last executing test programs: 31.350400769s ago: executing program 2 (id=526): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@errors_remount}, {@errors_remount}, {@noinit_itable}, {@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x4}, 0x32}]}, 0x0, 0x4f5, &(0x7f0000000340)="$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") setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 31.124132257s ago: executing program 2 (id=535): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x3c) fallocate(0xffffffffffffffff, 0x6a, 0xb7da, 0x1001f0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 31.076456711s ago: executing program 2 (id=537): socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 31.033506404s ago: executing program 2 (id=538): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x901) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x31a1802, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 30.976146399s ago: executing program 2 (id=540): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) recvfrom(r0, 0x0, 0x0, 0x800004c4, 0x0, 0x0) 30.910701434s ago: executing program 2 (id=541): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}, 0x1f8c8, 0xc8, 0x0, 0x3, 0xfffffffffffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x101, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 30.885741896s ago: executing program 32 (id=541): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff}, 0x1f8c8, 0xc8, 0x0, 0x3, 0xfffffffffffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x101, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 25.814118706s ago: executing program 5 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c200000000109021200010000000009"], 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 25.038688128s ago: executing program 5 (id=673): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x42}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 24.805858077s ago: executing program 5 (id=677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x22, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x37, 0x14, 0x67, 0x0, 0x7, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 24.584931245s ago: executing program 5 (id=684): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 24.446973166s ago: executing program 5 (id=685): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 24.138110541s ago: executing program 5 (id=694): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0xaa, "ce", "285b94", 0xf5}}}}}, 0x0) 24.137468381s ago: executing program 33 (id=694): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0xaa, "ce", "285b94", 0xf5}}}}}, 0x0) 15.932143084s ago: executing program 1 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) 15.813196103s ago: executing program 1 (id=884): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 15.61301556s ago: executing program 1 (id=889): fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") socket$kcm(0x10, 0x2, 0x0) 15.115697229s ago: executing program 1 (id=902): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x0) 14.665969126s ago: executing program 1 (id=917): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='nodots,nfs,dots,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x22d, &(0x7f0000000300)="$eJzs3b2KE1EYBuDP3exu2MatxWLAxiqodzDICuKAEJlCKwdWm10RZpvRKpfhNXhJXsZW6UbMhPwZbTQes/M8EOaFl8B3mpwU5yRv73+4vPh4/b799iWGwywGEZOYRpzFQRxG5878eTDLx7FqEgDAvhmPqzz1DOxWXefVUUSc/NSUX5MMBAAAAAAAAAAAwB9z/h8A+sf5/9uvrvPqdP79bZ3z/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA607a92/7mlXo+AODvs/8DQP/Y/wGgf+z/ANA/r16/eZEXxfk4y4YRN5OmbMru2fXPnhfnj7KZs+W7bpqmPFz0j7s+W++P4nTeP9naH8fDB13/o3v6stjoT+Ji98sHAAAAAAAAAAAAAAAAAACA/8IoW9h6v380+lXfpZXfB9i4vz+Ie4N/tgwAAAAAAAAAAAAAAAAAAADYa9efPl9WV1fvakEQhEVI/ckEAAAAAAAAAAAAAAAAAAD9s7z0m3oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhn+f//uwup1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w/cAAAD//wu+k9A=") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004040) ftruncate(r0, 0x400) sendfile(r0, r0, 0x0, 0x10000800000009) 14.437075935s ago: executing program 1 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @opaque="dafc3fec9b284c93cf0da2c96b67919fb5146b8da82ae0aeddf99df0c319ce53"}}}}}}, 0x4e) 14.436487014s ago: executing program 34 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @opaque="dafc3fec9b284c93cf0da2c96b67919fb5146b8da82ae0aeddf99df0c319ce53"}}}}}}, 0x4e) 10.106046514s ago: executing program 6 (id=979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback, 0x40000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x304}, "7ba11d27a9e02909", "7d70211c7bf1ac7a0d742ecbc81422f4", "d01f1c43", "cadea6b75a9723ce"}, 0x28) close(r0) 10.066097198s ago: executing program 6 (id=983): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r3, &(0x7f0000000100)=""/60, 0x6f) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 9.862967634s ago: executing program 6 (id=987): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 9.761010752s ago: executing program 6 (id=989): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 9.338465596s ago: executing program 6 (id=999): socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) memfd_create(&(0x7f0000001040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1\x8c.?}jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 8.829089377s ago: executing program 6 (id=1014): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setgroups(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) pipe2(0x0, 0x800) stat(0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x94, 0x1) stat(0x0, &(0x7f0000000300)) statx(0xffffffffffffff9c, 0x0, 0x1800, 0x2, 0x0) getgroups(0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0]) 8.828564267s ago: executing program 35 (id=1014): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setgroups(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) pipe2(0x0, 0x800) stat(0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x94, 0x1) stat(0x0, &(0x7f0000000300)) statx(0xffffffffffffff9c, 0x0, 0x1800, 0x2, 0x0) getgroups(0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0]) 1.636654588s ago: executing program 4 (id=1183): io_uring_setup(0x4c11, 0x0) io_uring_setup(0x6d8e, 0x0) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) 1.60658922s ago: executing program 4 (id=1185): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1.264165558s ago: executing program 0 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 1.211016002s ago: executing program 0 (id=1191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) syz_emit_ethernet(0x83, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 1.047023305s ago: executing program 4 (id=1192): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1a"], 0x0, 0x5af7dd1f, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 866.74512ms ago: executing program 8 (id=1194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, 0x0, 0x0) 866.52032ms ago: executing program 4 (id=1195): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4000000) pipe(&(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 865.73312ms ago: executing program 7 (id=1204): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_settime(0xfffffff8, &(0x7f0000000140)={0x0, 0x989680}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400f4ff0800000006000000fbff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae00000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'gre0\x00', 0x0}) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") 790.060196ms ago: executing program 8 (id=1196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 778.854777ms ago: executing program 4 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x8}, {0x7, 0x2, 0xe5, 0x6, 0x4, 0x0, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) 707.324423ms ago: executing program 7 (id=1198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffffff8, @empty, 0xfffffff9}, {0xa, 0x4e20, 0x3fa7, @local, 0x9}, 0xffffffffffffffff, 0x10}}, 0x48) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000003c0)={{0xffffffffffffffff, 0x3, 0xfffeffff, 0x3, 0x8}, 0x0, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0xfffffffffffff73c, 0x4, 0x2, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 680.404445ms ago: executing program 4 (id=1199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 677.823515ms ago: executing program 7 (id=1210): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000043000000080a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 612.65228ms ago: executing program 8 (id=1201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 611.879701ms ago: executing program 3 (id=1202): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000280), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) close_range(r0, r2, 0x0) 502.21376ms ago: executing program 8 (id=1203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(r0) 501.648289ms ago: executing program 7 (id=1205): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 501.14278ms ago: executing program 3 (id=1206): umount2(&(0x7f0000000580)='./file0\x00', 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x81c0, 0x80000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 316.517224ms ago: executing program 3 (id=1207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 287.146397ms ago: executing program 8 (id=1208): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x20008040, &(0x7f0000000040)={0x11, 0x86dd, r4, 0x1, 0x6, 0x6, @broadcast}, 0x14) 286.503647ms ago: executing program 0 (id=1209): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) 190.875014ms ago: executing program 3 (id=1211): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) unshare(0xa000200) unshare(0x20060400) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044880}, 0x0) 190.311755ms ago: executing program 8 (id=1212): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 168.558576ms ago: executing program 0 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 163.481597ms ago: executing program 7 (id=1214): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x194) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioperm(0x1, 0x9, 0xfffffffffffffff8) 119.98507ms ago: executing program 3 (id=1215): ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0502103, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 46.874566ms ago: executing program 0 (id=1216): mkdirat(0xffffffffffffff9c, 0x0, 0x154) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 46.400587ms ago: executing program 7 (id=1217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f0000"], 0x48) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, 0x0) 23.394168ms ago: executing program 0 (id=1218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 0s ago: executing program 3 (id=1219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) kernel console output (not intermixed with test programs): 340][ T3300] veth1_vlan: entered promiscuous mode [ 37.415913][ T29] audit: type=1400 audit(1755181945.527:83): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.PHhxWV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.450972][ T3301] veth1_vlan: entered promiscuous mode [ 37.470407][ T29] audit: type=1400 audit(1755181945.527:84): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.499059][ T29] audit: type=1400 audit(1755181945.527:85): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.PHhxWV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.499789][ T3300] veth0_macvtap: entered promiscuous mode [ 37.527601][ T29] audit: type=1400 audit(1755181945.527:86): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.PHhxWV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 37.527627][ T29] audit: type=1400 audit(1755181945.527:87): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.540375][ T3305] veth1_vlan: entered promiscuous mode [ 37.591955][ T29] audit: type=1400 audit(1755181945.737:88): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.606677][ T3301] veth0_macvtap: entered promiscuous mode [ 37.614954][ T29] audit: type=1400 audit(1755181945.737:89): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=4734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.622890][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.651734][ T3300] veth1_macvtap: entered promiscuous mode [ 37.664137][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.673420][ T3301] veth1_macvtap: entered promiscuous mode [ 37.690453][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.705487][ T3305] veth0_macvtap: entered promiscuous mode [ 37.712281][ T29] audit: type=1400 audit(1755181945.837:90): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.728584][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.748631][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.756768][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.767386][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.778476][ T3305] veth1_macvtap: entered promiscuous mode [ 37.789193][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.800955][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.816032][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.835510][ T1652] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.855075][ T1652] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.865070][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.890408][ T1652] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.901351][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.939460][ T1652] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.961573][ T1652] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.974957][ T3478] pimreg: entered allmulticast mode [ 38.000610][ T1652] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.043131][ T3478] pimreg: left allmulticast mode [ 38.091347][ T1652] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.123828][ T1652] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.153738][ T1652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.163008][ T1652] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.179502][ T1652] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.227344][ T1652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.498916][ T3541] syz.3.25 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.536335][ T3533] SELinux: failed to load policy [ 38.547613][ T3540] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 38.576064][ T3540] SELinux: failed to load policy [ 38.628219][ T3554] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -13 [ 38.637854][ T3554] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -13 [ 38.688560][ T3549] SELinux: failed to load policy [ 38.708790][ T3561] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.752167][ T3567] netlink: 'syz.1.37': attribute type 10 has an invalid length. [ 38.773765][ T3567] team0: Port device dummy0 added [ 38.788062][ T3567] netlink: 'syz.1.37': attribute type 10 has an invalid length. [ 38.807604][ T3567] team0: Port device dummy0 removed [ 38.819812][ T3567] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 38.844508][ T3572] syz.0.39 uses obsolete (PF_INET,SOCK_PACKET) [ 38.856625][ T3567] syz.1.37 (3567) used greatest stack depth: 10704 bytes left [ 38.915540][ T3574] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.351596][ T3610] loop2: detected capacity change from 0 to 2048 [ 39.381577][ T3610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.473823][ T3554] syz.4.32 (3554) used greatest stack depth: 10176 bytes left [ 39.595606][ T3619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57'. [ 39.665341][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.794425][ T3628] netlink: 80 bytes leftover after parsing attributes in process `syz.2.61'. [ 39.903949][ T3636] syzkaller1: entered promiscuous mode [ 39.909925][ T3636] syzkaller1: entered allmulticast mode [ 39.960510][ T3561] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.020375][ T3646] vhci_hcd: invalid port number 96 [ 40.026782][ T3646] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 40.082920][ T3651] netlink: 'syz.1.71': attribute type 10 has an invalid length. [ 40.093286][ T3651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.105505][ T3651] team0: Port device bond0 added [ 40.115606][ T3651] netlink: 1168 bytes leftover after parsing attributes in process `syz.1.71'. [ 40.134175][ T3651] team0 (unregistering): Port device team_slave_0 removed [ 40.143572][ T3651] team0 (unregistering): Port device team_slave_1 removed [ 40.153159][ T3651] team0 (unregistering): Port device bond0 removed [ 40.417151][ T3661] loop2: detected capacity change from 0 to 512 [ 40.442132][ T3661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.456485][ T3661] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.506582][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.528248][ T3666] serio: Serial port ptm0 [ 40.660258][ T3561] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.774081][ T3561] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.874107][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.915110][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.934238][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.990106][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.014490][ T3696] loop2: detected capacity change from 0 to 4096 [ 41.059379][ T3696] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 41.073911][ T3696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.184415][ T3723] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 41.247090][ T3728] loop3: detected capacity change from 0 to 128 [ 41.349824][ T3728] syz.3.102: attempt to access beyond end of device [ 41.349824][ T3728] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 41.363788][ T3728] syz.3.102: attempt to access beyond end of device [ 41.363788][ T3728] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 41.379068][ T3728] syz.3.102: attempt to access beyond end of device [ 41.379068][ T3728] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 41.393773][ T3728] syz.3.102: attempt to access beyond end of device [ 41.393773][ T3728] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 41.410591][ T3728] syz.3.102: attempt to access beyond end of device [ 41.410591][ T3728] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 41.436830][ T3728] syz.3.102: attempt to access beyond end of device [ 41.436830][ T3728] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 41.452677][ T3728] syz.3.102: attempt to access beyond end of device [ 41.452677][ T3728] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 41.468062][ T3728] syz.3.102: attempt to access beyond end of device [ 41.468062][ T3728] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 41.484630][ T3728] syz.3.102: attempt to access beyond end of device [ 41.484630][ T3728] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 41.500972][ T3728] syz.3.102: attempt to access beyond end of device [ 41.500972][ T3728] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 41.523792][ T3743] netlink: 'syz.1.108': attribute type 3 has an invalid length. [ 41.562410][ T3745] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 41.570912][ T3745] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 41.630442][ T3753] serio: Serial port ptm0 [ 41.706423][ T3757] wg2: entered promiscuous mode [ 41.711575][ T3757] wg2: entered allmulticast mode [ 41.823575][ T3767] SELinux: ebitmap: truncated map [ 41.832668][ T3767] SELinux: failed to load policy [ 41.839836][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.280264][ T3811] pim6reg1: entered promiscuous mode [ 42.288103][ T3811] pim6reg1: entered allmulticast mode [ 42.478839][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 42.478853][ T29] audit: type=1400 audit(1755181950.627:335): avc: denied { create } for pid=3831 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.519720][ T29] audit: type=1400 audit(1755181950.627:336): avc: denied { bind } for pid=3831 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.539813][ T29] audit: type=1400 audit(1755181950.627:337): avc: denied { setopt } for pid=3831 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.580650][ T3837] loop2: detected capacity change from 0 to 512 [ 42.595571][ T3837] ======================================================= [ 42.595571][ T3837] WARNING: The mand mount option has been deprecated and [ 42.595571][ T3837] and is ignored by this kernel. Remove the mand [ 42.595571][ T3837] option from the mount to silence this warning. [ 42.595571][ T3837] ======================================================= [ 42.703784][ T3837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.736236][ T29] audit: type=1400 audit(1755181950.837:338): avc: denied { name_connect } for pid=3842 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 42.757774][ T29] audit: type=1400 audit(1755181950.847:339): avc: denied { mount } for pid=3845 comm="syz.4.151" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.761320][ T3837] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.780872][ T29] audit: type=1400 audit(1755181950.867:340): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.816672][ T29] audit: type=1400 audit(1755181950.947:341): avc: denied { remount } for pid=3835 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.839979][ T3837] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.887656][ T3856] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 42.887656][ T3856] program syz.4.155 not setting count and/or reply_len properly [ 42.889915][ T29] audit: type=1400 audit(1755181951.027:342): avc: denied { write } for pid=3854 comm="syz.4.155" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 42.960553][ T29] audit: type=1400 audit(1755181951.097:343): avc: denied { allowed } for pid=3850 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.979997][ T29] audit: type=1400 audit(1755181951.097:344): avc: denied { create } for pid=3850 comm="syz.0.153" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.007707][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.034642][ T3864] netlink: 830 bytes leftover after parsing attributes in process `syz.0.160'. [ 43.156040][ T3885] netlink: 'syz.0.166': attribute type 10 has an invalid length. [ 43.182974][ T3887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 43.202279][ T3885] team0: Port device dummy0 added [ 43.216319][ T3894] Driver unsupported XDP return value 0 on prog (id 136) dev N/A, expect packet loss! [ 43.229536][ T3887] vlan2: entered allmulticast mode [ 43.235042][ T3887] dummy0: entered allmulticast mode [ 43.248980][ T3887] Zero length message leads to an empty skb [ 43.266158][ T3885] syz.0.166 (3885) used greatest stack depth: 9696 bytes left [ 43.378818][ T3913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.172'. [ 43.402969][ T3913] netem: change failed [ 43.421411][ T3918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 43.431379][ T3916] netlink: 'syz.4.173': attribute type 1 has an invalid length. [ 43.440068][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 43.610509][ T3944] bridge: RTM_NEWNEIGH with invalid ether address [ 43.854090][ T3972] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 43.908793][ T3974] pim6reg1: entered promiscuous mode [ 43.914228][ T3974] pim6reg1: entered allmulticast mode [ 44.226622][ T4017] loop0: detected capacity change from 0 to 2048 [ 44.289292][ T3294] loop0: p3 p4 < > [ 44.298829][ T3294] loop0: p3 size 57344 extends beyond EOD, truncated [ 44.314583][ T4017] loop0: p3 p4 < > [ 44.324495][ T4017] loop0: p3 size 57344 extends beyond EOD, truncated [ 45.021042][ T4054] IPv6: Can't replace route, no match found [ 45.169508][ T4071] bridge: RTM_NEWNEIGH with invalid ether address [ 45.183953][ T4068] loop1: detected capacity change from 0 to 8192 [ 45.220687][ T4073] wg2: entered promiscuous mode [ 45.226707][ T4073] wg2: entered allmulticast mode [ 45.418113][ T4087] netlink: 256 bytes leftover after parsing attributes in process `syz.0.234'. [ 45.532910][ T4101] loop2: detected capacity change from 0 to 1024 [ 45.535961][ T4093] tipc: Started in network mode [ 45.542568][ T4101] EXT4-fs: Ignoring removed nobh option [ 45.545629][ T4093] tipc: Node identity fe6096bf29ea, cluster identity 4711 [ 45.551719][ T4101] EXT4-fs: Ignoring removed bh option [ 45.566636][ T4093] tipc: Enabled bearer , priority 0 [ 45.605928][ T4101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.619989][ T4092] tipc: Resetting bearer [ 45.684693][ T4092] tipc: Disabling bearer [ 45.823606][ T4124] loop3: detected capacity change from 0 to 512 [ 45.839084][ T4124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.010877][ T4096] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.237: Allocating blocks 497-513 which overlap fs metadata [ 46.066479][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.127602][ T4150] pim6reg1: entered promiscuous mode [ 46.133787][ T4150] pim6reg1: entered allmulticast mode [ 46.203044][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.401538][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 46.739931][ T4205] loop1: detected capacity change from 0 to 1024 [ 46.748429][ T4205] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.771753][ T4205] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.282: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.788311][ T4205] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.282: Failed to acquire dquot type 0 [ 46.800652][ T4205] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.282: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.815426][ T4205] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.282: Invalid inode bitmap blk 0 in block_group 0 [ 46.829923][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.851439][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 46.869099][ T4205] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 46.879544][ T4205] EXT4-fs (loop1): 1 orphan inode deleted [ 46.886121][ T4205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.904511][ T4213] netlink: 'syz.4.285': attribute type 12 has an invalid length. [ 46.913741][ T4205] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.942788][ T4215] netlink: '+}[@': attribute type 13 has an invalid length. [ 46.979015][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.028326][ T4215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.152071][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 47.192340][ T4231] loop1: detected capacity change from 0 to 512 [ 47.214428][ T4231] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.275859][ T4231] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.293: corrupted inode contents [ 47.298761][ T4231] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.293: mark_inode_dirty error [ 47.318008][ T4231] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.293: corrupted inode contents [ 47.320906][ T4251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 47.332635][ T4231] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.293: mark_inode_dirty error [ 47.341791][ T4251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 47.371497][ T4231] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.293: corrupted inode contents [ 47.397814][ T4231] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 47.409844][ T4251] bridge0: port 3(vlan2) entered blocking state [ 47.420699][ T4251] bridge0: port 3(vlan2) entered disabled state [ 47.426520][ T4231] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.293: corrupted inode contents [ 47.429415][ T4251] vlan2: entered allmulticast mode [ 47.452831][ T4251] bridge0: entered allmulticast mode [ 47.458714][ T4231] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.293: mark_inode_dirty error [ 47.473391][ T4251] vlan2: left allmulticast mode [ 47.473687][ T4231] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 47.479702][ T4251] bridge0: left allmulticast mode [ 47.501198][ T4231] EXT4-fs (loop1): 1 truncate cleaned up [ 47.508406][ T4231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.523278][ T4231] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.536719][ T12] __quota_error: 130 callbacks suppressed [ 47.536737][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 47.555894][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 47.587565][ T29] audit: type=1400 audit(1755181955.737:472): avc: denied { mounton } for pid=4229 comm="syz.1.293" path="/66/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.618693][ T4261] bridge: RTM_NEWNEIGH with invalid ether address [ 47.635740][ T29] audit: type=1400 audit(1755181955.737:473): avc: denied { mount } for pid=4229 comm="syz.1.293" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 47.662330][ T4263] tipc: Enabling of bearer rejected, failed to enable media [ 47.680860][ T29] audit: type=1400 audit(1755181955.827:474): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 47.703478][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.723447][ T29] audit: type=1400 audit(1755181955.867:475): avc: denied { create } for pid=4268 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 47.770075][ T29] audit: type=1400 audit(1755181955.917:476): avc: denied { write } for pid=4268 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 47.890529][ T4285] loop0: detected capacity change from 0 to 512 [ 47.916525][ T4285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.944704][ T29] audit: type=1400 audit(1755181956.087:477): avc: denied { bind } for pid=4284 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.982877][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 47.999779][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.000187][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.007647][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.034628][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.042920][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.123918][ T4294] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.321'. [ 48.306612][ T4312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.318595][ T29] audit: type=1400 audit(1755181956.447:478): avc: denied { ioctl } for pid=4311 comm="syz.0.329" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.356526][ T4312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.463655][ T4326] loop2: detected capacity change from 0 to 128 [ 48.479438][ T4326] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 48.489713][ T4326] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.335'. [ 48.494698][ T29] audit: type=1400 audit(1755181956.637:479): avc: denied { read } for pid=4323 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.597815][ T4340] SELinux: failed to load policy [ 48.639251][ T29] audit: type=1400 audit(1755181956.787:480): avc: denied { getopt } for pid=4346 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.725171][ T4355] program syz.3.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.767762][ T4357] IPv4: Oversized IP packet from 127.202.26.0 [ 48.793714][ T4359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.859021][ T4363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 48.869193][ T4363] netlink: 32 bytes leftover after parsing attributes in process `syz.3.350'. [ 48.894521][ T4359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.906439][ T4365] netlink: 'syz.3.351': attribute type 13 has an invalid length. [ 48.918740][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.918760][ T4365] netlink: 'syz.3.351': attribute type 13 has an invalid length. [ 48.936564][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.949433][ T4359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.963590][ T31] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.987212][ T31] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.010445][ T4359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.072582][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.087582][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109199][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.121840][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.161258][ T4380] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 49.174889][ T4380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.189978][ T4380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.197767][ T4380] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 49.210839][ T4380] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 49.293020][ T4385] pim6reg: entered allmulticast mode [ 49.300714][ T4385] netlink: 'syz.1.359': attribute type 10 has an invalid length. [ 49.455338][ T4392] macvtap0: refused to change device tx_queue_len [ 49.475360][ T4394] netlink: 'syz.4.363': attribute type 10 has an invalid length. [ 49.499773][ T4396] loop2: detected capacity change from 0 to 1024 [ 49.507414][ T4394] team0: Port device dummy0 added [ 49.521296][ T4394] netlink: 'syz.4.363': attribute type 10 has an invalid length. [ 49.532266][ T4396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.546496][ T4394] team0: Port device dummy0 removed [ 49.555198][ T4394] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.588156][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.615163][ T4406] serio: Serial port ptm0 [ 49.681130][ T4409] loop1: detected capacity change from 0 to 512 [ 49.691146][ T4409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.707209][ T4409] EXT4-fs (loop1): 1 truncate cleaned up [ 49.716560][ T4409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.749438][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.936743][ T4424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.984907][ T4428] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.005307][ T4429] wg2: entered promiscuous mode [ 50.010315][ T4429] wg2: entered allmulticast mode [ 50.034459][ T4428] netlink: 'syz.3.376': attribute type 12 has an invalid length. [ 50.042925][ T4428] netlink: 'syz.3.376': attribute type 29 has an invalid length. [ 50.074283][ T4439] loop1: detected capacity change from 0 to 512 [ 50.113560][ T4439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.128370][ T4439] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.170226][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.237684][ T4462] hsr_slave_0: left promiscuous mode [ 50.248888][ T4462] hsr_slave_1: left promiscuous mode [ 50.275861][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119536e00: rx timeout, send abort [ 50.286589][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119536e00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 50.303601][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119536600: rx timeout, send abort [ 50.314732][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119536600: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 50.344283][ T4467] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 50.505848][ T4484] loop3: detected capacity change from 0 to 1024 [ 50.511751][ C0] hrtimer: interrupt took 27165 ns [ 50.529133][ T4484] EXT4-fs: test_dummy_encryption option not supported [ 50.547129][ T4480] tipc: Started in network mode [ 50.552119][ T4480] tipc: Node identity bec8da0cd9e5, cluster identity 4711 [ 50.560245][ T4480] tipc: Enabled bearer , priority 0 [ 50.573234][ T4478] tipc: Resetting bearer [ 50.629295][ T4478] tipc: Disabling bearer [ 50.949020][ T4519] loop3: detected capacity change from 0 to 512 [ 50.982246][ T4519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.996528][ T4519] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.202391][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.392444][ T4544] SELinux: failed to load policy [ 51.415340][ T4553] loop3: detected capacity change from 0 to 512 [ 51.437453][ T4553] journal_path: Non-blockdev passed as './bus' [ 51.443758][ T4553] EXT4-fs: error: could not find journal device path [ 51.491015][ T4562] __nla_validate_parse: 5 callbacks suppressed [ 51.491030][ T4562] netlink: 32 bytes leftover after parsing attributes in process `syz.3.434'. [ 51.556134][ T4566] $Hÿ: renamed from bond0 (while UP) [ 51.563686][ T4566] $Hÿ: entered promiscuous mode [ 51.568980][ T4566] bond_slave_0: entered promiscuous mode [ 51.574932][ T4566] bond_slave_1: entered promiscuous mode [ 51.580965][ T4566] dummy0: entered promiscuous mode [ 51.610227][ T4569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.617678][ T4569] IPv6: NLM_F_CREATE should be set when creating new route [ 52.333509][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 52.356359][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 52.366664][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 52.378599][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 52.594270][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 52.603496][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 52.647759][ T4627] bridge: RTM_NEWNEIGH with invalid ether address [ 52.681291][ T4629] netem: change failed [ 52.696000][ T4633] loop2: detected capacity change from 0 to 512 [ 52.715071][ T4633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.738069][ T4633] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.769525][ T4633] netlink: 'syz.2.466': attribute type 13 has an invalid length. [ 52.817267][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.824983][ T4633] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.874108][ T4633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.891152][ T4633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.986365][ T296] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.008604][ T4655] wireguard0: entered promiscuous mode [ 53.014106][ T4655] wireguard0: entered allmulticast mode [ 53.062012][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 53.062027][ T29] audit: type=1326 audit(1755181961.197:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f55f9ebe9 code=0x7ffc0000 [ 53.092623][ T29] audit: type=1326 audit(1755181961.207:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f55f9ebe9 code=0x7ffc0000 [ 53.117591][ T29] audit: type=1326 audit(1755181961.207:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f55f9ebe9 code=0x7ffc0000 [ 53.118005][ T296] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.141988][ T29] audit: type=1326 audit(1755181961.207:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f55f9ebe9 code=0x7ffc0000 [ 53.142058][ T29] audit: type=1326 audit(1755181961.207:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f55f9ebe9 code=0x7ffc0000 [ 53.199178][ T29] audit: type=1326 audit(1755181961.207:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f55f9ebe9 code=0x7ffc0000 [ 53.202235][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.223324][ T29] audit: type=1326 audit(1755181961.207:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f55f9ebe9 code=0x7ffc0000 [ 53.255921][ T29] audit: type=1326 audit(1755181961.207:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f55f9ebe9 code=0x7ffc0000 [ 53.279744][ T29] audit: type=1326 audit(1755181961.207:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f55f9ebe9 code=0x7ffc0000 [ 53.303447][ T29] audit: type=1326 audit(1755181961.207:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2f55f9ebe9 code=0x7ffc0000 [ 53.332480][ T4659] bond1: entered promiscuous mode [ 53.337812][ T4659] bond1: entered allmulticast mode [ 53.343629][ T4659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.354742][ T4659] bond1 (unregistering): Released all slaves [ 53.382702][ T3429] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.395204][ T3429] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.494925][ T31] nci: nci_ntf_packet: unknown ntf opcode 0x406 [ 53.721756][ T4714] process 'syz.0.492' launched './file0' with NULL argv: empty string added [ 53.752718][ T4716] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 53.762062][ T4716] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 54.331443][ T4743] bridge: RTM_NEWNEIGH with invalid ether address [ 54.392520][ T4751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'. [ 54.436748][ T4755] bridge_slave_0: left allmulticast mode [ 54.442783][ T4755] bridge_slave_0: left promiscuous mode [ 54.449102][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.479272][ T4755] bridge_slave_1: left allmulticast mode [ 54.485312][ T4755] bridge_slave_1: left promiscuous mode [ 54.491450][ T4755] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.502935][ T4755] bond0: (slave bond_slave_0): Releasing backup interface [ 54.513916][ T4755] bond0: (slave bond_slave_1): Releasing backup interface [ 54.529107][ T4755] team0: Port device team_slave_0 removed [ 54.539699][ T4755] team0: Port device team_slave_1 removed [ 54.577561][ T4755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.585261][ T4755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.619447][ T4755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.628090][ T4755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.706623][ T4767] syzkaller0: entered promiscuous mode [ 54.712973][ T4767] syzkaller0: entered allmulticast mode [ 54.733594][ T4775] veth0_vlan: entered allmulticast mode [ 54.769521][ T4775] ÿÿÿÿÿÿ: renamed from vlan1 [ 54.793125][ T4779] netlink: 'syz.4.520': attribute type 13 has an invalid length. [ 54.842591][ T4779] $Hÿ: left promiscuous mode [ 54.847762][ T4779] bond_slave_0: left promiscuous mode [ 54.853375][ T4779] bond_slave_1: left promiscuous mode [ 54.860644][ T4779] dummy0: left promiscuous mode [ 54.866793][ T4779] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 54.903820][ T4779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.949621][ T4788] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 55.003022][ T4793] loop2: detected capacity change from 0 to 512 [ 55.026534][ T4793] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.035947][ T4793] EXT4-fs (loop2): blocks per group (64) and clusters per group (32768) inconsistent [ 55.600789][ T12] bridge_slave_1: left allmulticast mode [ 55.607143][ T12] bridge_slave_1: left promiscuous mode [ 55.613207][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.658623][ T12] bridge_slave_0: left allmulticast mode [ 55.664641][ T12] bridge_slave_0: left promiscuous mode [ 55.670617][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.774361][ T4856] netlink: 'syz.4.550': attribute type 10 has an invalid length. [ 55.827435][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.851523][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.861843][ T12] bond0 (unregistering): Released all slaves [ 55.873801][ T4856] $Hÿ: (slave dummy0): Releasing backup interface [ 55.897917][ T4856] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 55.909658][ T4866] netlink: 'syz.4.550': attribute type 10 has an invalid length. [ 55.917719][ T4856] team0: Failed to send options change via netlink (err -105) [ 55.925632][ T4856] team0: Port device dummy0 added [ 55.952738][ T12] hsr_slave_0: left promiscuous mode [ 55.958846][ T12] hsr_slave_1: left promiscuous mode [ 55.972127][ T4869] loop0: detected capacity change from 0 to 1024 [ 55.983167][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.991647][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.001417][ T4869] EXT4-fs: Ignoring removed orlov option [ 56.036182][ T4869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.070643][ T12] team0 (unregistering): Port device team_slave_1 removed [ 56.093162][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.097875][ T12] team0 (unregistering): Port device team_slave_0 removed [ 56.155018][ T4866] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 56.166411][ T4866] team0: Failed to send options change via netlink (err -105) [ 56.174865][ T4866] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 56.184999][ T4866] team0: Port device dummy0 removed [ 56.193852][ T4866] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 56.204303][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'. [ 56.259520][ T4882] loop9: detected capacity change from 0 to 7 [ 56.335605][ T4886] geneve2: entered promiscuous mode [ 56.341077][ T4886] geneve2: entered allmulticast mode [ 56.478433][ T4917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.564'. [ 56.489166][ T4829] chnl_net:caif_netlink_parms(): no params data found [ 56.580318][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.587504][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.600340][ T4829] bridge_slave_0: entered allmulticast mode [ 56.607163][ T4829] bridge_slave_0: entered promiscuous mode [ 56.616914][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.624595][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.633598][ T4829] bridge_slave_1: entered allmulticast mode [ 56.643290][ T4829] bridge_slave_1: entered promiscuous mode [ 56.679578][ T4829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.700967][ T4829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.740918][ T4829] team0: Port device team_slave_0 added [ 56.753641][ T4829] team0: Port device team_slave_1 added [ 56.794724][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.802312][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.828520][ T4829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.841891][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.849052][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.876047][ T4829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.937985][ T4829] hsr_slave_0: entered promiscuous mode [ 56.944144][ T4829] hsr_slave_1: entered promiscuous mode [ 56.951318][ T4829] debugfs: 'hsr0' already exists in 'hsr' [ 56.957774][ T4829] Cannot create hsr debugfs directory [ 57.150149][ T4829] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.158607][ T4991] delete_channel: no stack [ 57.174607][ T4829] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.193884][ T4829] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.215487][ T4829] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.286656][ T4829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.336854][ T4829] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.370649][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.379357][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.398515][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.405965][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.461365][ T4829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.620628][ T5059] loop0: detected capacity change from 0 to 1024 [ 57.628764][ T4829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.660382][ T5059] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 57.712685][ T5059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.785878][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.953356][ T4829] veth0_vlan: entered promiscuous mode [ 57.979552][ T5112] netlink: 'syz.3.598': attribute type 12 has an invalid length. [ 57.996968][ T4829] veth1_vlan: entered promiscuous mode [ 58.032087][ T4829] veth0_macvtap: entered promiscuous mode [ 58.049160][ T4829] veth1_macvtap: entered promiscuous mode [ 58.076674][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.087186][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 58.087199][ T29] audit: type=1400 audit(1755181966.237:768): avc: denied { ioctl } for pid=5123 comm="syz.3.600" path="socket:[9681]" dev="sockfs" ino=9681 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.113761][ T5130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5130 comm=syz.4.599 [ 58.128046][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.148784][ T5125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.600'. [ 58.149841][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.190876][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.199197][ T29] audit: type=1400 audit(1755181966.337:769): avc: denied { mounton } for pid=4829 comm="syz-executor" path="/root/syzkaller.s3xlvQ/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 58.217379][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.225736][ T29] audit: type=1400 audit(1755181966.347:770): avc: denied { mount } for pid=4829 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.257733][ T29] audit: type=1400 audit(1755181966.347:771): avc: denied { mounton } for pid=4829 comm="syz-executor" path="/root/syzkaller.s3xlvQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.269881][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.285419][ T29] audit: type=1400 audit(1755181966.347:772): avc: denied { mounton } for pid=4829 comm="syz-executor" path="/root/syzkaller.s3xlvQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 58.358064][ T5145] bond_slave_1: entered promiscuous mode [ 58.375885][ T5145] bond_slave_1: left promiscuous mode [ 58.377589][ T29] audit: type=1400 audit(1755181966.477:773): avc: denied { mounton } for pid=4829 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.404939][ T29] audit: type=1400 audit(1755181966.477:774): avc: denied { mount } for pid=4829 comm="syz-executor" name="/" dev="gadgetfs" ino=4734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 58.427903][ T29] audit: type=1400 audit(1755181966.507:775): avc: denied { add_name } for pid=4829 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 58.452915][ T29] audit: type=1400 audit(1755181966.507:776): avc: denied { create } for pid=4829 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 58.473640][ T29] audit: type=1400 audit(1755181966.507:777): avc: denied { associate } for pid=4829 comm="syz-executor" name="syz5" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.554256][ T5158] ALSA: seq fatal error: cannot create timer (-19) [ 58.713340][ T5176] pim6reg1: entered promiscuous mode [ 58.718994][ T5176] pim6reg1: entered allmulticast mode [ 58.877867][ T5191] tipc: Enabling of bearer rejected, failed to enable media [ 59.092309][ T5200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.102264][ T5200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.118544][ T5200] loop1: detected capacity change from 0 to 1024 [ 59.126281][ T5200] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.138293][ T5200] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.154069][ T5200] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 59.161454][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 59.177730][ T5200] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.184966][ T5200] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.621: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.187797][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 59.209224][ T5200] EXT4-fs (loop1): 1 orphan inode deleted [ 59.215597][ T5200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.227921][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 59.238475][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 59.258933][ T5205] loop3: detected capacity change from 0 to 1024 [ 59.284176][ T5205] EXT4-fs: Ignoring removed nobh option [ 59.290552][ T5205] EXT4-fs: Ignoring removed bh option [ 59.300050][ T5205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.332814][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.757902][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.782127][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c8f0000: rx timeout, send abort [ 59.791471][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119864400: rx timeout, send abort [ 59.806231][ T5255] loop1: detected capacity change from 0 to 512 [ 59.807383][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c8f0000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 59.815117][ T5255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.828287][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119864400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 59.869742][ T5255] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.904538][ T5255] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 59.944009][ T5255] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.966406][ T5255] EXT4-fs (loop1): 1 truncate cleaned up [ 59.974488][ T5255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.054420][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.131554][ T5279] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 60.161041][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 60.170995][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 60.259748][ T5291] tipc: Enabling of bearer rejected, failed to enable media [ 60.542532][ T5306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.737488][ T5306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.999473][ T5315] loop3: detected capacity change from 0 to 512 [ 61.020820][ T5315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.058009][ T5315] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.136990][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.202233][ T5326] loop3: detected capacity change from 0 to 2048 [ 61.432265][ T5334] smc: net device bond0 applied user defined pnetid SYZ0 [ 61.448769][ T5336] smc: net device bond0 erased user defined pnetid SYZ0 [ 61.534347][ T5343] lo: entered allmulticast mode [ 61.598994][ T5344] syzkaller0: entered promiscuous mode [ 61.604848][ T5344] syzkaller0: entered allmulticast mode [ 61.625203][ T5348] veth0_vlan: entered allmulticast mode [ 61.731032][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.738669][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.753198][ T5358] loop5: detected capacity change from 0 to 512 [ 61.768210][ T5358] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm gtp: corrupted in-inode xattr: invalid ea_ino [ 61.784410][ T5358] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 61.808497][ T5358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.849554][ T5354] veth0_vlan: left allmulticast mode [ 61.857502][ T5358] loop5: detected capacity change from 512 to 64 [ 61.870877][ T5354] vlan2: left allmulticast mode [ 61.877203][ T5354] dummy0: left allmulticast mode [ 61.880951][ T4829] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 61.911796][ T5359] ªªªªªª: renamed from vlan0 [ 61.928564][ T5361] pim6reg1: entered promiscuous mode [ 61.935963][ T5361] pim6reg1: entered allmulticast mode [ 61.947648][ T4829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.963660][ T88] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.985780][ T88] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.995984][ T88] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.008983][ T88] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.070714][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 62.163616][ T88] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.240862][ T88] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.311270][ T88] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.370417][ T88] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.385179][ T5398] chnl_net:caif_netlink_parms(): no params data found [ 62.436026][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.443675][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.454407][ T5398] bridge_slave_0: entered allmulticast mode [ 62.463872][ T5398] bridge_slave_0: entered promiscuous mode [ 62.472081][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.480750][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.488407][ T5398] bridge_slave_1: entered allmulticast mode [ 62.495347][ T5398] bridge_slave_1: entered promiscuous mode [ 62.518388][ T5398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.538037][ T5398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.606838][ T5398] team0: Port device team_slave_0 added [ 62.613349][ T88] bridge_slave_1: left allmulticast mode [ 62.619067][ T88] bridge_slave_1: left promiscuous mode [ 62.624700][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.636828][ T88] bridge_slave_0: left allmulticast mode [ 62.643040][ T88] bridge_slave_0: left promiscuous mode [ 62.648927][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.661783][ T5431] netlink: '+}[@': attribute type 13 has an invalid length. [ 62.769754][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.781192][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.791905][ T88] bond0 (unregistering): Released all slaves [ 62.802374][ T5398] team0: Port device team_slave_1 added [ 62.850370][ T5431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 62.934217][ T5440] loop3: detected capacity change from 0 to 8192 [ 62.980542][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.987658][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.014287][ T5398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.026392][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.034178][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.061895][ T5398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.089702][ T88] hsr_slave_0: left promiscuous mode [ 63.096360][ T88] hsr_slave_1: left promiscuous mode [ 63.103794][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.111969][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.124013][ T5444] netlink: 256 bytes leftover after parsing attributes in process `syz.1.712'. [ 63.134628][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.142718][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.151483][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 63.151495][ T29] audit: type=1400 audit(1755181971.307:881): avc: denied { connect } for pid=5442 comm="syz.0.721" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.182526][ T88] veth1_macvtap: left promiscuous mode [ 63.188903][ T88] veth0_macvtap: left promiscuous mode [ 63.207009][ T88] veth1_vlan: left promiscuous mode [ 63.213581][ T88] veth0_vlan: left promiscuous mode [ 63.265924][ T29] audit: type=1400 audit(1755181971.407:882): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 63.361138][ T88] team0 (unregistering): Port device team_slave_1 removed [ 63.378737][ T88] team0 (unregistering): Port device team_slave_0 removed [ 63.512994][ T5453] wg2: left promiscuous mode [ 63.517892][ T5453] wg2: left allmulticast mode [ 63.544089][ T5454] wg2: entered promiscuous mode [ 63.549252][ T5454] wg2: entered allmulticast mode [ 63.562308][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.570638][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.579162][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.587494][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.595613][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.603771][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.613022][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.613017][ T29] audit: type=1400 audit(1755181971.707:883): avc: denied { read write } for pid=5457 comm="syz.1.716" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.621490][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.646892][ T29] audit: type=1400 audit(1755181971.707:884): avc: denied { open } for pid=5457 comm="syz.1.716" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.680757][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.690295][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 63.718500][ T3415] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.760189][ T5398] hsr_slave_0: entered promiscuous mode [ 63.792789][ T5464] fido_id[5464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.806995][ T5398] hsr_slave_1: entered promiscuous mode [ 63.815402][ T5398] debugfs: 'hsr0' already exists in 'hsr' [ 63.825656][ T5398] Cannot create hsr debugfs directory [ 64.078190][ T29] audit: type=1326 audit(1755181972.227:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 64.111274][ T5398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 64.151233][ T5496] pimreg: entered allmulticast mode [ 64.167681][ T5398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 64.181089][ T29] audit: type=1326 audit(1755181972.257:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 64.207283][ T29] audit: type=1326 audit(1755181972.257:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 64.232887][ T29] audit: type=1326 audit(1755181972.257:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 64.258568][ T29] audit: type=1326 audit(1755181972.277:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 64.289080][ T29] audit: type=1326 audit(1755181972.277:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5491 comm="syz.0.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 64.323960][ T5398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 64.337020][ T5496] pimreg: left allmulticast mode [ 64.346122][ T5398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 64.415678][ T5514] syzkaller0: entered promiscuous mode [ 64.423838][ T5514] syzkaller0: entered allmulticast mode [ 64.510029][ T5521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 64.542707][ T5398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.575546][ T5398] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.602087][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.611215][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.663912][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.671666][ T5186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.672909][ T5527] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 64.672909][ T5527] program syz.1.746 not setting count and/or reply_len properly [ 64.808282][ T5398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.040693][ T5569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 65.067762][ T5569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.075903][ T5569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.101012][ T5569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.108970][ T5569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.179181][ T5398] veth0_vlan: entered promiscuous mode [ 65.235672][ T5398] veth1_vlan: entered promiscuous mode [ 65.278016][ T5398] veth0_macvtap: entered promiscuous mode [ 65.316453][ T5398] veth1_macvtap: entered promiscuous mode [ 65.343911][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.355916][ T5561] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.753'. [ 65.368837][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.392268][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.413989][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.432121][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437941][ T5588] loop0: detected capacity change from 0 to 512 [ 65.451580][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.510566][ T5588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.538699][ T5588] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.603879][ T5588] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.693088][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.852322][ T5634] serio: Serial port ptm0 [ 65.874925][ T5638] tipc: Started in network mode [ 65.880083][ T5638] tipc: Node identity 1a274bae30a5, cluster identity 4711 [ 65.887419][ T5638] tipc: Enabled bearer , priority 0 [ 65.899968][ T5638] tipc: Disabling bearer [ 66.101801][ T5659] loop3: detected capacity change from 0 to 1024 [ 66.132588][ T5659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.185540][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.281157][ T5673] wg2: entered promiscuous mode [ 66.286513][ T5673] wg2: entered allmulticast mode [ 66.351931][ T5679] netlink: 'syz.6.798': attribute type 1 has an invalid length. [ 66.370300][ T5677] syzkaller0: entered promiscuous mode [ 66.376088][ T5677] syzkaller0: entered allmulticast mode [ 66.406141][ T5681] loop1: detected capacity change from 0 to 512 [ 66.420381][ T5681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.434316][ T5681] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.483074][ T5686] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.514531][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.535615][ T5690] program syz.1.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.638804][ T5696] pim6reg: entered allmulticast mode [ 66.646596][ T5696] netlink: 'syz.3.805': attribute type 10 has an invalid length. [ 66.658197][ T5696] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 66.668609][ T5696] team0: Failed to send options change via netlink (err -105) [ 66.676567][ T5696] team0: Port device netdevsim1 added [ 66.687838][ T88] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 66.721868][ T5705] netlink: 'syz.0.808': attribute type 10 has an invalid length. [ 66.737720][ T5705] netlink: 'syz.0.808': attribute type 10 has an invalid length. [ 66.747070][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'. [ 66.762687][ T5705] team0: Port device dummy0 removed [ 66.770888][ T5705] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.801748][ T5704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.829557][ T5709] loop0: detected capacity change from 0 to 512 [ 66.856576][ T5709] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.880023][ T5709] EXT4-fs (loop0): 1 truncate cleaned up [ 66.886436][ T5709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.924479][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.109533][ T5730] macvtap0: refused to change device tx_queue_len [ 67.284565][ T5686] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.880411][ T5748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.888538][ T5748] IPv6: NLM_F_CREATE should be set when creating new route [ 67.919314][ T5751] $Hÿ: renamed from bond0 [ 67.926783][ T5751] $Hÿ: entered promiscuous mode [ 67.933369][ T5751] bond_slave_0: entered promiscuous mode [ 67.941272][ T5751] bond_slave_1: entered promiscuous mode [ 67.948178][ T5751] dummy0: entered promiscuous mode [ 67.964019][ T5686] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.061011][ T5686] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.194626][ T5774] loop1: detected capacity change from 0 to 128 [ 68.207276][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.218750][ T5774] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 68.228504][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.231323][ T5774] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.839'. [ 68.250874][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.263922][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.273312][ T5772] syzkaller0: entered promiscuous mode [ 68.279284][ T5772] syzkaller0: entered allmulticast mode [ 68.511649][ T5796] tipc: Enabled bearer , priority 0 [ 68.539648][ T5807] netlink: 14 bytes leftover after parsing attributes in process `syz.0.851'. [ 68.551350][ T5795] tipc: Resetting bearer [ 68.566418][ T5795] tipc: Disabling bearer [ 68.579412][ T5807] hsr_slave_0: left promiscuous mode [ 68.592284][ T5807] hsr_slave_1: left promiscuous mode [ 68.694033][ T5821] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.760166][ T5825] SELinux: failed to load policy [ 68.765437][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 68.765448][ T29] audit: type=1400 audit(1755181976.907:952): avc: denied { load_policy } for pid=5823 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.801957][ T5825] loop0: detected capacity change from 0 to 512 [ 68.821118][ T5827] bridge: RTM_NEWNEIGH with invalid ether address [ 68.826193][ T5825] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.851725][ T5825] EXT4-fs (loop0): 1 truncate cleaned up [ 68.860167][ T5825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.967433][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.015560][ T5832] loop3: detected capacity change from 0 to 512 [ 69.029989][ T5832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.050646][ T5832] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.068937][ T5832] netlink: 'syz.3.864': attribute type 13 has an invalid length. [ 69.221017][ T29] audit: type=1400 audit(1755181977.347:953): avc: denied { getopt } for pid=5835 comm="syz.0.862" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.304288][ T296] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.313783][ T296] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.331117][ T296] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.340592][ T296] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.352112][ T296] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.361821][ T296] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.372200][ T296] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.381353][ T296] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.408992][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.489893][ T29] audit: type=1400 audit(1755181977.637:954): avc: denied { firmware_load } for pid=5847 comm="syz.1.869" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 69.544940][ T29] audit: type=1326 audit(1755181977.687:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.6.870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03a75aebe9 code=0x0 [ 69.546710][ T5853] netlink: 'syz.3.871': attribute type 10 has an invalid length. [ 69.586635][ T5848] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.622597][ T5848] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.652855][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.668861][ T5853] team0: Port device bond0 added [ 69.684290][ T5863] netlink: 1168 bytes leftover after parsing attributes in process `syz.3.871'. [ 69.711328][ T5863] team0 (unregistering): Port device netdevsim1 removed [ 69.724276][ T5863] team0 (unregistering): Port device bond0 removed [ 69.766204][ T5848] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.868758][ T5848] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.934260][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.951170][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.974390][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.997002][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.424707][ T5878] netlink: 'syz.1.882': attribute type 298 has an invalid length. [ 70.424993][ T5880] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 70.433450][ T29] audit: type=1400 audit(1755181978.567:956): avc: denied { write } for pid=5876 comm="syz.3.881" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.621813][ T5890] loop3: detected capacity change from 0 to 128 [ 70.659258][ T29] audit: type=1326 audit(1755181978.797:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 70.683927][ T29] audit: type=1326 audit(1755181978.797:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 70.708170][ T29] audit: type=1326 audit(1755181978.797:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 70.732255][ T29] audit: type=1326 audit(1755181978.797:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 70.756643][ T29] audit: type=1326 audit(1755181978.797:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5889 comm="syz.3.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 70.829177][ T5898] loop1: detected capacity change from 0 to 512 [ 70.893424][ T5898] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 70.932651][ T5898] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.961956][ T5898] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.066398][ T5898] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 71.098075][ T5898] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.889: bg 0: block 40: padding at end of block bitmap is not set [ 71.123926][ T5898] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.133124][ T5919] loop6: detected capacity change from 0 to 512 [ 71.141034][ T5898] EXT4-fs (loop1): 1 truncate cleaned up [ 71.147715][ T5898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.223008][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.262498][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 71.280415][ T5930] vlan2: entered allmulticast mode [ 71.289365][ T5932] loop1: detected capacity change from 0 to 1024 [ 71.296719][ T5930] dummy0: entered allmulticast mode [ 71.310958][ T5932] EXT4-fs: Ignoring removed oldalloc option [ 71.329372][ T5932] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 71.354978][ T5932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.477475][ T5932] loop1: detected capacity change from 1024 to 64 [ 71.478020][ T5944] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.902: corrupted xattr entries [ 71.525121][ T5947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.532623][ T5947] IPv6: NLM_F_CREATE should be set when creating new route [ 71.540178][ T5944] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:74: inode #15: comm syz.1.902: corrupt xattr in inline inode [ 71.590053][ T5944] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.902: corrupted xattr entries [ 71.664416][ T5959] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 71.665628][ T3301] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /199/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 71.745040][ T4904] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.765408][ T5936] bio_check_eod: 74 callbacks suppressed [ 71.765424][ T5936] kmmpd-loop1: attempt to access beyond end of device [ 71.765424][ T5936] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 71.785832][ T5936] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 71.835707][ T5957] loop6: detected capacity change from 0 to 512 [ 71.856570][ T5957] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.863292][ T5957] EXT4-fs: Ignoring removed bh option [ 71.877548][ T5957] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 71.879240][ T5972] loop0: detected capacity change from 0 to 128 [ 71.899084][ T5957] EXT4-fs (loop6): 1 truncate cleaned up [ 71.910447][ T5957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.979419][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.048652][ T5398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.071691][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.114036][ T5992] loop6: detected capacity change from 0 to 1024 [ 72.138799][ T5992] EXT4-fs: test_dummy_encryption option not supported [ 72.158708][ T5989] loop0: detected capacity change from 0 to 8192 [ 72.170597][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.270380][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.304376][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 72.427141][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.434521][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.477817][ T5974] bridge_slave_0: entered allmulticast mode [ 72.485154][ T5974] bridge_slave_0: entered promiscuous mode [ 72.492132][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.499483][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.508251][ T5974] bridge_slave_1: entered allmulticast mode [ 72.515286][ T5974] bridge_slave_1: entered promiscuous mode [ 72.538806][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.551913][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.586410][ T5974] team0: Port device team_slave_0 added [ 72.593479][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 72.602666][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 72.608479][ T5974] team0: Port device team_slave_1 added [ 72.633804][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.640904][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.667507][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.740071][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.747224][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.773727][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.836488][ T5974] hsr_slave_0: entered promiscuous mode [ 72.842804][ T5974] hsr_slave_1: entered promiscuous mode [ 73.023558][ T5974] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.040793][ T5974] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.049968][ T5974] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.059538][ T5974] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.099640][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.107040][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.114809][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.122507][ T5974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.132322][ T6031] loop6: detected capacity change from 0 to 128 [ 73.184444][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.199851][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.209616][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.232477][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.282255][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.290007][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.321687][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.328892][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.418458][ T12] bridge_slave_1: left allmulticast mode [ 73.424588][ T12] bridge_slave_1: left promiscuous mode [ 73.430553][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.462448][ T12] bridge_slave_0: left allmulticast mode [ 73.468368][ T12] bridge_slave_0: left promiscuous mode [ 73.474243][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.593135][ T6039] loop3: detected capacity change from 0 to 512 [ 73.600572][ T6039] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.607839][ T6039] EXT4-fs: Ignoring removed bh option [ 73.614643][ T6039] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.628105][ T6039] EXT4-fs (loop3): 1 truncate cleaned up [ 73.634288][ T6039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.649557][ T12] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.660237][ T12] bond_slave_0: left promiscuous mode [ 73.667001][ T12] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.676252][ T12] bond_slave_1: left promiscuous mode [ 73.682871][ T12] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 73.691934][ T12] dummy0: left promiscuous mode [ 73.698218][ T12] $Hÿ (unregistering): Released all slaves [ 73.707594][ T12] bond1 (unregistering): Released all slaves [ 73.716540][ T12] bond2 (unregistering): Released all slaves [ 73.746883][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.761402][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.777034][ T12] tipc: Left network mode [ 73.789213][ T12] hsr_slave_0: left promiscuous mode [ 73.799020][ T12] hsr_slave_1: left promiscuous mode [ 73.809070][ T12] veth1_macvtap: left promiscuous mode [ 73.825483][ T12] veth0_macvtap: left promiscuous mode [ 73.832078][ T12] veth1_vlan: left promiscuous mode [ 73.862510][ T12] pim6reg (unregistering): left allmulticast mode [ 73.912376][ T12] lo (unregistering): left allmulticast mode [ 73.995647][ T5974] veth0_vlan: entered promiscuous mode [ 74.003618][ T5974] veth1_vlan: entered promiscuous mode [ 74.022018][ T5974] veth0_macvtap: entered promiscuous mode [ 74.031256][ T5974] veth1_macvtap: entered promiscuous mode [ 74.042409][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.054349][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.065452][ T296] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.077404][ T296] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.087567][ T296] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.100152][ T296] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.150660][ T6079] loop6: detected capacity change from 0 to 1024 [ 74.164988][ T6079] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 74.176238][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 74.176249][ T29] audit: type=1326 audit(1755181982.317:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 74.208030][ T29] audit: type=1326 audit(1755181982.317:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 74.233807][ T29] audit: type=1326 audit(1755181982.317:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 74.246014][ T6079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.258465][ T29] audit: type=1326 audit(1755181982.317:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 74.260592][ T29] audit: type=1326 audit(1755181982.317:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6081 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 74.389137][ T6087] loop7: detected capacity change from 0 to 512 [ 74.418859][ T5398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.448402][ T6087] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 74.463221][ T6087] EXT4-fs (loop7): orphan cleanup on readonly fs [ 74.471440][ T6087] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 74.495708][ T6087] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.516700][ T6087] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 74.528869][ T6087] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.922: bg 0: block 40: padding at end of block bitmap is not set [ 74.545137][ T6087] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 74.555796][ T6087] EXT4-fs (loop7): 1 truncate cleaned up [ 74.563144][ T6087] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.599151][ T5974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.766171][ T6128] loop6: detected capacity change from 0 to 512 [ 74.799803][ T6128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.838005][ T6128] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.858580][ T6128] netlink: 'syz.6.953': attribute type 13 has an invalid length. [ 74.876578][ T29] audit: type=1400 audit(1755181983.017:1019): avc: denied { read } for pid=6110 comm="syz.0.963" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.903517][ T29] audit: type=1400 audit(1755181983.017:1020): avc: denied { open } for pid=6110 comm="syz.0.963" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.117875][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.124017][ T6139] loop7: detected capacity change from 0 to 512 [ 75.125200][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.163104][ T6139] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 75.174048][ T6139] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 75.208485][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.222087][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.276885][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.7.956'. [ 75.344666][ T5398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.355183][ T5186] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.368563][ T5186] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.380104][ T5186] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.418004][ T29] audit: type=1400 audit(1755181983.557:1021): avc: denied { create } for pid=6140 comm="syz.6.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.430891][ T5186] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.550073][ T6148] loop6: detected capacity change from 0 to 512 [ 75.697893][ T6152] netlink: 'syz.4.967': attribute type 12 has an invalid length. [ 75.732507][ T6150] bond_slave_1: entered promiscuous mode [ 75.747826][ T6148] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 75.756219][ T6148] EXT4-fs (loop6): orphan cleanup on readonly fs [ 75.762814][ T6150] bond_slave_1: left promiscuous mode [ 75.774016][ T6148] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 75.830205][ T6148] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.858053][ T6148] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 75.865797][ T6148] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.966: bg 0: block 40: padding at end of block bitmap is not set [ 75.898240][ T6148] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 75.907532][ T6148] EXT4-fs (loop6): 1 truncate cleaned up [ 75.914200][ T6148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.981418][ T5398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.119686][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.978'. [ 76.162550][ T6157] loop7: detected capacity change from 0 to 512 [ 76.171425][ T6157] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.178214][ T6157] EXT4-fs: Ignoring removed bh option [ 76.187224][ T6157] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 76.212465][ T6157] EXT4-fs (loop7): 1 truncate cleaned up [ 76.244605][ T6157] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.267218][ T6187] wireguard0: entered promiscuous mode [ 76.273164][ T6187] wireguard0: entered allmulticast mode [ 76.284158][ T6189] tipc: Enabling of bearer rejected, failed to enable media [ 76.306931][ T6194] bond1: entered promiscuous mode [ 76.312542][ T6194] bond1: entered allmulticast mode [ 76.331230][ T6194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.350676][ T6194] bond1 (unregistering): Released all slaves [ 76.360486][ T5974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.479339][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.987'. [ 76.491940][ T6210] loop6: detected capacity change from 0 to 512 [ 76.503911][ T6210] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 76.514885][ T6210] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 76.530423][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.987'. [ 76.540578][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.987'. [ 76.549959][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.987'. [ 76.585640][ T6217] loop6: detected capacity change from 0 to 512 [ 76.618525][ T6217] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm gtp: corrupted in-inode xattr: invalid ea_ino [ 76.638843][ T6220] pimreg: entered allmulticast mode [ 76.667384][ T6220] pimreg: left allmulticast mode [ 76.678881][ T6217] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm gtp: couldn't read orphan inode 15 (err -117) [ 76.698643][ T6217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.788435][ T6217] loop6: detected capacity change from 512 to 64 [ 76.825440][ T6228] loop0: detected capacity change from 0 to 512 [ 76.839251][ T5398] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 76.865143][ T6232] tipc: Started in network mode [ 76.870418][ T6232] tipc: Node identity 52dbe7c38e09, cluster identity 4711 [ 76.877924][ T6232] tipc: Enabled bearer , priority 0 [ 76.918916][ T6231] tipc: Resetting bearer [ 76.927910][ T5398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.946952][ T6231] tipc: Disabling bearer [ 77.035175][ T6246] wireguard0: entered promiscuous mode [ 77.041093][ T6246] wireguard0: entered allmulticast mode [ 77.128459][ T6254] bond0: entered promiscuous mode [ 77.134008][ T6254] bond0: entered allmulticast mode [ 77.170628][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.190455][ T6254] bond0 (unregistering): Released all slaves [ 77.261312][ T6263] pimreg: entered allmulticast mode [ 77.269394][ T6263] pimreg: left allmulticast mode [ 77.370094][ T6279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1012'. [ 77.432628][ T6282] syzkaller0: entered promiscuous mode [ 77.438601][ T6282] syzkaller0: entered allmulticast mode [ 77.512188][ T6286] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 77.525195][ T6289] netlink: 'syz.4.1018': attribute type 1 has an invalid length. [ 77.541844][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.567189][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.574876][ T6289] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 77.586814][ T6289] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 77.628038][ T6296] wireguard0: entered promiscuous mode [ 77.633838][ T6296] wireguard0: entered allmulticast mode [ 77.695114][ T6304] bond1: entered promiscuous mode [ 77.700511][ T6304] bond1: entered allmulticast mode [ 77.706783][ T6304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.720045][ T6304] bond1 (unregistering): Released all slaves [ 77.817456][ T6320] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 77.831604][ T6322] loop3: detected capacity change from 0 to 1024 [ 77.839979][ T6322] EXT4-fs: Ignoring removed orlov option [ 77.856248][ T6320] bond0: (slave dummy0): Releasing backup interface [ 77.865895][ T6322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.880353][ T6320] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 77.890363][ T6320] team0: Failed to send options change via netlink (err -105) [ 77.898435][ T6328] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 77.898842][ T6320] team0: Port device dummy0 added [ 77.918810][ T6327] geneve2: entered promiscuous mode [ 77.925238][ T6327] geneve2: entered allmulticast mode [ 77.945642][ T6328] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 77.956710][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.966791][ T6328] team0: Failed to send options change via netlink (err -105) [ 77.974579][ T6328] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 77.984807][ T6328] team0: Port device dummy0 removed [ 77.992084][ T6328] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.004383][ T6291] chnl_net:caif_netlink_parms(): no params data found [ 78.062089][ T6340] random: crng reseeded on system resumption [ 78.077819][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.085781][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.091134][ T6342] netlink: 'syz.7.1034': attribute type 1 has an invalid length. [ 78.095013][ T6291] bridge_slave_0: entered allmulticast mode [ 78.108902][ T6291] bridge_slave_0: entered promiscuous mode [ 78.116366][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.123687][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.131361][ T6291] bridge_slave_1: entered allmulticast mode [ 78.137864][ T6291] bridge_slave_1: entered promiscuous mode [ 78.170404][ T6338] tipc: Enabled bearer , priority 0 [ 78.178928][ T6291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.189064][ T6337] tipc: Resetting bearer [ 78.202412][ T6337] tipc: Disabling bearer [ 78.211242][ T6291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.235898][ T6291] team0: Port device team_slave_0 added [ 78.243221][ T6291] team0: Port device team_slave_1 added [ 78.250283][ T6347] wg2: left promiscuous mode [ 78.255376][ T6347] wg2: left allmulticast mode [ 78.282021][ T6349] veth0_vlan: entered allmulticast mode [ 78.293607][ T6347] wg2: entered promiscuous mode [ 78.298711][ T6347] wg2: entered allmulticast mode [ 78.308543][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.316794][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.347539][ T6291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.365800][ T6349] ÿÿÿÿÿÿ: renamed from vlan1 [ 78.376306][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.384153][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.411742][ T6291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.431818][ T6353] veth0_vlan: entered allmulticast mode [ 78.461562][ T6291] hsr_slave_0: entered promiscuous mode [ 78.467480][ T6355] loop7: detected capacity change from 0 to 1024 [ 78.469590][ T6291] hsr_slave_1: entered promiscuous mode [ 78.480782][ T6291] debugfs: 'hsr0' already exists in 'hsr' [ 78.486710][ T6291] Cannot create hsr debugfs directory [ 78.499347][ T6355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.503559][ T6359] ªªªªªª: renamed from vlan0 [ 78.540475][ T5974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.594303][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.601617][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.639349][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.649598][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.686268][ T88] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.702465][ T6291] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 78.713274][ T88] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.722957][ T6291] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 78.733030][ T6291] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.742813][ T88] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.752611][ T6291] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.762551][ T88] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.775125][ T6363] SELinux: failed to load policy [ 78.783773][ T6363] loop7: detected capacity change from 0 to 512 [ 78.794079][ T6363] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 78.809515][ T6291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.817053][ T6363] EXT4-fs (loop7): 1 truncate cleaned up [ 78.821290][ T6291] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.827613][ T6363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.846536][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.853859][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.862542][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.869909][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.887074][ T6291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.942305][ T6291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.968914][ T5974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.009020][ T6382] netlink: 'syz.7.1042': attribute type 10 has an invalid length. [ 79.021508][ T6382] team0: Port device dummy0 added [ 79.029535][ T6382] netlink: 'syz.7.1042': attribute type 10 has an invalid length. [ 79.039308][ T6382] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 79.051186][ T6382] team0: Failed to send options change via netlink (err -105) [ 79.059602][ T6382] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 79.069428][ T6382] team0: Port device dummy0 removed [ 79.076462][ T6382] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.128968][ T6291] veth0_vlan: entered promiscuous mode [ 79.139771][ T6291] veth1_vlan: entered promiscuous mode [ 79.156215][ T6291] veth0_macvtap: entered promiscuous mode [ 79.165154][ T6291] veth1_macvtap: entered promiscuous mode [ 79.176852][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.188979][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.200365][ T88] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.211590][ T88] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.221277][ T6395] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.231931][ T88] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.241931][ T88] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.294534][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 79.294549][ T29] audit: type=1400 audit(1755181987.437:1068): avc: denied { setcurrent } for pid=6399 comm="syz.3.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.331091][ T29] audit: type=1401 audit(1755181987.447:1069): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 79.416121][ T6404] tipc: Started in network mode [ 79.421204][ T6404] tipc: Node identity 3642bc69ca66, cluster identity 4711 [ 79.428617][ T6404] tipc: Enabled bearer , priority 0 [ 79.436857][ T6407] tipc: Enabled bearer , priority 0 [ 79.444900][ T6403] tipc: Resetting bearer [ 79.457212][ T6403] tipc: Disabling bearer [ 79.466143][ T6406] tipc: Resetting bearer [ 79.477032][ T6406] tipc: Disabling bearer [ 79.558609][ T29] audit: type=1326 audit(1755181987.707:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.0.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 79.605254][ T29] audit: type=1326 audit(1755181987.707:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.0.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 79.608157][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 79.631229][ T29] audit: type=1326 audit(1755181987.707:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.0.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 79.664359][ T29] audit: type=1326 audit(1755181987.707:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.0.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 79.670876][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'. [ 79.689472][ T29] audit: type=1326 audit(1755181987.707:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.0.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 79.689529][ T29] audit: type=1326 audit(1755181987.707:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.0.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 79.749534][ T29] audit: type=1326 audit(1755181987.707:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.0.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 79.775901][ T29] audit: type=1326 audit(1755181987.707:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.0.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febab8aebe9 code=0x7ffc0000 [ 79.848019][ T6427] wg2: left promiscuous mode [ 79.852695][ T6427] wg2: left allmulticast mode [ 79.879344][ T6427] wg2: entered promiscuous mode [ 79.884583][ T6427] wg2: entered allmulticast mode [ 79.935029][ T6430] loop0: detected capacity change from 0 to 512 [ 79.990874][ T6430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.007454][ T6430] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.180444][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.193143][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'. [ 80.203667][ T6451] bridge_slave_1: left allmulticast mode [ 80.209861][ T6451] bridge_slave_1: left promiscuous mode [ 80.216604][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.228550][ T6451] bridge_slave_0: left allmulticast mode [ 80.234727][ T6451] bridge_slave_0: left promiscuous mode [ 80.241470][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.261525][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.277829][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.510992][ T6455] vlan0: entered allmulticast mode [ 80.529169][ T6461] bridge_slave_0: left allmulticast mode [ 80.535190][ T6461] bridge_slave_0: left promiscuous mode [ 80.541132][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.550708][ T6461] bridge_slave_1: left allmulticast mode [ 80.556373][ T6461] bridge_slave_1: left promiscuous mode [ 80.562548][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.572104][ T6461] bond0: (slave bond_slave_0): Releasing backup interface [ 80.582576][ T6461] bond0: (slave bond_slave_1): Releasing backup interface [ 80.595696][ T6461] team0: Port device team_slave_0 removed [ 80.607029][ T6461] team0: Port device team_slave_1 removed [ 80.626671][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.634555][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.645167][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.652802][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.868589][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.878252][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.974844][ T6491] vlan1: entered allmulticast mode [ 80.980651][ T6491] bridge_slave_1: entered allmulticast mode [ 80.987781][ T6492] loop7: detected capacity change from 0 to 2048 [ 81.027968][ T6492] loop7: p3 p4 < > [ 81.032751][ T6492] loop7: p3 size 57344 extends beyond EOD, truncated [ 81.093345][ T6496] netlink: 'syz.3.1081': attribute type 10 has an invalid length. [ 81.103882][ T6496] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 81.445138][ T6515] lo: entered allmulticast mode [ 81.512443][ T6523] wg2: entered promiscuous mode [ 81.517584][ T6523] wg2: entered allmulticast mode [ 81.599189][ T6535] @: renamed from vlan0 [ 81.681517][ T6546] loop0: detected capacity change from 0 to 1024 [ 81.690597][ T6546] EXT4-fs: Ignoring removed orlov option [ 81.720861][ T6546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.735559][ T6546] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1105: bg 0: block 88: padding at end of block bitmap is not set [ 81.768666][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.932061][ T6577] bond0: (slave dummy0): Releasing backup interface [ 81.945545][ T6577] bridge_slave_0: left allmulticast mode [ 81.951761][ T6577] bridge_slave_0: left promiscuous mode [ 81.957931][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.969369][ T6577] bridge_slave_1: left promiscuous mode [ 81.975414][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.991438][ T6577] bond0: (slave bond_slave_0): Releasing backup interface [ 82.006434][ T6577] bond0: (slave bond_slave_1): Releasing backup interface [ 82.022015][ T6577] team0: Port device team_slave_0 removed [ 82.035112][ T6577] team0: Port device team_slave_1 removed [ 82.046552][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.054804][ T6577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.063785][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.071314][ T6577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.315988][ T6590] loop0: detected capacity change from 0 to 512 [ 82.338735][ T6590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.357461][ T6590] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.380523][ T6594] loop3: detected capacity change from 0 to 2048 [ 82.419791][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.438646][ T6594] loop3: p3 p4 < > [ 82.442626][ T6594] loop3: p3 size 57344 extends beyond EOD, truncated [ 82.517898][ T6600] loop0: detected capacity change from 0 to 512 [ 82.560644][ T6600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.574723][ T6600] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.628357][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.101111][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 83.110307][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 83.130717][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 83.182486][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 83.191846][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 83.214674][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 83.286096][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 83.295341][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 83.316444][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 83.554790][ T6662] loop8: detected capacity change from 0 to 2048 [ 83.625127][ T3294] loop8: p3 p4 < > [ 83.632284][ T3294] loop8: p3 size 57344 extends beyond EOD, truncated [ 83.652803][ T6663] mmap: syz.4.1149 (6663) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.671219][ T6662] loop8: p3 p4 < > [ 83.680370][ T6662] loop8: p3 size 57344 extends beyond EOD, truncated [ 83.770623][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 83.780913][ T6667] wg2: entered promiscuous mode [ 83.786131][ T6667] wg2: entered allmulticast mode [ 83.800067][ T4095] udevd[4095]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 83.928473][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 83.943052][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 84.124075][ T6694] bond_slave_1: mtu less than device minimum [ 84.145971][ T6696] loop8: detected capacity change from 0 to 1024 [ 84.165157][ T6696] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 84.176777][ T6696] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 84.212940][ T6696] JBD2: no valid journal superblock found [ 84.219325][ T6696] EXT4-fs (loop8): Could not load journal inode [ 84.246892][ T6696] loop8: detected capacity change from 0 to 1024 [ 84.255349][ T6696] EXT4-fs: Ignoring removed bh option [ 84.261741][ T6696] EXT4-fs: inline encryption not supported [ 84.274704][ T6696] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.308459][ T6696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 84.338618][ T6696] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.1166: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.355237][ T6696] __quota_error: 134 callbacks suppressed [ 84.355253][ T6696] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 84.369778][ T6696] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1166: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.394577][ T6696] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 84.403692][ T6696] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.1166: Failed to acquire dquot type 0 [ 84.422666][ T6696] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 84.434119][ T6696] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.1166: mark_inode_dirty error [ 84.447909][ T6696] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 84.474326][ T6696] EXT4-fs (loop8): 1 orphan inode deleted [ 84.481550][ T6696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.495223][ T5186] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.513238][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1174'. [ 84.569314][ T5186] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 84.578855][ T5186] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 84.627212][ T6696] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1166: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.649746][ T6696] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 84.662423][ T6732] loop7: detected capacity change from 0 to 128 [ 84.671035][ T6733] bond_slave_1: mtu less than device minimum [ 84.694652][ T6732] syz.7.1179: attempt to access beyond end of device [ 84.694652][ T6732] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 84.725202][ T6291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.736026][ T6732] syz.7.1179: attempt to access beyond end of device [ 84.736026][ T6732] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 84.751516][ T6732] syz.7.1179: attempt to access beyond end of device [ 84.751516][ T6732] loop7: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 84.778053][ T6732] syz.7.1179: attempt to access beyond end of device [ 84.778053][ T6732] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 84.826655][ T6749] syz.7.1179: attempt to access beyond end of device [ 84.826655][ T6749] loop7: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 84.847267][ T6732] syz.7.1179: attempt to access beyond end of device [ 84.847267][ T6732] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 84.883973][ T6749] syz.7.1179: attempt to access beyond end of device [ 84.883973][ T6749] loop7: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 84.902402][ T6749] syz.7.1179: attempt to access beyond end of device [ 84.902402][ T6749] loop7: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 84.926263][ T6732] syz.7.1179: attempt to access beyond end of device [ 84.926263][ T6732] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 84.964105][ T6732] syz.7.1179: attempt to access beyond end of device [ 84.964105][ T6732] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 85.143544][ T6759] loop7: detected capacity change from 0 to 1024 [ 85.188197][ T6759] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.337558][ T29] audit: type=1400 audit(1755181993.477:1212): avc: denied { lock } for pid=6758 comm="syz.7.1190" path="/48/file1/blkio.bfq.group_wait_time" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.410179][ T6767] wg2: left promiscuous mode [ 85.415023][ T6767] wg2: left allmulticast mode [ 85.426788][ T6767] wg2: entered promiscuous mode [ 85.432370][ T6767] wg2: entered allmulticast mode [ 85.461890][ T5974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.500771][ T6775] random: crng reseeded on system resumption [ 85.508122][ T29] audit: type=1400 audit(1755181993.647:1213): avc: denied { append } for pid=6774 comm="syz.7.1204" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.546662][ T6775] loop7: detected capacity change from 0 to 1764 [ 85.560229][ T29] audit: type=1400 audit(1755181993.707:1214): avc: denied { mount } for pid=6774 comm="syz.7.1204" name="/" dev="loop7" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 85.600868][ T29] audit: type=1400 audit(1755181993.747:1215): avc: denied { unmount } for pid=5974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 85.657146][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.674454][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.867482][ T29] audit: type=1326 audit(1755181994.007:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 85.893852][ T29] audit: type=1326 audit(1755181994.007:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6801 comm="syz.3.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4dc8ebe9 code=0x7ffc0000 [ 85.906580][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119874600: rx timeout, send abort [ 85.928735][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119874c00: rx timeout, send abort [ 85.937644][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119874600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 85.953418][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119874c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 86.188932][ T6819] veth0_to_team: entered promiscuous mode [ 86.343907][ T2991] ================================================================== [ 86.352710][ T2991] BUG: KCSAN: data-race in dont_mount / step_into [ 86.359398][ T2991] [ 86.362371][ T2991] read-write to 0xffff88810b9469c0 of 4 bytes by task 3294 on cpu 0: [ 86.370876][ T2991] dont_mount+0x2a/0x40 [ 86.372786][ T6830] loop0: detected capacity change from 0 to 2048 [ 86.375148][ T2991] vfs_unlink+0x28f/0x420 [ 86.375172][ T2991] do_unlinkat+0x24e/0x480 [ 86.390382][ T2991] __x64_sys_unlink+0x2e/0x40 [ 86.395132][ T2991] x64_sys_call+0x2dc0/0x2ff0 [ 86.399895][ T2991] do_syscall_64+0xd2/0x200 [ 86.405289][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.411455][ T2991] [ 86.413860][ T2991] read to 0xffff88810b9469c0 of 4 bytes by task 2991 on cpu 1: [ 86.421398][ T2991] step_into+0xe3/0x820 [ 86.425560][ T2991] walk_component+0x162/0x220 [ 86.430579][ T2991] path_lookupat+0xfe/0x2a0 [ 86.435170][ T2991] filename_lookup+0x147/0x340 [ 86.440213][ T2991] do_readlinkat+0x7d/0x320 [ 86.444721][ T2991] __x64_sys_readlink+0x47/0x60 [ 86.449576][ T2991] x64_sys_call+0x28da/0x2ff0 [ 86.454536][ T2991] do_syscall_64+0xd2/0x200 [ 86.459045][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.464927][ T2991] [ 86.467237][ T2991] value changed: 0x00300080 -> 0x00004080 [ 86.472976][ T2991] [ 86.475293][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 86.481617][ T2991] CPU: 1 UID: 0 PID: 2991 Comm: udevd Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 86.493848][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.504253][ T2991] ================================================================== [ 86.569577][ T6830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 86.701243][ T6836] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.717610][ T6836] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 86.730345][ T6836] EXT4-fs (loop0): This should not happen!! Data will be lost [ 86.730345][ T6836] [ 86.741051][ T6836] EXT4-fs (loop0): Total free blocks count 0 [ 86.747371][ T6836] EXT4-fs (loop0): Free/Dirty block details [ 86.753889][ T6836] EXT4-fs (loop0): free_blocks=2415919104 [ 86.760375][ T6836] EXT4-fs (loop0): dirty_blocks=2448 [ 86.766715][ T6836] EXT4-fs (loop0): Block reservation details [ 86.772813][ T6836] EXT4-fs (loop0): i_reserved_data_blocks=153 [ 86.847447][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28