: (slave bond_slave_0): Releasing backup interface [ 74.402353][ T5216] bond0: (slave bond_slave_1): Releasing backup interface [ 74.420946][ T5216] team0: Port device team_slave_0 removed [ 74.434974][ T5216] team0: Port device team_slave_1 removed [ 74.448215][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.465851][ T5216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.482581][ T37] IPVS: stop unused estimator thread 0... [ 74.596147][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 74.932315][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 74.941302][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 75.016259][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.016511][ T5222] Bluetooth: hci0: command 0x1003 tx timeout [ 75.050521][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.057901][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.299404][ T5257] loop5: detected capacity change from 0 to 512 [ 75.332000][ T5257] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.363896][ T5257] EXT4-fs (loop5): 1 truncate cleaned up [ 75.388023][ T5257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.668412][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.991489][ T5296] bond0: (slave bond_slave_1): Releasing backup interface [ 76.123876][ T5300] loop0: detected capacity change from 0 to 4096 [ 76.141065][ T5300] EXT4-fs: inline encryption not supported [ 76.166921][ T5300] EXT4-fs: test_dummy_encryption option not supported [ 76.413781][ T5315] ipip1: entered promiscuous mode [ 76.616364][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 76.622482][ T3624] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 76.913597][ T5328] loop3: detected capacity change from 0 to 1024 [ 76.937793][ T5328] EXT4-fs: inline encryption not supported [ 76.970448][ T5328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.045266][ T5328] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 77.063534][ T5328] EXT4-fs (loop3): Remounting filesystem read-only [ 77.091606][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.130154][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 77.130172][ T29] audit: type=1400 audit(2000000001.240:450): avc: denied { read } for pid=5336 comm="syz.3.599" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.159545][ T29] audit: type=1400 audit(2000000001.240:451): avc: denied { open } for pid=5336 comm="syz.3.599" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.184655][ T5337] rtc_cmos 00:00: Alarms can be up to one day in the future [ 77.192381][ T29] audit: type=1400 audit(2000000001.290:452): avc: denied { ioctl } for pid=5336 comm="syz.3.599" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.277892][ T29] audit: type=1326 audit(2000000001.390:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.3.600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89a081aeb9 code=0x0 [ 77.728752][ T5367] netlink: 44 bytes leftover after parsing attributes in process `syz.1.611'. [ 77.738186][ T5367] netlink: 76 bytes leftover after parsing attributes in process `syz.1.611'. [ 78.326268][ T29] audit: type=1400 audit(2000000002.420:454): avc: denied { map } for pid=5378 comm="syz.4.615" path="socket:[11410]" dev="sockfs" ino=11410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.349423][ T29] audit: type=1400 audit(2000000002.420:455): avc: denied { accept } for pid=5378 comm="syz.4.615" path="socket:[11410]" dev="sockfs" ino=11410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.460298][ T5382] tipc: Started in network mode [ 78.465020][ T29] audit: type=1400 audit(2000000002.490:456): avc: denied { connect } for pid=5378 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.465270][ T5382] tipc: Node identity 4, cluster identity 4711 [ 78.484803][ T29] audit: type=1326 audit(2000000002.530:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 78.491044][ T5382] tipc: Node number set to 4 [ 78.519896][ T29] audit: type=1326 audit(2000000002.530:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 78.543394][ T29] audit: type=1326 audit(2000000002.530:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5380 comm="syz.5.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 78.617986][ T5385] loop3: detected capacity change from 0 to 512 [ 78.667095][ T5385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.696048][ T5385] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.617'. [ 78.716836][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.761057][ T5402] sock: sock_set_timeout: `syz.3.623' (pid 5402) tries to set negative timeout [ 79.033375][ T4094] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.042651][ T4094] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 65535 - 0 [ 79.060623][ T4094] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.069787][ T4094] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 65535 - 0 [ 79.086460][ T4094] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.095552][ T4094] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 65535 - 0 [ 79.125221][ T4094] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.134234][ T4094] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 65535 - 0 [ 80.189042][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.653'. [ 80.238679][ T5478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 80.266155][ T5478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 80.713801][ T5509] all: renamed from bridge_slave_0 [ 81.405033][ T5557] sch_fq: defrate 7 ignored. [ 81.858639][ T4082] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.133408][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 82.168339][ T5581] macvtap1: entered promiscuous mode [ 82.173797][ T5581] erspan0: entered promiscuous mode [ 82.179214][ T5581] macvtap1: entered allmulticast mode [ 82.184670][ T5581] erspan0: entered allmulticast mode [ 82.209690][ T5584] erspan0: left allmulticast mode [ 82.214785][ T5584] erspan0: left promiscuous mode [ 82.285190][ T5592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.704'. [ 82.329889][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 82.329907][ T29] audit: type=1400 audit(2000000006.440:572): avc: denied { unmount } for pid=5595 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 82.889025][ T3395] IPVS: starting estimator thread 0... [ 82.978167][ T5620] IPVS: using max 2160 ests per chain, 108000 per kthread [ 83.035110][ T5628] netlink: 56 bytes leftover after parsing attributes in process `syz.1.719'. [ 83.096918][ T29] audit: type=1400 audit(2000000007.210:573): avc: denied { bind } for pid=5631 comm="syz.5.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.294347][ T29] audit: type=1400 audit(2000000007.370:574): avc: denied { write } for pid=5637 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.388303][ T5644] loop4: detected capacity change from 0 to 8192 [ 83.662194][ T5673] netlink: 'syz.5.739': attribute type 13 has an invalid length. [ 83.703233][ T4089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.746622][ T5672] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 83.793828][ T4089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.889436][ T4089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.907731][ T3624] Bluetooth: hci0: command 0x1003 tx timeout [ 83.913832][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.927484][ T29] audit: type=1400 audit(2000000008.030:575): avc: denied { ioctl } for pid=5688 comm="syz.5.747" path="socket:[13653]" dev="sockfs" ino=13653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.988932][ T4089] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.138799][ T4089] bridge_slave_1: left allmulticast mode [ 84.144563][ T4089] bridge_slave_1: left promiscuous mode [ 84.150375][ T4089] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.182843][ T4089] bridge_slave_0: left allmulticast mode [ 84.183739][ T29] audit: type=1400 audit(2000000008.290:576): avc: denied { name_connect } for pid=5705 comm="syz.3.751" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 84.188625][ T4089] bridge_slave_0: left promiscuous mode [ 84.216135][ T4089] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.236626][ T29] audit: type=1400 audit(2000000008.340:577): avc: denied { name_connect } for pid=5705 comm="syz.3.751" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 84.379054][ T4089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.397876][ T4089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.412990][ T4089] bond0 (unregistering): Released all slaves [ 84.489826][ T4089] tipc: Left network mode [ 84.503757][ T4089] hsr_slave_0: left promiscuous mode [ 84.511733][ T4089] hsr_slave_1: left promiscuous mode [ 84.537953][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.545418][ T4089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.577639][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.585351][ T4089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.616275][ T4089] veth1_macvtap: left promiscuous mode [ 84.622078][ T4089] veth0_macvtap: left promiscuous mode [ 84.634210][ T4089] veth1_vlan: left promiscuous mode [ 84.640719][ T4089] veth0_vlan: left promiscuous mode [ 84.741383][ T4089] team0 (unregistering): Port device team_slave_1 removed [ 84.753048][ T4089] team0 (unregistering): Port device team_slave_0 removed [ 84.845609][ T5677] chnl_net:caif_netlink_parms(): no params data found [ 84.923229][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.931166][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.939212][ T5677] bridge_slave_0: entered allmulticast mode [ 84.950119][ T5677] bridge_slave_0: entered promiscuous mode [ 84.977282][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.984393][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.992790][ T5677] bridge_slave_1: entered allmulticast mode [ 84.999840][ T5677] bridge_slave_1: entered promiscuous mode [ 85.023401][ T5677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.034596][ T5677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.056547][ T5677] team0: Port device team_slave_0 added [ 85.073801][ T5677] team0: Port device team_slave_1 added [ 85.105161][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.112271][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.139095][ T5677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.166575][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.173663][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.199811][ T5677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.260058][ T29] audit: type=1400 audit(2000000009.370:578): avc: denied { create } for pid=5785 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.283021][ T29] audit: type=1400 audit(2000000009.390:579): avc: denied { bind } for pid=5785 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.302423][ T29] audit: type=1400 audit(2000000009.390:580): avc: denied { listen } for pid=5785 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.322050][ T29] audit: type=1400 audit(2000000009.390:581): avc: denied { connect } for pid=5785 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.352137][ T5677] hsr_slave_0: entered promiscuous mode [ 85.365704][ T5677] hsr_slave_1: entered promiscuous mode [ 85.529824][ T5677] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 85.546986][ T5677] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 85.560010][ T5677] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 85.575957][ T5677] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 85.659089][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.684745][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.765'. [ 85.698782][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.765'. [ 85.710213][ T4094] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.721473][ T4089] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.732532][ T5677] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.745766][ T4089] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.762063][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.769223][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.862386][ T31] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.873119][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.880283][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.019916][ T5677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.348525][ T5677] veth0_vlan: entered promiscuous mode [ 86.374144][ T5677] veth1_vlan: entered promiscuous mode [ 86.422921][ T5677] veth0_macvtap: entered promiscuous mode [ 86.422971][ T5867] SELinux: failed to load policy [ 86.456072][ T5677] veth1_macvtap: entered promiscuous mode [ 86.468436][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.483487][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.498256][ T4089] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.515196][ T4089] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.525626][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.547120][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.645834][ T5886] IPVS: Scheduler module ip_vs_ not found [ 86.718981][ T5882] SELinux: failed to load policy [ 87.024714][ T5926] netlink: 56 bytes leftover after parsing attributes in process `syz.3.803'. [ 87.035869][ T5926] loop3: detected capacity change from 0 to 128 [ 87.045481][ T5926] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.086730][ T5926] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.250288][ T5938] tipc: Started in network mode [ 87.255308][ T5938] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 87.262738][ T5938] tipc: Enabled bearer , priority 18 [ 87.352304][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 87.352324][ T29] audit: type=1326 audit(2000000011.460:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 87.382541][ T29] audit: type=1326 audit(2000000011.460:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 87.406218][ T29] audit: type=1326 audit(2000000011.470:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 87.429791][ T29] audit: type=1326 audit(2000000011.470:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 87.453536][ T29] audit: type=1326 audit(2000000011.470:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 87.476857][ T29] audit: type=1326 audit(2000000011.470:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 87.500440][ T29] audit: type=1326 audit(2000000011.470:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 87.524528][ T29] audit: type=1326 audit(2000000011.470:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 87.548147][ T29] audit: type=1326 audit(2000000011.470:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5949 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf346aeb9 code=0x7ffc0000 [ 87.612562][ T5959] syzkaller0: entered allmulticast mode [ 87.618938][ T5959] syzkaller0: entered promiscuous mode [ 87.626991][ T5959] syzkaller0 (unregistering): left allmulticast mode [ 87.633762][ T5959] syzkaller0 (unregistering): left promiscuous mode [ 87.669629][ T29] audit: type=1326 audit(2000000011.780:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5960 comm="syz.5.819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cf346aeb9 code=0x0 [ 88.259706][ T3395] tipc: Node number set to 10463914 [ 88.276091][ T5994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.305672][ T5994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.833'. [ 88.816964][ T6049] sctp: [Deprecated]: syz.6.855 (pid 6049) Use of int in max_burst socket option. [ 88.816964][ T6049] Use struct sctp_assoc_value instead [ 88.943252][ T6064] tipc: Failed to remove unknown binding: 66,1,1/10463914:3174294076/3174294078 [ 88.952494][ T6064] tipc: Failed to remove unknown binding: 66,1,1/10463914:3174294076/3174294078 [ 89.252505][ T6082] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 89.383826][ T6086] netlink: 'syz.1.874': attribute type 21 has an invalid length. [ 89.391688][ T6086] netlink: 'syz.1.874': attribute type 26 has an invalid length. [ 89.636928][ T23] ================================================================== [ 89.646023][ T23] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 89.653234][ T23] [ 89.655558][ T23] read-write to 0xffff888237c2a524 of 4 bytes by task 3402 on cpu 0: [ 89.663622][ T23] wq_worker_running+0x95/0x120 [ 89.668567][ T23] schedule_timeout+0xca/0x180 [ 89.673346][ T23] msleep+0x4f/0x90 [ 89.677161][ T23] nsim_fib_event+0x491d/0x4d70 [ 89.682037][ T23] nsim_fib_event_work+0x13d/0x210 [ 89.687158][ T23] process_scheduled_works+0x4cd/0x9d0 [ 89.692624][ T23] worker_thread+0x6bc/0x8b0 [ 89.697233][ T23] kthread+0x488/0x510 [ 89.701334][ T23] ret_from_fork+0x148/0x280 [ 89.705949][ T23] ret_from_fork_asm+0x1a/0x30 [ 89.710725][ T23] [ 89.713052][ T23] read to 0xffff888237c2a524 of 4 bytes by task 23 on cpu 1: [ 89.720515][ T23] kick_pool+0x49/0x2d0 [ 89.724686][ T23] __queue_work+0x896/0xad0 [ 89.729202][ T23] queue_work_on+0xa9/0x140 [ 89.733713][ T23] process_srcu+0xa56/0xdc0 [ 89.738218][ T23] process_scheduled_works+0x4cd/0x9d0 [ 89.743783][ T23] worker_thread+0x6bc/0x8b0 [ 89.748393][ T23] kthread+0x488/0x510 [ 89.752507][ T23] ret_from_fork+0x148/0x280 [ 89.757120][ T23] ret_from_fork_asm+0x1a/0x30 [ 89.761898][ T23] [ 89.764220][ T23] value changed: 0x00000001 -> 0x00000002 [ 89.769939][ T23] [ 89.772265][ T23] Reported by Kernel Concurrency Sanitizer on: [ 89.778436][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 89.789640][ T23] Tainted: [W]=WARN [ 89.793450][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 89.803517][ T23] Workqueue: rcu_gp process_srcu [ 89.808470][ T23] ==================================================================