last executing test programs: 12.507723811s ago: executing program 2 (id=278): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x404, &(0x7f0000000380)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f00000014c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) llistxattr(0x0, 0x0, 0x0) 12.291498013s ago: executing program 2 (id=285): socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x9) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10, 0x100000}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 12.241933334s ago: executing program 2 (id=287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x6, 0x4, 0x3, 0x5, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x27, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0xfffffffe, 0x2, 0x6, 0x3, 0x6, 0x6, 0x200, 0xd]}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400"], 0x48) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248) 12.139502435s ago: executing program 2 (id=289): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x3) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 11.609750202s ago: executing program 2 (id=296): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0xfffffffffffffff5, 0x0, 0x24004005}, 0x8040) 10.96562201s ago: executing program 2 (id=307): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_config_ext={0x9}, 0x104002, 0xa1b7, 0x0, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 10.932578831s ago: executing program 32 (id=307): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_config_ext={0x9}, 0x104002, 0xa1b7, 0x0, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 5.906166125s ago: executing program 1 (id=373): socket$can_j1939(0x1d, 0x2, 0x7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_create1(0x0) r0 = getpid() r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 5.732632747s ago: executing program 1 (id=377): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) 4.854210408s ago: executing program 1 (id=400): socket$packet(0x11, 0x3, 0x300) open_tree(0xffffffffffffff9c, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x406f413, 0x0) 4.830681749s ago: executing program 1 (id=402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x2037, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 4.75538387s ago: executing program 1 (id=403): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) open(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00') bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.406516155s ago: executing program 1 (id=410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.38345435s ago: executing program 4 (id=449): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x13c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r2 = gettid() r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.534244471s ago: executing program 5 (id=456): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 1.533520511s ago: executing program 4 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "38d33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xb) 1.496493472s ago: executing program 5 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x36) 1.495668442s ago: executing program 4 (id=459): bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) creat(0x0, 0x2) 1.440224812s ago: executing program 0 (id=462): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getpriority(0x1, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f0000000200)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 1.274868174s ago: executing program 5 (id=467): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) 1.114602736s ago: executing program 5 (id=469): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) 1.109889216s ago: executing program 3 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) rseq(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x18) 1.090080837s ago: executing program 3 (id=472): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x22, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.027408508s ago: executing program 3 (id=473): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2000000000000000}, 0x18) socket$packet(0x11, 0x3, 0x300) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x5, @random="b7b6d319e33e", 'ip6_vti0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x0) close(r4) 1.026966808s ago: executing program 3 (id=474): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="adf52f8b4710", 0x6) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) r3 = socket$inet6(0xa, 0x3, 0x81) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 628.441783ms ago: executing program 4 (id=475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000680)={0x1d, r7, 0x1, {0x0, 0x1}, 0x2}, 0x18) close_range(r5, 0xffffffffffffffff, 0x0) 586.599983ms ago: executing program 0 (id=476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000600000000000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={0x0, r0}, 0x18) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200000c4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 519.514964ms ago: executing program 4 (id=477): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x2000004, 0x8000, 0x4, 0x0, 0x0, 0x0, 0xfec4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 511.540584ms ago: executing program 0 (id=478): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000680)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 357.520016ms ago: executing program 0 (id=479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r2) 225.427058ms ago: executing program 0 (id=480): socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000200)="a6", 0x1}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x78}, 0x1, 0xffffffff00000003}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) chown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 224.628148ms ago: executing program 5 (id=481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x1c5902, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x1c1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 107.418569ms ago: executing program 3 (id=482): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x818}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x24d417d6, 0x3, 0x800, 0xe26}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 47.26148ms ago: executing program 5 (id=483): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000011, &(0x7f0000000100)={[{@data_writeback}, {@nojournal_checksum}, {@noacl}, {@auto_da_alloc}, {@nobh}, {@init_itable_val={'init_itable', 0x3d, 0x1}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$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") timer_create(0x0, &(0x7f00000006c0)={0x0, 0x28, 0x2, @thr={&(0x7f0000000580)="77fa5f62f0ac90b3472ff449e59cece41a6a26dc7ec94cd61cba95020cb3f4407a90e19b7954959edc2ae9217dfcdbce537efcb4eb324f8ae65de37d7a9012ffbcfe9e0b683acc6550dbde9f05c307c79a1230a53f8d06abaf8deed59cd64ae7506bcee52a50c2d8e28862e16d2ca725681e2b4ce7dde9", &(0x7f0000000600)="e9ba31c330fcc6459559aee4037ac58f11503e7e0cb66121a8dce38efe0b5a114e5a9d6f3fbca6eef42a7511e734c7bf08fd"}}, &(0x7f0000000700)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 46.20739ms ago: executing program 4 (id=484): socket$inet(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff8500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) tkill(r0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) 429.1µs ago: executing program 3 (id=494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x2) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="300016802c000180280003"], 0x6c}}, 0x24040800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(&(0x7f0000000100)='./file0/file1\x00') 0s ago: executing program 0 (id=485): bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) creat(0x0, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 26.423593][ T29] audit: type=1400 audit(1748115485.984:65): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.424597][ T3304] cgroup: Unknown subsys name 'net' [ 26.446348][ T29] audit: type=1400 audit(1748115485.984:66): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.473685][ T29] audit: type=1400 audit(1748115486.014:67): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.648642][ T3304] cgroup: Unknown subsys name 'cpuset' [ 26.654698][ T3304] cgroup: Unknown subsys name 'rlimit' [ 26.765586][ T29] audit: type=1400 audit(1748115486.324:68): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.789004][ T29] audit: type=1400 audit(1748115486.324:69): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.809463][ T29] audit: type=1400 audit(1748115486.324:70): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.829818][ T29] audit: type=1400 audit(1748115486.324:71): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.850277][ T29] audit: type=1400 audit(1748115486.354:72): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.857858][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.875116][ T29] audit: type=1400 audit(1748115486.354:73): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.906942][ T29] audit: type=1400 audit(1748115486.444:74): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.940744][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.758557][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.789117][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.869158][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 28.884873][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.900903][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.908163][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.915472][ T3321] bridge_slave_0: entered allmulticast mode [ 28.922074][ T3321] bridge_slave_0: entered promiscuous mode [ 28.928548][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.935596][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.942910][ T3321] bridge_slave_1: entered allmulticast mode [ 28.949402][ T3321] bridge_slave_1: entered promiscuous mode [ 28.987714][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.994876][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.001998][ T3315] bridge_slave_0: entered allmulticast mode [ 29.008398][ T3315] bridge_slave_0: entered promiscuous mode [ 29.016738][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.023968][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.031059][ T3315] bridge_slave_1: entered allmulticast mode [ 29.037392][ T3315] bridge_slave_1: entered promiscuous mode [ 29.062083][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.084315][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.096952][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.114051][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.130296][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.169290][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.176341][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.183492][ T3323] bridge_slave_0: entered allmulticast mode [ 29.190109][ T3323] bridge_slave_0: entered promiscuous mode [ 29.210926][ T3321] team0: Port device team_slave_0 added [ 29.219524][ T3315] team0: Port device team_slave_0 added [ 29.225315][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.232416][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.239606][ T3314] bridge_slave_0: entered allmulticast mode [ 29.245803][ T3314] bridge_slave_0: entered promiscuous mode [ 29.252290][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.259448][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.266548][ T3323] bridge_slave_1: entered allmulticast mode [ 29.272782][ T3323] bridge_slave_1: entered promiscuous mode [ 29.279501][ T3321] team0: Port device team_slave_1 added [ 29.295251][ T3315] team0: Port device team_slave_1 added [ 29.306223][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.313367][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.320545][ T3314] bridge_slave_1: entered allmulticast mode [ 29.326896][ T3314] bridge_slave_1: entered promiscuous mode [ 29.362544][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.371672][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.378801][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.386022][ T3320] bridge_slave_0: entered allmulticast mode [ 29.392395][ T3320] bridge_slave_0: entered promiscuous mode [ 29.399018][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.406081][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.413251][ T3320] bridge_slave_1: entered allmulticast mode [ 29.419601][ T3320] bridge_slave_1: entered promiscuous mode [ 29.426031][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.432981][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.458972][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.474937][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.481941][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.507860][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.519530][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.533416][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.540421][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.566383][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.578154][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.587422][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.594382][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.620554][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.643997][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.653891][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.664124][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.685920][ T3323] team0: Port device team_slave_0 added [ 29.692832][ T3323] team0: Port device team_slave_1 added [ 29.709748][ T3320] team0: Port device team_slave_0 added [ 29.734195][ T3320] team0: Port device team_slave_1 added [ 29.741552][ T3315] hsr_slave_0: entered promiscuous mode [ 29.747605][ T3315] hsr_slave_1: entered promiscuous mode [ 29.762804][ T3314] team0: Port device team_slave_0 added [ 29.769329][ T3314] team0: Port device team_slave_1 added [ 29.786590][ T3321] hsr_slave_0: entered promiscuous mode [ 29.792541][ T3321] hsr_slave_1: entered promiscuous mode [ 29.798434][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.805981][ T3321] Cannot create hsr debugfs directory [ 29.811690][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.818669][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.844639][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.873208][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.880350][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.906456][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.921664][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.928634][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.954566][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.965708][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.972767][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.998731][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.022347][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.029462][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.055466][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.066775][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.073740][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.099692][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.154059][ T3314] hsr_slave_0: entered promiscuous mode [ 30.160011][ T3314] hsr_slave_1: entered promiscuous mode [ 30.165820][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.173407][ T3314] Cannot create hsr debugfs directory [ 30.203101][ T3323] hsr_slave_0: entered promiscuous mode [ 30.209364][ T3323] hsr_slave_1: entered promiscuous mode [ 30.215162][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.222749][ T3323] Cannot create hsr debugfs directory [ 30.232981][ T3320] hsr_slave_0: entered promiscuous mode [ 30.238917][ T3320] hsr_slave_1: entered promiscuous mode [ 30.244670][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.252247][ T3320] Cannot create hsr debugfs directory [ 30.406701][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.416536][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.427270][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.436103][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.454716][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.465636][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.474208][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.485822][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.512476][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.523435][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.532580][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.541509][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.578455][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.593723][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.611013][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.620364][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.644915][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.657222][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.665951][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.676296][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.692397][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.699649][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.708667][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.718884][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.725970][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.743212][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.756797][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.763952][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.790143][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.797208][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.811907][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.828268][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.835342][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.852136][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.864789][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.896867][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.909341][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.916429][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.925320][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.932393][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.975970][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.990101][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.997204][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.020193][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.027314][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.041768][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.051641][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.066371][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.092695][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.099840][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.109460][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.116538][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.132237][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.181597][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.254093][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.294499][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.336083][ T3315] veth0_vlan: entered promiscuous mode [ 31.346491][ T3321] veth0_vlan: entered promiscuous mode [ 31.357043][ T3315] veth1_vlan: entered promiscuous mode [ 31.365305][ T3321] veth1_vlan: entered promiscuous mode [ 31.382557][ T3314] veth0_vlan: entered promiscuous mode [ 31.395421][ T3314] veth1_vlan: entered promiscuous mode [ 31.406529][ T3315] veth0_macvtap: entered promiscuous mode [ 31.426994][ T3315] veth1_macvtap: entered promiscuous mode [ 31.445938][ T3321] veth0_macvtap: entered promiscuous mode [ 31.459913][ T3321] veth1_macvtap: entered promiscuous mode [ 31.472427][ T3320] veth0_vlan: entered promiscuous mode [ 31.480300][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.489061][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.502083][ T3320] veth1_vlan: entered promiscuous mode [ 31.510179][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.519049][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527831][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536588][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.547751][ T3314] veth0_macvtap: entered promiscuous mode [ 31.556997][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.566489][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.575796][ T3314] veth1_macvtap: entered promiscuous mode [ 31.595215][ T3321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.604067][ T3321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.612895][ T3321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.621650][ T3321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.640531][ T3323] veth0_vlan: entered promiscuous mode [ 31.649791][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.661692][ T3320] veth0_macvtap: entered promiscuous mode [ 31.673595][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.673609][ T29] audit: type=1400 audit(1748115491.234:84): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.JTUV1q/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.674934][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.679744][ T29] audit: type=1400 audit(1748115491.234:85): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.706834][ T3320] veth1_macvtap: entered promiscuous mode [ 31.711176][ T29] audit: type=1400 audit(1748115491.234:86): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.JTUV1q/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.735293][ T3323] veth1_vlan: entered promiscuous mode [ 31.738805][ T29] audit: type=1400 audit(1748115491.234:87): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.791183][ T29] audit: type=1400 audit(1748115491.234:88): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.JTUV1q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.817718][ T29] audit: type=1400 audit(1748115491.234:89): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.JTUV1q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.845050][ T29] audit: type=1400 audit(1748115491.234:90): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.869299][ T29] audit: type=1400 audit(1748115491.434:91): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.869762][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.892163][ T29] audit: type=1400 audit(1748115491.434:92): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.900852][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.932005][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.940805][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.962617][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.972771][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.986053][ T3323] veth0_macvtap: entered promiscuous mode [ 31.999206][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.010721][ T29] audit: type=1400 audit(1748115491.574:93): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.023801][ T3323] veth1_macvtap: entered promiscuous mode [ 32.048941][ T3320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.057703][ T3320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.066450][ T3320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.075184][ T3320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.099403][ T3456] random: crng reseeded on system resumption [ 32.109328][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.139976][ T3459] loop4: detected capacity change from 0 to 164 [ 32.156134][ T3459] process 'syz.4.6' launched '/dev/fd/8' with NULL argv: empty string added [ 32.166529][ T3459] syz.4.6: attempt to access beyond end of device [ 32.166529][ T3459] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 32.185474][ T3459] syz.4.6: attempt to access beyond end of device [ 32.185474][ T3459] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 32.210386][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.241036][ T3323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.249911][ T3323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.258691][ T3323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.267457][ T3323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.681577][ T3496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 32.698319][ T3497] vcan0: entered allmulticast mode [ 32.703878][ T3497] vcan0: left allmulticast mode [ 32.909407][ T3477] Set syz1 is full, maxelem 65536 reached [ 32.953276][ T3504] tipc: Started in network mode [ 32.958400][ T3504] tipc: Node identity ac14140f, cluster identity 4711 [ 32.965712][ T3504] tipc: New replicast peer: 255.255.255.255 [ 32.971891][ T3504] tipc: Enabled bearer , priority 10 [ 32.994249][ T3506] loop0: detected capacity change from 0 to 512 [ 33.010748][ T3477] syz.2.11 (3477) used greatest stack depth: 10888 bytes left [ 33.030457][ T3506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.044367][ T3506] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.060002][ T3513] SELinux: Context  is not valid (left unmapped). [ 33.094808][ T3516] loop2: detected capacity change from 0 to 128 [ 33.101511][ T3516] ======================================================= [ 33.101511][ T3516] WARNING: The mand mount option has been deprecated and [ 33.101511][ T3516] and is ignored by this kernel. Remove the mand [ 33.101511][ T3516] option from the mount to silence this warning. [ 33.101511][ T3516] ======================================================= [ 33.144389][ T3516] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 33.158878][ T3516] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.193000][ T3518] netlink: 14 bytes leftover after parsing attributes in process `syz.1.25'. [ 33.203893][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.204174][ T3506] syz.0.21 (3506) used greatest stack depth: 10840 bytes left [ 33.233961][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.247628][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.258768][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.274007][ T3518] bond0 (unregistering): Released all slaves [ 33.307773][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.315121][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.323539][ T3525] bridge0: entered allmulticast mode [ 33.333969][ T3525] bridge_slave_1: left allmulticast mode [ 33.339638][ T3525] bridge_slave_1: left promiscuous mode [ 33.345363][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.353366][ T3525] bridge_slave_0: left allmulticast mode [ 33.359089][ T3525] bridge_slave_0: left promiscuous mode [ 33.364945][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.419842][ T3533] netlink: 'syz.2.30': attribute type 10 has an invalid length. [ 33.430305][ T3533] ipvlan0: entered allmulticast mode [ 33.435661][ T3533] veth0_vlan: entered allmulticast mode [ 33.443440][ T3533] team0: Device ipvlan0 failed to register rx_handler [ 33.467711][ T3535] loop4: detected capacity change from 0 to 2048 [ 33.493852][ T3533] syz.2.30 (3533) used greatest stack depth: 10656 bytes left [ 33.515465][ T3535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.968100][ T3391] tipc: Node number set to 2886997007 [ 34.004778][ T3389] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.012706][ T3583] loop2: detected capacity change from 0 to 1024 [ 34.020697][ T3583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.021174][ T3389] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.042421][ T3583] EXT4-fs: Mount option(s) incompatible with ext2 [ 34.097624][ T3584] fido_id[3584]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.258081][ T3553] bridge0: port 3(gretap0) entered blocking state [ 34.264562][ T3553] bridge0: port 3(gretap0) entered disabled state [ 34.287121][ T3553] gretap0: entered allmulticast mode [ 34.293162][ T3553] gretap0: entered promiscuous mode [ 34.298856][ T3553] bridge0: port 3(gretap0) entered blocking state [ 34.305390][ T3553] bridge0: port 3(gretap0) entered forwarding state [ 34.430948][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.595443][ T3596] loop0: detected capacity change from 0 to 8192 [ 34.673749][ T3596] syz.0.43: attempt to access beyond end of device [ 34.673749][ T3596] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 34.687025][ T3596] Buffer I/O error on dev loop0, logical block 57847, async page read [ 34.704628][ T3630] program syz.2.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.829631][ T3645] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.917129][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 34.929704][ T3664] ipvlan2: entered promiscuous mode [ 35.048276][ T3670] wg2: entered promiscuous mode [ 35.053246][ T3670] wg2: entered allmulticast mode [ 35.122988][ T3673] loop0: detected capacity change from 0 to 256 [ 35.175657][ T3668] sch_fq: defrate 2048 ignored. [ 35.265543][ T3677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 35.375441][ T3680] loop4: detected capacity change from 0 to 1024 [ 35.410289][ T3680] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.61: Failed to acquire dquot type 0 [ 35.423422][ T3680] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 35.438152][ T3680] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.61: corrupted inode contents [ 35.470399][ T3680] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.61: mark_inode_dirty error [ 35.483985][ T3691] bridge: RTM_NEWNEIGH with invalid ether address [ 35.546550][ T3680] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.61: corrupted inode contents [ 35.593116][ T3680] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.61: mark_inode_dirty error [ 35.599279][ T3694] loop3: detected capacity change from 0 to 512 [ 35.651556][ T3680] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.61: corrupted inode contents [ 35.680286][ T3694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.726679][ T3680] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 35.740439][ T3694] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.755333][ T3707] capability: warning: `syz.1.70' uses 32-bit capabilities (legacy support in use) [ 35.790553][ T3712] hub 8-0:1.0: USB hub found [ 35.803698][ T3712] hub 8-0:1.0: 8 ports detected [ 35.809012][ T3680] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.61: corrupted inode contents [ 35.838100][ T3680] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.61: mark_inode_dirty error [ 35.870690][ T3680] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 35.885362][ T3716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.72'. [ 35.899783][ T3715] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #19: comm syz.3.66: corrupted inode contents [ 35.912806][ T3715] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #19: comm syz.3.66: mark_inode_dirty error [ 35.919524][ T3680] EXT4-fs (loop4): 1 truncate cleaned up [ 35.929956][ T3715] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #19: comm syz.3.66: corrupted inode contents [ 35.943006][ T3680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.959427][ T3715] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.66: mark_inode_dirty error [ 35.992607][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.046942][ T3715] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.66: mark inode dirty (error -117) [ 36.067025][ T3715] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 36.105044][ T3727] loop4: detected capacity change from 0 to 256 [ 36.146074][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.163937][ T3727] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.203458][ T3727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.76'. [ 36.497088][ T3756] : renamed from vlan0 (while UP) [ 36.561291][ T3763] loop3: detected capacity change from 0 to 256 [ 36.599865][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 36.630781][ T3766] loop1: detected capacity change from 0 to 1024 [ 36.640663][ T3766] EXT4-fs: Ignoring removed oldalloc option [ 36.660821][ T3766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.704378][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.724957][ T3772] syz.3.95 uses obsolete (PF_INET,SOCK_PACKET) [ 36.840290][ T3781] loop3: detected capacity change from 0 to 512 [ 36.860448][ T3781] EXT4-fs (loop3): too many log groups per flexible block group [ 36.868168][ T3781] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 36.875264][ T3781] EXT4-fs (loop3): mount failed [ 36.875281][ T3779] wg2: entered promiscuous mode [ 36.885068][ T3779] wg2: entered allmulticast mode [ 36.894108][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 36.894121][ T29] audit: type=1400 audit(1748115496.454:325): avc: denied { read } for pid=3780 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.951318][ T3789] loop3: detected capacity change from 0 to 128 [ 36.964666][ T3788] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.985445][ T3788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 37.004804][ C0] hrtimer: interrupt took 56402 ns [ 37.012330][ T3788] bridge_slave_1: left allmulticast mode [ 37.018039][ T3788] bridge_slave_1: left promiscuous mode [ 37.023707][ T3788] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.029418][ T3792] syz.3.101: attempt to access beyond end of device [ 37.029418][ T3792] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 37.046197][ T3791] loop2: detected capacity change from 0 to 256 [ 37.057008][ T3792] syz.3.101: attempt to access beyond end of device [ 37.057008][ T3792] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 37.074976][ T3788] bridge_slave_0: left allmulticast mode [ 37.077995][ T3791] FAT-fs (loop2): bogus number of FAT sectors [ 37.080751][ T3788] bridge_slave_0: left promiscuous mode [ 37.080886][ T3788] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.100845][ T3791] FAT-fs (loop2): Can't find a valid FAT filesystem [ 37.104900][ T3792] syz.3.101: attempt to access beyond end of device [ 37.104900][ T3792] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 37.130205][ T3794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.104'. [ 37.139224][ T3794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.104'. [ 37.174042][ T3792] syz.3.101: attempt to access beyond end of device [ 37.174042][ T3792] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 37.247967][ T3792] syz.3.101: attempt to access beyond end of device [ 37.247967][ T3792] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 37.264313][ T3792] syz.3.101: attempt to access beyond end of device [ 37.264313][ T3792] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 37.295654][ T3792] syz.3.101: attempt to access beyond end of device [ 37.295654][ T3792] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 37.311127][ T3792] syz.3.101: attempt to access beyond end of device [ 37.311127][ T3792] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 37.324880][ T3792] syz.3.101: attempt to access beyond end of device [ 37.324880][ T3792] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 37.344130][ T3792] syz.3.101: attempt to access beyond end of device [ 37.344130][ T3792] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 37.358075][ T3792] syz.3.101: attempt to access beyond end of device [ 37.358075][ T3792] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 37.371546][ T3792] syz.3.101: attempt to access beyond end of device [ 37.371546][ T3792] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 37.392234][ T3792] syz.3.101: attempt to access beyond end of device [ 37.392234][ T3792] loop3: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 37.436485][ T3807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.466715][ T29] audit: type=1400 audit(1748115497.024:326): avc: denied { create } for pid=3808 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.486610][ T29] audit: type=1400 audit(1748115497.024:327): avc: denied { read write } for pid=3808 comm="syz.2.109" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 37.510880][ T29] audit: type=1400 audit(1748115497.024:328): avc: denied { open } for pid=3808 comm="syz.2.109" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 37.535875][ T29] audit: type=1400 audit(1748115497.024:329): avc: denied { write } for pid=3808 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.611662][ T3818] loop3: detected capacity change from 0 to 512 [ 37.629315][ T3818] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.638095][ T29] audit: type=1400 audit(1748115497.154:330): avc: denied { connect } for pid=3815 comm="syz.2.112" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.642503][ T3818] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.662552][ T29] audit: type=1400 audit(1748115497.164:331): avc: denied { write } for pid=3815 comm="syz.2.112" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.711841][ T3818] EXT4-fs (loop3): 1 truncate cleaned up [ 37.719458][ T3818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.838211][ T29] audit: type=1400 audit(1748115497.404:332): avc: denied { read } for pid=3826 comm="syz.2.116" dev="nsfs" ino=4026532687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.859860][ T29] audit: type=1400 audit(1748115497.424:333): avc: denied { open } for pid=3826 comm="syz.2.116" path="net:[4026532687]" dev="nsfs" ino=4026532687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.883302][ T29] audit: type=1400 audit(1748115497.424:334): avc: denied { create } for pid=3826 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.913164][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.964887][ T3829] loop2: detected capacity change from 0 to 2048 [ 37.993984][ T3829] EXT4-fs (loop2): failed to initialize system zone (-117) [ 38.001397][ T3829] EXT4-fs (loop2): mount failed [ 38.111193][ T3847] openvswitch: netlink: Message has 6 unknown bytes. [ 38.117040][ T3844] syzkaller0: entered promiscuous mode [ 38.123460][ T3844] syzkaller0: entered allmulticast mode [ 38.131615][ T3848] loop2: detected capacity change from 0 to 512 [ 38.138195][ T3848] EXT4-fs: Ignoring removed oldalloc option [ 38.184478][ T3848] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.123: error while reading EA inode 32 err=-116 [ 38.186748][ T3853] __nla_validate_parse: 8 callbacks suppressed [ 38.186764][ T3853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 38.223860][ T3848] EXT4-fs (loop2): Remounting filesystem read-only [ 38.230427][ T3848] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.243492][ T3848] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 38.253676][ T3848] EXT4-fs (loop2): 1 orphan inode deleted [ 38.259931][ T3848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.272307][ T3853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.386443][ T3863] loop1: detected capacity change from 0 to 1024 [ 38.400020][ T3863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.413960][ T3863] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.129: Allocating blocks 385-513 which overlap fs metadata [ 38.430608][ T3863] EXT4-fs (loop1): pa ffff88810584c000: logic 16, phys. 129, len 24 [ 38.438689][ T3863] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 38.459649][ T3863] syz.1.129 (3863) used greatest stack depth: 9592 bytes left [ 38.468147][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.502509][ T3868] netlink: 5 bytes leftover after parsing attributes in process `syz.1.130'. [ 38.511488][ T3868] 0XD: renamed from gretap0 (while UP) [ 38.519075][ T3868] 0XD: entered allmulticast mode [ 38.524731][ T3868] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 38.919615][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.939036][ T3873] veth0: entered promiscuous mode [ 38.949833][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 39.285393][ T3904] loop0: detected capacity change from 0 to 764 [ 39.297647][ T3904] Symlink component flag not implemented [ 39.310796][ T3904] Symlink component flag not implemented (7) [ 39.363205][ T3908] netlink: 76 bytes leftover after parsing attributes in process `syz.0.146'. [ 39.442217][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 39.914146][ T3918] batman_adv: batadv0: Adding interface: dummy0 [ 39.920800][ T3918] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.951624][ T3918] batman_adv: batadv0: Interface activated: dummy0 [ 39.969338][ T3921] netlink: 'syz.3.151': attribute type 39 has an invalid length. [ 39.987456][ T3923] Zero length message leads to an empty skb [ 39.994610][ T3923] TC_ACT_REPEAT abuse ? [ 39.998934][ T3923] TC_ACT_REPEAT abuse ? [ 40.003464][ T3923] TC_ACT_REPEAT abuse ? [ 40.008701][ T3922] TC_ACT_REPEAT abuse ? [ 40.012996][ T3922] TC_ACT_REPEAT abuse ? [ 40.044793][ T3925] loop1: detected capacity change from 0 to 512 [ 40.055500][ T3925] EXT4-fs: Ignoring removed orlov option [ 40.068859][ T3925] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.086604][ T3925] EXT4-fs (loop1): 1 truncate cleaned up [ 40.093007][ T3925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.130741][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.228018][ T3949] TC_ACT_REPEAT abuse ? [ 40.232337][ C1] TC_ACT_REPEAT abuse ? [ 40.247077][ T3951] loop0: detected capacity change from 0 to 512 [ 40.265633][ T3951] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.296321][ T3951] EXT4-fs (loop0): 1 orphan inode deleted [ 40.304094][ T3951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.318213][ T3406] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 40.342948][ T3951] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.401326][ T3951] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.444135][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.489232][ T3973] tipc: Started in network mode [ 40.494149][ T3973] tipc: Node identity ac14140f, cluster identity 4711 [ 40.516832][ T3973] tipc: New replicast peer: 10.1.33.1 [ 40.522319][ T3973] tipc: Enabled bearer , priority 10 [ 40.566722][ T3981] loop3: detected capacity change from 0 to 512 [ 40.571112][ T3982] loop2: detected capacity change from 0 to 2048 [ 40.582216][ T3981] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 40.591297][ T3984] batman_adv: batadv0: Adding interface: dummy0 [ 40.592471][ T3981] EXT4-fs (loop3): group descriptors corrupted! [ 40.603437][ T3984] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.634235][ T3984] batman_adv: batadv0: Interface activated: dummy0 [ 40.644044][ T3982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.805675][ T3996] loop4: detected capacity change from 0 to 128 [ 40.816676][ T3997] loop0: detected capacity change from 0 to 512 [ 40.834904][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.836585][ T3996] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 40.872328][ T3997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.895382][ T3997] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.947533][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 40.956513][ T4004] batman_adv: batadv0: Interface deactivated: dummy0 [ 40.963255][ T4004] batman_adv: batadv0: Removing interface: dummy0 [ 40.976870][ T4004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.984336][ T4004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.992456][ T4004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.999881][ T4004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.060388][ T3997] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.182: corrupted inode contents [ 41.087188][ T3997] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #19: comm syz.0.182: mark_inode_dirty error [ 41.149085][ T3997] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.182: corrupted inode contents [ 41.161198][ T3997] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.182: mark_inode_dirty error [ 41.248475][ T3997] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.182: mark inode dirty (error -117) [ 41.268738][ T3997] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 41.321445][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.374441][ T4019] ipt_REJECT: TCP_RESET invalid for non-tcp [ 41.502289][ T4020] loop4: detected capacity change from 0 to 1024 [ 41.516897][ T4020] EXT4-fs: Ignoring removed oldalloc option [ 41.531716][ T4020] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 41.538015][ T9] tipc: Node number set to 2886997007 [ 41.685735][ T4029] loop3: detected capacity change from 0 to 512 [ 41.720717][ T4029] EXT4-fs: Ignoring removed i_version option [ 41.836513][ T4029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.864015][ T4029] ext4 filesystem being mounted at /33/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.887425][ T4020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.011963][ T4029] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #4: comm syz.3.193: corrupted inode contents [ 42.037070][ T4029] EXT4-fs (loop3): Remounting filesystem read-only [ 42.051202][ T4029] __quota_error: 128 callbacks suppressed [ 42.051220][ T4029] Quota error (device loop3): write_blk: dquota write failed [ 42.064405][ T4029] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 42.073590][ T4029] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 42.113050][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.150669][ T4041] batman_adv: batadv0: Adding interface: dummy0 [ 42.157247][ T4041] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.199250][ T4041] batman_adv: batadv0: Interface activated: dummy0 [ 42.237691][ T29] audit: type=1400 audit(1748115501.794:462): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.295037][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.375242][ T29] audit: type=1400 audit(1748115501.934:463): avc: denied { create } for pid=4052 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.391860][ T4055] loop3: detected capacity change from 0 to 1024 [ 42.394687][ T29] audit: type=1400 audit(1748115501.934:464): avc: denied { write } for pid=4052 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.423570][ T4055] EXT4-fs: Ignoring removed nobh option [ 42.429538][ T4055] EXT4-fs: Ignoring removed bh option [ 42.504319][ T4055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.642465][ T4055] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.203: Allocating blocks 497-513 which overlap fs metadata [ 42.685934][ T4055] EXT4-fs (loop3): pa ffff88810726d000: logic 1, phys. 321, len 12 [ 42.693948][ T4055] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 1, pa_free 2 [ 42.729379][ T4055] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 321:freeing already freed block (bit 20); block bitmap corrupt. [ 42.815409][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.838684][ T4066] dvmrp5: entered allmulticast mode [ 42.865579][ T4066] dvmrp5: left allmulticast mode [ 42.874397][ T4069] bridge0: port 3(gretap0) entered disabled state [ 42.880997][ T4069] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.888212][ T4069] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.896786][ T4069] bridge0: entered allmulticast mode [ 42.906383][ T4069] gretap0: left allmulticast mode [ 42.911544][ T4069] gretap0: left promiscuous mode [ 42.916610][ T4069] bridge0: port 3(gretap0) entered disabled state [ 42.924474][ T4069] bridge_slave_1: left allmulticast mode [ 42.930234][ T4069] bridge_slave_1: left promiscuous mode [ 42.935952][ T4069] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.944883][ T4069] bridge_slave_0: left allmulticast mode [ 42.950656][ T4069] bridge_slave_0: left promiscuous mode [ 42.956368][ T4069] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.337948][ T29] audit: type=1326 audit(1748115502.894:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f975e969 code=0x7ffc0000 [ 43.361329][ T29] audit: type=1326 audit(1748115502.894:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f975e969 code=0x7ffc0000 [ 43.384562][ T29] audit: type=1326 audit(1748115502.894:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11f975e969 code=0x7ffc0000 [ 43.407897][ T29] audit: type=1326 audit(1748115502.894:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f975e969 code=0x7ffc0000 [ 43.473245][ T4082] batman_adv: batadv0: Adding interface: dummy0 [ 43.475263][ T4076] loop3: detected capacity change from 0 to 8192 [ 43.480724][ T4082] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.513809][ T4082] batman_adv: batadv0: Interface activated: dummy0 [ 43.554906][ T4089] loop1: detected capacity change from 0 to 164 [ 43.572313][ T4089] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.582503][ T4089] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.600738][ T4089] Symlink component flag not implemented [ 43.606417][ T4089] Symlink component flag not implemented [ 43.612468][ T4089] Symlink component flag not implemented (7) [ 43.618502][ T4089] Symlink component flag not implemented (116) [ 43.690047][ T4093] loop1: detected capacity change from 0 to 512 [ 43.719703][ T4093] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.728837][ T4093] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 43.755044][ T4093] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 43.789651][ T1043] net_ratelimit: 3 callbacks suppressed [ 43.789665][ T1043] TC_ACT_REPEAT abuse ? [ 43.826809][ T4093] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 43.851243][ T4093] System zones: 0-2, 18-18, 34-34 [ 43.867229][ T4093] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.887577][ T4093] EXT4-fs (loop1): 1 truncate cleaned up [ 43.925073][ T4093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.000496][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.141914][ T4113] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 44.167509][ T4113] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 44.232443][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 44.277245][ T4131] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 44.310469][ T4136] TC_ACT_REPEAT abuse ? [ 44.314873][ C1] TC_ACT_REPEAT abuse ? [ 44.320850][ T4134] loop4: detected capacity change from 0 to 2048 [ 44.322113][ T4136] TC_ACT_REPEAT abuse ? [ 44.334093][ T4135] TC_ACT_REPEAT abuse ? [ 44.338676][ T4135] TC_ACT_REPEAT abuse ? [ 44.361514][ T4134] EXT4-fs (loop4): failed to initialize system zone (-117) [ 44.374616][ T4143] capability: warning: `syz.1.235' uses deprecated v2 capabilities in a way that may be insecure [ 44.375807][ T4134] EXT4-fs (loop4): mount failed [ 44.388541][ T4141] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 44.406270][ T4145] netlink: 'syz.2.236': attribute type 1 has an invalid length. [ 44.442473][ T4148] macvlan1: entered promiscuous mode [ 44.459180][ T4148] ipvlan0: entered promiscuous mode [ 44.472315][ T4148] ipvlan0: left promiscuous mode [ 44.482030][ T4150] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 44.506776][ T4153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 44.520907][ T4148] macvlan1: left promiscuous mode [ 44.534453][ T4145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 44.543502][ T4145] bond1: (slave bond2): making interface the new active one [ 44.589984][ T4145] bond1: (slave bond2): Enslaving as an active interface with an up link [ 44.600529][ T4153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.658770][ T4159] netlink: 44 bytes leftover after parsing attributes in process `syz.0.241'. [ 44.688745][ T1043] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 44.700337][ T1043] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.714537][ T4163] loop2: detected capacity change from 0 to 1024 [ 44.736754][ T4163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.745794][ T4163] EXT4-fs: Mount option(s) incompatible with ext2 [ 44.781012][ T4168] loop4: detected capacity change from 0 to 164 [ 44.794343][ T4170] pim6reg1: entered promiscuous mode [ 44.799785][ T4170] pim6reg1: entered allmulticast mode [ 44.809253][ T4168] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.821818][ T4168] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.830330][ T4172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 44.840582][ T4168] Symlink component flag not implemented [ 44.846216][ T4168] Symlink component flag not implemented [ 44.852764][ T4168] Symlink component flag not implemented (7) [ 44.858790][ T4168] Symlink component flag not implemented (116) [ 44.868710][ T4172] batman_adv: batadv0: Interface deactivated: dummy0 [ 44.875419][ T4172] batman_adv: batadv0: Removing interface: dummy0 [ 44.904885][ T4172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.912368][ T4172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.939939][ T4172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.947408][ T4172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.967572][ T4175] wg2: entered promiscuous mode [ 44.968242][ T1022] TC_ACT_REPEAT abuse ? [ 44.972486][ T4175] wg2: entered allmulticast mode [ 44.977374][ T1043] TC_ACT_REPEAT abuse ? [ 44.986498][ T9] TC_ACT_REPEAT abuse ? [ 45.076134][ T4186] loop2: detected capacity change from 0 to 512 [ 45.101381][ T4186] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.251: bg 0: block 248: padding at end of block bitmap is not set [ 45.136232][ T4186] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.251: Failed to acquire dquot type 1 [ 45.137428][ T4191] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 45.157056][ T4186] EXT4-fs (loop2): 1 truncate cleaned up [ 45.168520][ T4186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.206460][ T4186] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.230002][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.237476][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.245022][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.253244][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.261217][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.268775][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.276228][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.283826][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.291336][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.298828][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.306309][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.313842][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.321286][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.328781][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.336409][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.343841][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.351273][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.358686][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.366070][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.373477][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.380947][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.388343][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.395734][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.403192][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.410657][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.418086][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.425478][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.432861][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.440803][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 45.442068][ T4197] netlink: 48 bytes leftover after parsing attributes in process `syz.3.254'. [ 45.459826][ T4186] syz.2.251 (4186) used greatest stack depth: 9360 bytes left [ 45.486768][ T4198] fido_id[4198]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.500717][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.817114][ T4209] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.862009][ T4211] loop2: detected capacity change from 0 to 512 [ 45.929410][ T4211] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.259: invalid indirect mapped block 256 (level 2) [ 45.965609][ T4211] EXT4-fs (loop2): 2 truncates cleaned up [ 45.987273][ T4211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.028530][ T1043] TC_ACT_REPEAT abuse ? [ 46.040835][ T4211] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.259: bg 0: block 5: invalid block bitmap [ 46.054014][ T4211] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 46.066373][ T4211] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.066373][ T4211] [ 46.076096][ T4211] EXT4-fs (loop2): Total free blocks count 0 [ 46.082107][ T4211] EXT4-fs (loop2): Free/Dirty block details [ 46.088015][ T4211] EXT4-fs (loop2): free_blocks=0 [ 46.092956][ T4211] EXT4-fs (loop2): dirty_blocks=1 [ 46.093354][ T4215] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747904 > max in inode 15 [ 46.098001][ T4211] EXT4-fs (loop2): Block reservation details [ 46.098015][ T4211] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 46.109303][ T4215] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747908 > max in inode 15 [ 46.132984][ T4209] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.144668][ T4215] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747912 > max in inode 15 [ 46.157896][ T4215] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747916 > max in inode 15 [ 46.171415][ T4209] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.183292][ T4215] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747920 > max in inode 15 [ 46.193678][ T4215] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747924 > max in inode 15 [ 46.204194][ T4215] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747928 > max in inode 15 [ 46.214484][ T4215] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747932 > max in inode 15 [ 46.226014][ T4215] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747936 > max in inode 15 [ 46.236247][ T4215] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209747940 > max in inode 15 [ 46.249134][ T4209] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.295828][ T4209] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.309020][ T4209] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.330898][ T4209] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.399816][ T4209] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.809923][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.106337][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 47.106355][ T29] audit: type=1326 audit(1748115506.664:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ca45e969 code=0x7ffc0000 [ 47.153606][ T29] audit: type=1326 audit(1748115506.694:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.2.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ca45e969 code=0x7ffc0000 [ 47.195131][ T29] audit: type=1400 audit(1748115506.744:664): avc: denied { mount } for pid=4259 comm="syz.4.274" name="/" dev="configfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 47.221330][ T4266] loop2: detected capacity change from 0 to 512 [ 47.246354][ T4266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.257592][ T4266] EXT4-fs (loop2): 1 truncate cleaned up [ 47.272314][ T4266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.328902][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.380627][ T29] audit: type=1400 audit(1748115506.944:665): avc: denied { map } for pid=4271 comm="syz.1.283" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.446143][ T4283] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 47.453838][ T4283] netlink: 224 bytes leftover after parsing attributes in process `syz.1.288'. [ 47.531521][ T4285] loop2: detected capacity change from 0 to 4096 [ 47.686357][ T29] audit: type=1400 audit(1748115507.244:666): avc: denied { write } for pid=4292 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.891437][ T29] audit: type=1400 audit(1748115507.444:667): avc: denied { read write } for pid=4296 comm="syz.3.293" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.916495][ T4297] program syz.3.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.933269][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.936127][ T4299] loop1: detected capacity change from 0 to 512 [ 47.952773][ T4299] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 47.962905][ T4299] EXT4-fs (loop1): group descriptors corrupted! [ 47.973520][ T4285] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.004420][ T29] audit: type=1400 audit(1748115507.564:668): avc: denied { execute } for pid=4284 comm="syz.2.289" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.029820][ T4285] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 48.049285][ T29] audit: type=1400 audit(1748115507.614:669): avc: denied { remove_name } for pid=3320 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.050300][ T3320] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /77/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 48.072820][ T29] audit: type=1400 audit(1748115507.614:670): avc: denied { rmdir } for pid=3320 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.096046][ T3320] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 48.120869][ T29] audit: type=1400 audit(1748115507.684:671): avc: denied { read } for pid=4302 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.136756][ T3320] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 48.166804][ T3320] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /77/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 48.189120][ T3320] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 48.209184][ T3320] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 48.221767][ T3320] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /77/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 48.247819][ T3320] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 48.268802][ T3320] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 48.280754][ T3320] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /77/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 48.319764][ T4308] loop4: detected capacity change from 0 to 1024 [ 48.327643][ T3320] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 48.329785][ T4308] EXT4-fs: inline encryption not supported [ 48.358864][ T4308] EXT4-fs: Ignoring removed bh option [ 48.364704][ T3320] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 48.379905][ T3320] EXT4-fs error (device loop2): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /77/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 48.402245][ T3320] EXT4-fs error (device loop2): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 48.425860][ T3320] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 48.438489][ T3320] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 48.440090][ T4308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.468644][ T3320] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 48.468974][ T4308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.490764][ T3320] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 48.503628][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.518044][ T3320] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 48.535097][ T3320] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 48.602583][ T1043] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 48.614882][ T4325] loop0: detected capacity change from 0 to 1024 [ 48.632112][ T1043] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.642142][ T4325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.649255][ T4325] EXT4-fs: Mount option(s) incompatible with ext2 [ 48.678665][ T4329] loop3: detected capacity change from 0 to 1024 [ 48.690213][ T384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.701476][ T4329] EXT4-fs: Ignoring removed nobh option [ 48.707094][ T4329] EXT4-fs: Ignoring removed bh option [ 48.743983][ T4329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.779738][ T384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.857355][ T4329] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.306: Allocating blocks 385-513 which overlap fs metadata [ 48.946106][ T4328] EXT4-fs (loop3): pa ffff88810584c0e0: logic 16, phys. 129, len 24 [ 48.954259][ T4328] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 49.007597][ T384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.025499][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.092123][ T384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.281742][ T384] bridge_slave_1: left allmulticast mode [ 49.287438][ T384] bridge_slave_1: left promiscuous mode [ 49.293102][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.322433][ T384] bridge_slave_0: left allmulticast mode [ 49.328112][ T384] bridge_slave_0: left promiscuous mode [ 49.333901][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.374244][ T4384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 49.461745][ T384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.472372][ T384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.483083][ T384] bond0 (unregistering): Released all slaves [ 49.492399][ T384] bond1 (unregistering): (slave bond2): Releasing backup interface [ 49.501642][ T384] bond1 (unregistering): Released all slaves [ 49.510392][ T384] bond2 (unregistering): Released all slaves [ 49.564146][ T384] tipc: Disabling bearer [ 49.569450][ T384] tipc: Left network mode [ 49.589646][ T384] hsr_slave_0: left promiscuous mode [ 49.602128][ T384] hsr_slave_1: left promiscuous mode [ 49.616423][ T384] veth1_macvtap: left promiscuous mode [ 49.641475][ T384] veth0_macvtap: left promiscuous mode [ 49.647106][ T384] veth1_vlan: left promiscuous mode [ 49.652596][ T384] veth0_vlan: left promiscuous mode [ 49.668905][ T4403] loop4: detected capacity change from 0 to 256 [ 49.686143][ T4403] FAT-fs (loop4): bogus number of FAT sectors [ 49.692302][ T4403] FAT-fs (loop4): Can't find a valid FAT filesystem [ 49.784201][ T384] team0 (unregistering): Port device team_slave_1 removed [ 49.793945][ T384] team0 (unregistering): Port device team_slave_0 removed [ 49.830207][ T4346] chnl_net:caif_netlink_parms(): no params data found [ 49.873964][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.881234][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.890873][ T4346] bridge_slave_0: entered allmulticast mode [ 49.904503][ T4346] bridge_slave_0: entered promiscuous mode [ 49.907611][ T4423] loop1: detected capacity change from 0 to 512 [ 49.912874][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.923688][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.931054][ T4346] bridge_slave_1: entered allmulticast mode [ 49.937428][ T4346] bridge_slave_1: entered promiscuous mode [ 49.949663][ T4423] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.971159][ T4423] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.983565][ T4346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.998707][ T4346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.999780][ T4423] EXT4-fs (loop1): 1 truncate cleaned up [ 50.030258][ T4423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.069914][ T4346] team0: Port device team_slave_0 added [ 50.088538][ T4346] team0: Port device team_slave_1 added [ 50.104450][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.131314][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.138423][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.164357][ T4346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.176745][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.183714][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.209759][ T4346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.224862][ T4442] loop3: detected capacity change from 0 to 512 [ 50.258152][ T4442] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.325: corrupted in-inode xattr: invalid ea_ino [ 50.273619][ T4442] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.325: couldn't read orphan inode 15 (err -117) [ 50.274028][ T4445] netlink: 256 bytes leftover after parsing attributes in process `syz.0.326'. [ 50.287037][ T4440] loop9: detected capacity change from 0 to 7 [ 50.301769][ T4442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.302489][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.322289][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.330226][ T3305] loop9: unable to read partition table [ 50.337727][ T4440] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.346878][ T4440] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.348368][ T4346] hsr_slave_0: entered promiscuous mode [ 50.354755][ T4440] loop9: unable to read partition table [ 50.360823][ T4346] hsr_slave_1: entered promiscuous mode [ 50.371946][ T4346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.379781][ T4346] Cannot create hsr debugfs directory [ 50.386941][ T4440] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 50.386941][ T4440] U) failed (rc=-5) [ 50.406268][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.429783][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.446985][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.475287][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.488188][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.501385][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.509839][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.572603][ T4457] SELinux: failed to load policy [ 50.605064][ T4346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.621429][ T4346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.632061][ T4346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.666411][ T4346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.701657][ T4472] loop1: detected capacity change from 0 to 8192 [ 50.740135][ T4346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.779968][ T4346] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.808522][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.815657][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.848355][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.855586][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.964961][ T4346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.237386][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 51.270223][ T4562] team0 (unregistering): Port device team_slave_0 removed [ 51.287312][ T4562] team0 (unregistering): Port device team_slave_1 removed [ 51.371201][ T4346] veth0_vlan: entered promiscuous mode [ 51.397680][ T4346] veth1_vlan: entered promiscuous mode [ 51.432344][ T4346] veth0_macvtap: entered promiscuous mode [ 51.452669][ T4346] veth1_macvtap: entered promiscuous mode [ 51.475467][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.496237][ T4578] loop1: detected capacity change from 0 to 512 [ 51.510950][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.527474][ T4346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.536340][ T4346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.545144][ T4346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.553960][ T4346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.584554][ T4578] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.619521][ T4578] EXT4-fs (loop1): 1 truncate cleaned up [ 51.625804][ T4578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.698521][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.118114][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 52.118214][ T29] audit: type=1326 audit(1748115511.674:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4617 comm="syz.5.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169f79e969 code=0x7ffc0000 [ 52.145893][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.178468][ T29] audit: type=1400 audit(1748115511.684:753): avc: denied { ioctl } for pid=4610 comm="syz.0.346" path="socket:[7787]" dev="sockfs" ino=7787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.192643][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.204119][ T29] audit: type=1326 audit(1748115511.704:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4617 comm="syz.5.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f169f79e969 code=0x7ffc0000 [ 52.234896][ T29] audit: type=1326 audit(1748115511.704:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4617 comm="syz.5.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169f79e969 code=0x7ffc0000 [ 52.270956][ T4624] loop5: detected capacity change from 0 to 2048 [ 52.328636][ T4624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.367216][ T4624] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 52.455065][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.497200][ T4633] loop5: detected capacity change from 0 to 512 [ 52.529781][ T29] audit: type=1326 audit(1748115512.094:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f975e969 code=0x7ffc0000 [ 52.553083][ T29] audit: type=1326 audit(1748115512.094:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f975e969 code=0x7ffc0000 [ 52.577983][ T29] audit: type=1326 audit(1748115512.094:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f11f975e969 code=0x7ffc0000 [ 52.581974][ T4638] loop3: detected capacity change from 0 to 128 [ 52.601606][ T29] audit: type=1400 audit(1748115512.144:759): avc: denied { connect } for pid=4634 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.630311][ T4633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.643051][ T4633] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.664054][ T4638] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.677194][ T4638] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.703958][ T29] audit: type=1400 audit(1748115512.264:760): avc: denied { ioctl } for pid=4632 comm="syz.5.352" path="/5/bus/cgroup.controllers" dev="loop5" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.734493][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.772626][ T29] audit: type=1326 audit(1748115512.334:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f975e969 code=0x7ffc0000 [ 52.809858][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.080352][ T4660] loop0: detected capacity change from 0 to 2048 [ 53.117583][ T4662] loop1: detected capacity change from 0 to 2048 [ 53.128112][ T3545] Alternate GPT is invalid, using primary GPT. [ 53.134486][ T3545] loop0: p2 p3 p7 [ 53.152421][ T4660] Alternate GPT is invalid, using primary GPT. [ 53.158953][ T4660] loop0: p2 p3 p7 [ 53.185139][ T3305] Alternate GPT is invalid, using primary GPT. [ 53.191699][ T3305] loop1: p1 p2 p3 [ 53.227397][ T4662] Alternate GPT is invalid, using primary GPT. [ 53.233702][ T4662] loop1: p1 p2 p3 [ 53.267284][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 53.279348][ T3545] udevd[3545]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 53.290323][ T4666] udevd[4666]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 53.790729][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 53.841833][ T4705] loop0: detected capacity change from 0 to 128 [ 53.850586][ T4705] EXT4-fs: Ignoring removed oldalloc option [ 53.869852][ T4705] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.897888][ T4705] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.130881][ T4698] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.374: bg 0: bad block bitmap checksum [ 54.167104][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.254798][ T4728] veth0_vlan: entered allmulticast mode [ 54.272258][ T4728] : renamed from vlan0 [ 54.323401][ T4732] xt_CT: No such helper "snmp_trap" [ 54.373703][ T4732] infiniband syz!: set active [ 54.378500][ T4732] infiniband syz!: added team_slave_0 [ 54.390767][ T4732] RDS/IB: syz!: added [ 54.394838][ T4732] smc: adding ib device syz! with port count 1 [ 54.401101][ T4732] smc: ib device syz! port 1 has pnetid [ 54.471241][ T4748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 54.540737][ T4751] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 54.696269][ T4761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.704943][ T4761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.715762][ T4763] loop0: detected capacity change from 0 to 128 [ 54.722632][ T4761] loop3: detected capacity change from 0 to 512 [ 54.732796][ T4761] loop3: detected capacity change from 0 to 512 [ 54.739694][ T4761] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.740624][ T4763] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 54.751951][ T4761] EXT4-fs (loop3): 1 truncate cleaned up [ 54.763559][ T4763] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.770573][ T4761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.816879][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.882649][ T4773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.920696][ T4775] syzkaller0: entered promiscuous mode [ 54.926192][ T4775] syzkaller0: entered allmulticast mode [ 54.938379][ T4773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.982751][ T4773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.005201][ T4776] infiniband syz0: set active [ 55.009968][ T4776] infiniband syz0: added veth0_virt_wifi [ 55.021342][ T4776] RDS/IB: syz0: added [ 55.025418][ T4776] smc: adding ib device syz0 with port count 1 [ 55.031858][ T4776] smc: ib device syz0 port 1 has pnetid [ 55.060645][ T4773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.125755][ T4773] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.139691][ T4773] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.151592][ T4773] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.171460][ T4773] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.285063][ T4789] syzkaller0: entered promiscuous mode [ 55.290859][ T4789] syzkaller0: entered allmulticast mode [ 55.332421][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.415281][ T4796] syzkaller0: entered promiscuous mode [ 55.420880][ T4796] syzkaller0: entered allmulticast mode [ 55.461502][ T4808] syz.3.418 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.586949][ T4815] loop4: detected capacity change from 0 to 128 [ 55.600305][ T4815] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.625072][ T4815] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.699616][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.725274][ T4822] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.423'. [ 55.743410][ T4822] net_ratelimit: 17 callbacks suppressed [ 55.743423][ T4822] netlink: zone id is out of range [ 55.754530][ T4822] netlink: zone id is out of range [ 55.759763][ T4822] netlink: del zone limit has 8 unknown bytes [ 55.803497][ T4829] loop5: detected capacity change from 0 to 512 [ 55.812081][ T4829] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.825719][ T4829] EXT4-fs (loop5): 1 truncate cleaned up [ 55.832428][ T4829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.875743][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 55.884565][ T4838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.428'. [ 55.898122][ T4838] team0: entered promiscuous mode [ 55.903308][ T4838] team_slave_0: entered promiscuous mode [ 55.909071][ T4838] team_slave_1: entered promiscuous mode [ 55.916081][ T4838] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 55.918348][ T4346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.969196][ T4848] mmap: syz.3.433 (4848) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.522303][ T4867] loop3: detected capacity change from 0 to 256 [ 57.030481][ T4884] loop5: detected capacity change from 0 to 128 [ 57.041364][ T4884] bio_check_eod: 98 callbacks suppressed [ 57.041381][ T4884] syz.5.446: attempt to access beyond end of device [ 57.041381][ T4884] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 57.060189][ T4884] buffer_io_error: 4 callbacks suppressed [ 57.060202][ T4884] Buffer I/O error on dev loop5, logical block 2065, async page read [ 57.074428][ T4884] syz.5.446: attempt to access beyond end of device [ 57.074428][ T4884] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 57.087615][ T4884] Buffer I/O error on dev loop5, logical block 2066, async page read [ 57.138278][ T4884] syz.5.446: attempt to access beyond end of device [ 57.138278][ T4884] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 57.151502][ T4884] Buffer I/O error on dev loop5, logical block 2067, async page read [ 57.167899][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 57.174146][ T29] audit: type=1400 audit(1748115516.684:975): avc: denied { read } for pid=4889 comm="syz.4.447" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.196646][ T29] audit: type=1400 audit(1748115516.684:976): avc: denied { open } for pid=4889 comm="syz.4.447" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.240861][ T29] audit: type=1400 audit(1748115516.804:977): avc: denied { create } for pid=4893 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.260963][ T29] audit: type=1400 audit(1748115516.804:978): avc: denied { write } for pid=4893 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.281018][ T29] audit: type=1400 audit(1748115516.804:979): avc: denied { nlmsg_write } for pid=4893 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.301629][ T29] audit: type=1400 audit(1748115516.804:980): avc: denied { read } for pid=4893 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.323066][ T4884] syz.5.446: attempt to access beyond end of device [ 57.323066][ T4884] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 57.336305][ T4884] Buffer I/O error on dev loop5, logical block 2068, async page read [ 57.344499][ T4884] syz.5.446: attempt to access beyond end of device [ 57.344499][ T4884] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 57.357779][ T4884] Buffer I/O error on dev loop5, logical block 2069, async page read [ 57.367449][ T4884] syz.5.446: attempt to access beyond end of device [ 57.367449][ T4884] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 57.380660][ T4884] Buffer I/O error on dev loop5, logical block 2070, async page read [ 57.390773][ T4884] syz.5.446: attempt to access beyond end of device [ 57.390773][ T4884] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 57.403916][ T4884] Buffer I/O error on dev loop5, logical block 2071, async page read [ 57.566932][ T4884] syz.5.446: attempt to access beyond end of device [ 57.566932][ T4884] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 57.580207][ T4884] Buffer I/O error on dev loop5, logical block 2072, async page read [ 57.684609][ T4888] syz.5.446: attempt to access beyond end of device [ 57.684609][ T4888] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 57.697804][ T4888] Buffer I/O error on dev loop5, logical block 2065, async page read [ 57.782503][ T4888] syz.5.446: attempt to access beyond end of device [ 57.782503][ T4888] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 57.795771][ T4888] Buffer I/O error on dev loop5, logical block 2066, async page read [ 57.825981][ T29] audit: type=1400 audit(1748115517.384:981): avc: denied { unmount } for pid=4346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 57.905785][ T29] audit: type=1400 audit(1748115517.464:982): avc: denied { create } for pid=4909 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 57.925476][ T29] audit: type=1400 audit(1748115517.464:983): avc: denied { connect } for pid=4909 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 57.951442][ T29] audit: type=1400 audit(1748115517.504:984): avc: denied { write } for pid=4909 comm="syz.3.452" path="socket:[9050]" dev="sockfs" ino=9050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.040157][ T4916] loop3: detected capacity change from 0 to 2048 [ 58.130655][ T4916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.163356][ T4916] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 58.191308][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.339254][ T4946] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 58.488950][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 59.037339][ T5028] netlink: 'syz.4.475': attribute type 21 has an invalid length. [ 59.045147][ T5028] netlink: 'syz.4.475': attribute type 20 has an invalid length. [ 59.052913][ T5028] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.176089][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 59.185003][ T5046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'. [ 59.199118][ T5046] team0: entered promiscuous mode [ 59.204177][ T5046] team_slave_0: entered promiscuous mode [ 59.210010][ T5046] team_slave_1: entered promiscuous mode [ 59.225132][ T5046] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 59.241664][ T5035] loop4: detected capacity change from 0 to 8192 [ 59.417127][ T5061] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 59.424891][ T5061] FAT-fs (loop4): Filesystem has been set read-only [ 59.445511][ T5068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.481'. [ 59.454454][ T5068] netlink: 196 bytes leftover after parsing attributes in process `syz.5.481'. [ 59.464475][ T5068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.481'. [ 59.485092][ T5068] netlink: 196 bytes leftover after parsing attributes in process `syz.5.481'. [ 59.554728][ T5070] netlink: 96 bytes leftover after parsing attributes in process `syz.0.480'. [ 59.626538][ T5105] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 59.629400][ T5103] loop5: detected capacity change from 0 to 2048 [ 59.633070][ T5105] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 59.639735][ T5103] ext4: Unknown parameter 'noacl' [ 59.647049][ T5105] vhci_hcd vhci_hcd.0: Device attached [ 59.670267][ T5105] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 59.671808][ T5103] netlink: 'syz.5.483': attribute type 10 has an invalid length. [ 59.680044][ T5105] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 59.685432][ T5103] netlink: 'syz.5.483': attribute type 19 has an invalid length. [ 59.709068][ T5103] netlink: 156 bytes leftover after parsing attributes in process `syz.5.483'. [ 59.779093][ T5111] ================================================================== [ 59.787293][ T5111] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 59.794343][ T5111] [ 59.796660][ T5111] write to 0xffff888104a0ab88 of 8 bytes by task 5113 on cpu 0: [ 59.804294][ T5111] shmem_fallocate+0x221/0x840 [ 59.809078][ T5111] vfs_fallocate+0x410/0x450 [ 59.813676][ T5111] madvise_do_behavior+0x1106/0x24a0 [ 59.818960][ T5111] __x64_sys_madvise+0xc9/0x100 [ 59.823805][ T5111] x64_sys_call+0x2455/0x2fb0 [ 59.828482][ T5111] do_syscall_64+0xd0/0x1a0 [ 59.832982][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.838874][ T5111] [ 59.841212][ T5111] read to 0xffff888104a0ab88 of 8 bytes by task 5111 on cpu 1: [ 59.848760][ T5111] shmem_fault+0x90/0x250 [ 59.853109][ T5111] __do_fault+0xbc/0x200 [ 59.857362][ T5111] handle_mm_fault+0x110c/0x2ae0 [ 59.862318][ T5111] __get_user_pages+0xde2/0x1d20 [ 59.867264][ T5111] __mm_populate+0x243/0x3a0 [ 59.871866][ T5111] vm_mmap_pgoff+0x232/0x2e0 [ 59.876461][ T5111] ksys_mmap_pgoff+0xc2/0x310 [ 59.881143][ T5111] x64_sys_call+0x1602/0x2fb0 [ 59.885830][ T5111] do_syscall_64+0xd0/0x1a0 [ 59.890338][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.896231][ T5111] [ 59.898547][ T5111] value changed: 0x0000000000000000 -> 0xffffc90004ffbca0 [ 59.905644][ T5111] [ 59.907963][ T5111] Reported by Kernel Concurrency Sanitizer on: [ 59.914133][ T5111] CPU: 1 UID: 0 PID: 5111 Comm: syz.4.484 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(voluntary) [ 59.926461][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.936517][ T5111] ================================================================== [ 59.953270][ T3393] vhci_hcd: vhci_device speed not set [ 60.018177][ T3393] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 60.060443][ T5108] vhci_hcd: connection reset by peer [ 60.065878][ T1022] vhci_hcd: stop threads [ 60.070183][ T1022] vhci_hcd: release socket [ 60.074663][ T1022] vhci_hcd: disconnect device [ 65.077997][ T3393] usb 7-1: enqueue for inactive port 0 [ 65.083583][ T3393] usb 7-1: enqueue for inactive port 0 [ 65.158279][ T3393] vhci_hcd: vhci_device speed not set