last executing test programs: 2.331564698s ago: executing program 4 (id=362): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280)}, 0x121, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, 0x2000000008}, 0x0, 0xa, 0xffffffffffffffff, 0xa) creat(&(0x7f00000000c0)='./file0\x00', 0x198) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2.221255329s ago: executing program 4 (id=365): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000080)={[{@i_version}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xba}}, {@nombcache}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 2.17406513s ago: executing program 1 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 2.086816441s ago: executing program 1 (id=368): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x2010}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x24040800) r4 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) 2.002282323s ago: executing program 1 (id=369): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 1.567319199s ago: executing program 4 (id=377): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102036c00fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.493429649s ago: executing program 4 (id=379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="f6ffffffffff050000000000000000886ca3213e99fa2aa0eb6bd8a94dca0000072f12f7d7edef0478b54ef6777580da018ab621a66e69f4dc01389ffcfe5559c61ccc2f20111a83c34d21c034fd225457dff80e9137e6806f0d945f368827f2c93ae2403cf81b3f6d27aef9cfed383eb084a2fc74bb5d17edaf4b5985981a1fed17acae82454517569d2c7f1d2c966260ac015a93769532e5621fcdbbf9734e9823ad56bc9809f4cfa1070cdfa11d1ae62e48b067f0a11205cf1e4b4e94f5e37581c65be9553bf9de856fc26bebe1cf2db28a2e81c5f28354d495596b31320b91ee7d6f8ee81beee1fe00f691e096c05b7c5d60eea3e3679c66fd11b0c399e67bb05b23e0fe1f5b149b933f0d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$setregs(0xffffffffffffffff, r2, 0x5, &(0x7f0000000340)="a3f495a9113d1b71d4a3bbd036347a905dbd969af704dbf705f264f35e364b4a1d5ba9a1e03d2032f005a6e9c604be01d1e09245ac3af231d6be3f69867f82d0c9d39c3e89e60e0a642495e18fa318f5037b49d3616feae02ab8930b9b5039ff12de6a10d9060957015d0b6d9e88a6164decdb81c1840d456ca9a1947f44c48e31bb5d42d79c935e47a28406c14524065af032c4218a463c761d9bf291c999e0577d92664c7eba") ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}]}) 1.45611854s ago: executing program 4 (id=380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) lseek(r4, 0x5, 0x3) 1.163863794s ago: executing program 3 (id=384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) 1.011604956s ago: executing program 3 (id=386): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x800000009) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f00000002c0)=[{&(0x7f0000001e80)="a9", 0x1}], 0x1, 0x17, 0x0) 973.353636ms ago: executing program 1 (id=387): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) 860.469508ms ago: executing program 0 (id=389): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000002080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f00000020c0), 0x0, 0x548, &(0x7f0000000cc0)="$eJzs3c9vI1cdAPDvTH42TZst9AAVsAsUFrRae+Nto6qXdi8gVFVCVBwQh21IvFGIHYfYKU2IRPo3gAQSJ/gTOCBxQOqJAzeO3BBSOSAtEIE2SFQYeTxJ3azdeDeODfHnI83Oj5e873v2zrznN/G8AMbWtYg4iIjpiHgzIhby40m+xKvtpfVzDw73V44O91fiP83mG39LsvTWseO8mvn6yTzP2Yj4xlcjvpM8HLe+u7exXKmUt/P9YqO6Vazv7t1cry6vldfKm6XS0uLSrZduv1gaWF2vVn95/yvrr33zN7/+9Hu/P/jyD1rFms/TOusxSO2qT53EaZmMiNcuItgITOTr6RGXg8eTRsTHIuJz2fm/EBPZ/04A4DJrNheiudC5DwBcdmk2BpakhXwsYD7StFBoj+E9G3NppVZv3LhX29lcbY+VXYmpdCbvK3wv+3cqubdeKS9maVl6tl86tX87Ip6JiB/PPJHtF1ZqldXRdHkAYOw9ear9/+dMu/3vQ5e7egDA/43ZURcAABg67T8AjB/tPwCMnz7a//xm/8GFlwUAGA6f/wFg/Gj/AWD8aP8BYKx8/fXXW0vzKH/+9epbuzsbtbdurpbrG4Xqzkphpba9VVir1dayZ/ZUz8qvUqttLb4QO28XG+V6o1jf3btbre1sNu5mz/W+W54aSq0AgI/yzNV3/5BExMHLT2RLmMsBxkY66gIAIzMx6gIAI2O2Lxhf/Y/H/+5CywGMTteHec923fzwoMFPHyGIvzOC/ynXP9l7/P9038B9AbhcjP/D+Hq88f9XBl4OYPi6jf/r58N4aDaT4zn/p/Pp/6dPkgCAS+kc38dr/nBQnRBgpM6azLvnrftHuf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8x8RHw3krSQzwU+H2laKEQ8FRFXYiq5t14p34qIp+NqREzNtPYXR11oAOCc0r8k+fxf1xeenz+dOp38aybyOcG//7M3fvL2cqOxvdg6/veT4zPH04eVPvi9c8wrCAAMWNZ+l/J1xwf5B4f7K8fLMMtz/068n09FvHJ0uJ8t7ZTJmMzWs1lfYu4fSb7fnov0uYiYGED8g3ci4hMn9U/ebzbz+Ek2NnIln/m0M37ksZ8afPyO1/90/PRD8dMsrb1udb4+firfdABlg8vu3TsR8Wq38y+Na9m6+/k/m12hzu/+nXZmx9e+o474x9e/iS7xW+f8tX5jvPDbrz10sLnQTnsn4rnJbvGTk/hJj/jP9xn/j5/6zI9e6ZHW/HnE9egevzNWsVHdKtZ3926uV5fXymvlzVJpaXHp1ku3XywVszHq4vFI9cP++vKNp3uVrVX/uR7xZ7vWf/rkd7/QZ/1/8e83v/3Zj4j/pc93f/+f7Rq/rdUmfrHP+Mtzv+o5fXcr/mqP+p/1/t/oM/57f95b7fNHAYAhqO/ubSxXKuXtc220Pm0OIp9sY7rjSKuIAylhnxt/iuHFOnNjapCv6lA3Jk/6ioPN+VutHIdcnXTgtTjXxoNhxRrtdQm4eB+c9KMuCQAAAAAAAAAAAAAA0Mswvro06joCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwef03AAD//yLnx6o=") sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xd4) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000010c0)=""/4104, &(0x7f0000000000)=0x1008) getdents64(r1, &(0x7f0000002100)=""/4096, 0x1000) write(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, 0x0) 855.733548ms ago: executing program 2 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x2}, 0x10) 739.97ms ago: executing program 3 (id=391): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x82) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 738.13381ms ago: executing program 2 (id=392): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a0, 0xffffffff, 0x170, 0x0, 0xa0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0, 0x0, {0x100000000000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x7}, {}, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="3232b3c71587", 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x2f]}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'team0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0, r1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 697.66356ms ago: executing program 0 (id=393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xa180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 624.283681ms ago: executing program 2 (id=394): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000380)=0x7ffd) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8, 0xffffffffffffffff}) 587.225742ms ago: executing program 3 (id=395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 556.706282ms ago: executing program 0 (id=397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r1, 0x0, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r2, r2, 0x0, 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) pipe(0x0) 525.298143ms ago: executing program 0 (id=398): connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x22, 0x6, @broadcast}, 0x14) r0 = socket(0x11, 0x3, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0xc4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6(0xa, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aac98fba38b633d4f418aaaaaa"], 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 445.077434ms ago: executing program 2 (id=399): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008894}, 0x4) 387.763784ms ago: executing program 2 (id=400): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000000c0), 0x41000, 0x3, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 340.776015ms ago: executing program 3 (id=401): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffc2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000071120500000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7a6b282c6bf84887, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x2}, 0xc27a, 0x200000000000000, 0x7, 0x5, 0x1, 0x200000, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 324.108715ms ago: executing program 2 (id=402): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x10f042, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40400) read(r2, &(0x7f0000000680)=""/210, 0xd2) 302.406786ms ago: executing program 0 (id=403): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000280)) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 147.220408ms ago: executing program 0 (id=404): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x800000009) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f00000002c0)=[{&(0x7f0000001e80)="a9", 0x1}], 0x1, 0x17, 0x0) 146.803108ms ago: executing program 3 (id=405): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x1000011, &(0x7f0000000700)={[{@i_version}, {@grpjquota}, {@noquota}, {@dioread_lock}, {@journal_checksum}, {@resgid}, {@data_err_ignore}, {@auto_da_alloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x577, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) read$eventfd(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0xfffffffd, 0x0, 0x4}, &(0x7f00000001c0), &(0x7f0000000580)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000013000100feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="d5200000074100000500270000000000140003006261746164763000000000000000000034001a8018000a8014000700fc00"/59], 0x70}}, 0x0) 98.426868ms ago: executing program 1 (id=406): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 49.557029ms ago: executing program 4 (id=407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) 0s ago: executing program 1 (id=408): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) ioperm(0x0, 0x2, 0x7e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) io_setup(0x2, &(0x7f0000002400)) r1 = gettid() socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 32.368444][ T29] audit: type=1400 audit(1749130747.270:62): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.369615][ T3306] cgroup: Unknown subsys name 'net' [ 32.391200][ T29] audit: type=1400 audit(1749130747.270:63): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.418660][ T29] audit: type=1400 audit(1749130747.300:64): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.574625][ T3306] cgroup: Unknown subsys name 'cpuset' [ 32.580932][ T3306] cgroup: Unknown subsys name 'rlimit' [ 32.751617][ T29] audit: type=1400 audit(1749130747.650:65): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.777152][ T29] audit: type=1400 audit(1749130747.650:66): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.797736][ T29] audit: type=1400 audit(1749130747.650:67): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.818133][ T29] audit: type=1400 audit(1749130747.650:68): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.826801][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.838447][ T29] audit: type=1400 audit(1749130747.660:69): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.871852][ T29] audit: type=1400 audit(1749130747.660:70): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.895124][ T29] audit: type=1400 audit(1749130747.750:71): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.955405][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.820199][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 34.835495][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 34.851693][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 34.942909][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.950097][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.957384][ T3323] bridge_slave_0: entered allmulticast mode [ 34.963904][ T3323] bridge_slave_0: entered promiscuous mode [ 34.980300][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.987423][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.994619][ T3324] bridge_slave_0: entered allmulticast mode [ 35.001079][ T3324] bridge_slave_0: entered promiscuous mode [ 35.008028][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.015167][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.022308][ T3323] bridge_slave_1: entered allmulticast mode [ 35.028978][ T3323] bridge_slave_1: entered promiscuous mode [ 35.040710][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.047788][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.055097][ T3316] bridge_slave_0: entered allmulticast mode [ 35.061496][ T3316] bridge_slave_0: entered promiscuous mode [ 35.072191][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.079273][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.086401][ T3324] bridge_slave_1: entered allmulticast mode [ 35.092679][ T3324] bridge_slave_1: entered promiscuous mode [ 35.111917][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.121444][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.128581][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.135743][ T3316] bridge_slave_1: entered allmulticast mode [ 35.142094][ T3316] bridge_slave_1: entered promiscuous mode [ 35.166212][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.176323][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.197580][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.209985][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.220061][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.238134][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.261158][ T3323] team0: Port device team_slave_0 added [ 35.267947][ T3323] team0: Port device team_slave_1 added [ 35.281139][ T3316] team0: Port device team_slave_0 added [ 35.301725][ T3316] team0: Port device team_slave_1 added [ 35.312997][ T3324] team0: Port device team_slave_0 added [ 35.338226][ T3324] team0: Port device team_slave_1 added [ 35.344257][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.351230][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.377195][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.388128][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.401353][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.408316][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.434325][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.449819][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.456904][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.482822][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.501691][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.508902][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.534929][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.553394][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.560456][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.586874][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.600721][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.607751][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.633844][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.649781][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.656919][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.664111][ T3317] bridge_slave_0: entered allmulticast mode [ 35.670833][ T3317] bridge_slave_0: entered promiscuous mode [ 35.679656][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.686763][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.694218][ T3317] bridge_slave_1: entered allmulticast mode [ 35.700534][ T3317] bridge_slave_1: entered promiscuous mode [ 35.741958][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.768290][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.779469][ T3323] hsr_slave_0: entered promiscuous mode [ 35.785563][ T3323] hsr_slave_1: entered promiscuous mode [ 35.799751][ T3316] hsr_slave_0: entered promiscuous mode [ 35.805917][ T3316] hsr_slave_1: entered promiscuous mode [ 35.811925][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.819513][ T3316] Cannot create hsr debugfs directory [ 35.842213][ T3324] hsr_slave_0: entered promiscuous mode [ 35.848230][ T3324] hsr_slave_1: entered promiscuous mode [ 35.854139][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.861718][ T3324] Cannot create hsr debugfs directory [ 35.880974][ T3317] team0: Port device team_slave_0 added [ 35.890281][ T3317] team0: Port device team_slave_1 added [ 35.901530][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.908701][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.915940][ T3321] bridge_slave_0: entered allmulticast mode [ 35.922387][ T3321] bridge_slave_0: entered promiscuous mode [ 35.953421][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.960546][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.967784][ T3321] bridge_slave_1: entered allmulticast mode [ 35.974402][ T3321] bridge_slave_1: entered promiscuous mode [ 36.010244][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.022723][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.032191][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.039205][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.065582][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.076652][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.083601][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.109615][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.158223][ T3321] team0: Port device team_slave_0 added [ 36.175844][ T3321] team0: Port device team_slave_1 added [ 36.188174][ T3317] hsr_slave_0: entered promiscuous mode [ 36.194495][ T3317] hsr_slave_1: entered promiscuous mode [ 36.200302][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.207895][ T3317] Cannot create hsr debugfs directory [ 36.245851][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.252848][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.278881][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.301838][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.308873][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.335000][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.399022][ T3321] hsr_slave_0: entered promiscuous mode [ 36.405174][ T3321] hsr_slave_1: entered promiscuous mode [ 36.410903][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.418623][ T3321] Cannot create hsr debugfs directory [ 36.458102][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.475266][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.488529][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.497654][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.532844][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.541470][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.566288][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.579179][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.600821][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.610431][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.628557][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.643091][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.666778][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.680333][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.688904][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.698244][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.713393][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.750117][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.760682][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.770854][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.777981][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.788975][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.798006][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.809241][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.818728][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.825833][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.843621][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.862994][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.893851][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.901016][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.917440][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.924652][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.941237][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.955727][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.970431][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.995071][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.002170][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.014377][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.024763][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.031848][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.067198][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.074319][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.083366][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.090497][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.129030][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.148796][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.163326][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.179214][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.195007][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.202154][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.222469][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.245425][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.252614][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.273266][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.287544][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.298068][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.326985][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.381874][ T3323] veth0_vlan: entered promiscuous mode [ 37.413081][ T3323] veth1_vlan: entered promiscuous mode [ 37.449760][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.460681][ T3323] veth0_macvtap: entered promiscuous mode [ 37.488092][ T3323] veth1_macvtap: entered promiscuous mode [ 37.512952][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.530567][ T3324] veth0_vlan: entered promiscuous mode [ 37.542278][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.551627][ T3324] veth1_vlan: entered promiscuous mode [ 37.571899][ T3323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.580725][ T3323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.589562][ T3323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.598340][ T3323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.613892][ T3317] veth0_vlan: entered promiscuous mode [ 37.632937][ T3317] veth1_vlan: entered promiscuous mode [ 37.644893][ T3324] veth0_macvtap: entered promiscuous mode [ 37.664362][ T3324] veth1_macvtap: entered promiscuous mode [ 37.671112][ T3316] veth0_vlan: entered promiscuous mode [ 37.679896][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 37.679908][ T29] audit: type=1400 audit(1749130752.580:81): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.nWRw1B/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.687633][ T3321] veth0_vlan: entered promiscuous mode [ 37.717513][ T29] audit: type=1400 audit(1749130752.580:82): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.736615][ T3317] veth0_macvtap: entered promiscuous mode [ 37.739624][ T29] audit: type=1400 audit(1749130752.580:83): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.nWRw1B/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.748688][ T3317] veth1_macvtap: entered promiscuous mode [ 37.770553][ T29] audit: type=1400 audit(1749130752.580:84): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.783720][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.798003][ T29] audit: type=1400 audit(1749130752.580:85): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.nWRw1B/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.807369][ T3316] veth1_vlan: entered promiscuous mode [ 37.831758][ T29] audit: type=1400 audit(1749130752.580:86): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.nWRw1B/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 37.843229][ T3321] veth1_vlan: entered promiscuous mode [ 37.864476][ T29] audit: type=1400 audit(1749130752.580:87): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.866133][ T29] audit: type=1400 audit(1749130752.620:88): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.911540][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.912332][ T29] audit: type=1400 audit(1749130752.620:89): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=3070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.930509][ T3316] veth0_macvtap: entered promiscuous mode [ 37.948721][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.962470][ T3321] veth0_macvtap: entered promiscuous mode [ 37.971157][ T3321] veth1_macvtap: entered promiscuous mode [ 37.982262][ T3317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.991075][ T3317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.000149][ T3317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.004070][ T29] audit: type=1400 audit(1749130752.900:90): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.008965][ T3317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.045967][ T3316] veth1_macvtap: entered promiscuous mode [ 38.057520][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.067330][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.086769][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.095619][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.104505][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.113211][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.121983][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.133295][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.143724][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.158214][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.167604][ T3321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.176510][ T3321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.185303][ T3321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.194036][ T3321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.211799][ T3324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.220634][ T3324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.229478][ T3324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.238300][ T3324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.273207][ C0] hrtimer: interrupt took 35387 ns [ 38.413434][ T3472] capability: warning: `syz.3.7' uses deprecated v2 capabilities in a way that may be insecure [ 38.515855][ T3480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.556466][ T3483] loop1: detected capacity change from 0 to 1024 [ 38.562966][ T3486] loop3: detected capacity change from 0 to 128 [ 38.579058][ T3486] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.588899][ T3483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.627339][ T3480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.650915][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.660338][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.759005][ T3504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18'. [ 38.988844][ T3517] loop4: detected capacity change from 0 to 1024 [ 39.021409][ T3517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.045079][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 39.051170][ T3517] ALSA: seq fatal error: cannot create timer (-19) [ 39.053829][ T3522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24'. [ 39.123465][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.182824][ T3535] Zero length message leads to an empty skb [ 39.376840][ T3481] delete_channel: no stack [ 39.383349][ T3546] x_tables: duplicate underflow at hook 4 [ 39.492010][ T3560] loop0: detected capacity change from 0 to 512 [ 39.500312][ T3560] ======================================================= [ 39.500312][ T3560] WARNING: The mand mount option has been deprecated and [ 39.500312][ T3560] and is ignored by this kernel. Remove the mand [ 39.500312][ T3560] option from the mount to silence this warning. [ 39.500312][ T3560] ======================================================= [ 39.546251][ T3560] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.553378][ T3560] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.35: bg 0: block 248: padding at end of block bitmap is not set [ 39.595817][ T3560] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.35: Failed to acquire dquot type 1 [ 39.605742][ T3563] lo speed is unknown, defaulting to 1000 [ 39.608539][ T3560] EXT4-fs (loop0): 1 truncate cleaned up [ 39.612736][ T3563] lo speed is unknown, defaulting to 1000 [ 39.629318][ T3565] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36'. [ 39.638387][ T3565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36'. [ 39.647365][ T3565] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36'. [ 39.660785][ T3563] lo speed is unknown, defaulting to 1000 [ 39.667779][ T3565] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36'. [ 39.679496][ T3560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.693416][ T3563] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.712954][ T3563] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 39.738908][ T3480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.773867][ T3563] lo speed is unknown, defaulting to 1000 [ 39.796782][ T3563] lo speed is unknown, defaulting to 1000 [ 39.803000][ T3563] lo speed is unknown, defaulting to 1000 [ 39.817200][ T3560] tmpfs: Unknown parameter 'noquota' [ 39.826116][ T3571] netlink: 76 bytes leftover after parsing attributes in process `syz.3.38'. [ 39.833091][ T3560] syz.0.35 (3560) used greatest stack depth: 9496 bytes left [ 39.838109][ T3571] random: crng reseeded on system resumption [ 39.843198][ T3563] lo speed is unknown, defaulting to 1000 [ 39.855271][ T3563] lo speed is unknown, defaulting to 1000 [ 39.856189][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.966413][ T3576] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 40.034728][ T3576] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 40.416657][ T3480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.471627][ T3594] loop1: detected capacity change from 0 to 512 [ 40.478100][ T3592] usb usb9: check_ctrlrecip: process 3592 (syz.4.48) requesting ep 01 but needs 81 [ 40.487488][ T3592] usb usb9: usbfs: process 3592 (syz.4.48) did not claim interface 0 before use [ 40.568713][ T3594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.601144][ T3594] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.641481][ T3594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.49'. [ 40.691132][ T3594] netem: change failed [ 40.709203][ T3602] tipc: Started in network mode [ 40.714219][ T3602] tipc: Node identity 0aeb0a0ccdde, cluster identity 4711 [ 40.721767][ T3602] tipc: Enabled bearer , priority 0 [ 40.754325][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.770414][ T3602] syzkaller0: MTU too low for tipc bearer [ 40.776305][ T3602] tipc: Disabling bearer [ 40.813730][ T3480] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.829675][ T3480] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.850330][ T3480] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.888729][ T3480] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.934908][ T3608] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 40.961298][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 41.990569][ T3646] loop3: detected capacity change from 0 to 512 [ 42.095052][ T3636] loop2: detected capacity change from 0 to 512 [ 42.151091][ T3646] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.59: casefold flag without casefold feature [ 42.172190][ T3646] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.59: couldn't read orphan inode 15 (err -117) [ 42.185631][ T3646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.351372][ T3648] tipc: Started in network mode [ 42.356355][ T3648] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 42.470476][ T3648] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 42.479000][ T3648] tipc: Enabled bearer , priority 10 [ 43.018642][ T3662] bridge_slave_0: left allmulticast mode [ 43.024377][ T3662] bridge_slave_0: left promiscuous mode [ 43.030079][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.053237][ T3668] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 43.054697][ T3662] bridge_slave_1: left allmulticast mode [ 43.066619][ T3662] bridge_slave_1: left promiscuous mode [ 43.072249][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.100155][ T3662] bond0: (slave bond_slave_0): Releasing backup interface [ 43.110991][ T3662] bond0: (slave bond_slave_1): Releasing backup interface [ 43.148102][ T3662] team0: Port device team_slave_0 removed [ 43.187866][ T3662] team0: Port device team_slave_1 removed [ 43.219370][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.226872][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.248437][ T3670] loop1: detected capacity change from 0 to 128 [ 43.270052][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 43.270067][ T29] audit: type=1400 audit(1749130758.170:289): avc: denied { ioctl } for pid=3669 comm="syz.1.74" path="socket:[5609]" dev="sockfs" ino=5609 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.316865][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.324662][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.375061][ T3663] pim6reg1: entered promiscuous mode [ 43.380532][ T3663] pim6reg1: entered allmulticast mode [ 43.495798][ T29] audit: type=1400 audit(1749130758.400:290): avc: denied { write } for pid=3669 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.519511][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.584125][ T3668] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 43.593826][ T3396] tipc: Node number set to 1 [ 43.692203][ T29] audit: type=1400 audit(1749130758.590:291): avc: denied { append } for pid=3678 comm="syz.0.76" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.027469][ T29] audit: type=1326 audit(1749130758.930:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 44.050947][ T29] audit: type=1326 audit(1749130758.930:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 44.078384][ T3700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 44.089629][ T29] audit: type=1326 audit(1749130758.980:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 44.112915][ T29] audit: type=1326 audit(1749130758.980:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 44.136264][ T29] audit: type=1326 audit(1749130758.980:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 44.159569][ T29] audit: type=1326 audit(1749130758.980:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f729b5dd290 code=0x7ffc0000 [ 44.182818][ T29] audit: type=1326 audit(1749130758.980:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f729b5e0157 code=0x7ffc0000 [ 44.516397][ T3718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 44.525365][ T3718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 44.623237][ T3720] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 44.705316][ T3723] vlan2: entered allmulticast mode [ 44.710579][ T3723] veth1: entered allmulticast mode [ 44.777551][ T3725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.794816][ T3725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.109988][ T3742] $Hÿ: renamed from bond0 (while UP) [ 45.129590][ T3742] $Hÿ: entered promiscuous mode [ 45.134759][ T3742] bond_slave_0: entered promiscuous mode [ 45.140755][ T3742] bond_slave_1: entered promiscuous mode [ 45.355024][ T3754] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.481809][ T3714] syz.3.90 (3714) used greatest stack depth: 6528 bytes left [ 45.857193][ T3784] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 45.901705][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 45.910661][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 45.928451][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 46.597282][ T3810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 46.606895][ T3810] hsr_slave_0: left promiscuous mode [ 46.612826][ T3810] hsr_slave_1: left promiscuous mode [ 46.733866][ T3813] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 46.941603][ T3821] : renamed from bond0 (while UP) [ 46.990914][ T3825] loop3: detected capacity change from 0 to 1024 [ 46.998097][ T3825] ext4: Unknown parameter 'nouser_xattr' [ 47.368020][ T3834] syzkaller0: entered promiscuous mode [ 47.373594][ T3834] syzkaller0: entered allmulticast mode [ 47.690179][ T3858] loop1: detected capacity change from 0 to 128 [ 47.746791][ T3858] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.759600][ T3858] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.167370][ T3870] loop3: detected capacity change from 0 to 512 [ 48.233474][ T3870] EXT4-fs: Ignoring removed bh option [ 48.239047][ T3870] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.291162][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 48.291231][ T29] audit: type=1400 audit(2000000001.810:441): avc: denied { setopt } for pid=3873 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.372344][ T3870] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.385825][ T3870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.656470][ T29] audit: type=1400 audit(2000000002.190:442): avc: denied { write } for pid=3879 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.675869][ T29] audit: type=1400 audit(2000000002.190:443): avc: denied { name_connect } for pid=3879 comm="syz.2.149" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 48.703078][ T3870] EXT4-fs (loop3): 1 truncate cleaned up [ 48.709719][ T3870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.785730][ T3889] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 48.785730][ T3889] program syz.2.153 not setting count and/or reply_len properly [ 48.825549][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.855932][ T29] audit: type=1400 audit(2000000002.310:444): avc: denied { write open } for pid=3869 comm="syz.3.146" path="/33/file2/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.878876][ T29] audit: type=1400 audit(2000000002.310:445): avc: denied { ioctl } for pid=3869 comm="syz.3.146" path="socket:[4868]" dev="sockfs" ino=4868 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.903930][ T29] audit: type=1400 audit(2000000002.330:446): avc: denied { bind } for pid=3888 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.953061][ T3893] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 49.097758][ T3896] lo speed is unknown, defaulting to 1000 [ 49.172354][ T3902] loop0: detected capacity change from 0 to 1024 [ 49.206429][ T3902] EXT4-fs: Ignoring removed oldalloc option [ 49.218648][ T3902] EXT4-fs: Ignoring removed orlov option [ 49.236177][ T3902] EXT4-fs (loop0): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 49.293179][ T3902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.315676][ T29] audit: type=1400 audit(2000000002.860:447): avc: denied { getopt } for pid=3906 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.356043][ T3907] lo speed is unknown, defaulting to 1000 [ 49.398816][ T29] audit: type=1400 audit(2000000002.890:448): avc: denied { read } for pid=3901 comm="syz.0.158" path="/38/file2/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.432184][ T3908] syz.2.159 uses obsolete (PF_INET,SOCK_PACKET) [ 49.434068][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.514878][ T29] audit: type=1400 audit(2000000003.060:449): avc: denied { create } for pid=3914 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.543447][ T3915] netlink: 'syz.1.160': attribute type 21 has an invalid length. [ 49.551306][ T3915] IPv6: NLM_F_CREATE should be specified when creating new route [ 49.693935][ T29] audit: type=1400 audit(2000000003.240:450): avc: denied { create } for pid=3927 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.225948][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.502930][ T3944] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 50.510724][ T3944] netlink: 'syz.3.172': attribute type 4 has an invalid length. [ 50.518508][ T3944] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.172'. [ 50.533614][ T3944] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 50.541441][ T3944] netlink: 'syz.3.172': attribute type 4 has an invalid length. [ 50.549223][ T3944] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.172'. [ 50.701690][ T3954] batman_adv: batadv0: Adding interface: ip6gretap1 [ 50.708385][ T3954] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.734278][ T3954] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 51.299521][ T3966] lo speed is unknown, defaulting to 1000 [ 51.610868][ T3974] loop4: detected capacity change from 0 to 1024 [ 51.634212][ T3974] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.664200][ T3974] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 51.739723][ T3962] lo speed is unknown, defaulting to 1000 [ 51.921958][ T3990] pim6reg1: entered promiscuous mode [ 51.927353][ T3990] pim6reg1: entered allmulticast mode [ 51.944760][ T3996] netlink: 'syz.4.191': attribute type 4 has an invalid length. [ 51.944806][ T3964] lo speed is unknown, defaulting to 1000 [ 51.990636][ T3392] lo speed is unknown, defaulting to 1000 [ 51.996570][ T3392] syz0: Port: 1 Link DOWN [ 52.055519][ T4000] bond0: (slave bridge0): Releasing backup interface [ 52.082707][ T4007] loop4: detected capacity change from 0 to 512 [ 52.090895][ T4007] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.099502][ T4004] team0: No ports can be present during mode change [ 52.120694][ T4007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.138861][ T4007] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.167048][ T4013] loop1: detected capacity change from 0 to 1024 [ 52.190744][ T4002] pim6reg1: entered promiscuous mode [ 52.196132][ T4002] pim6reg1: entered allmulticast mode [ 52.203521][ T4013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.310736][ T4017] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.421659][ T4017] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.447535][ T4023] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.528797][ T4017] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.543511][ T4023] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 52.567074][ T4023] batman_adv: batadv0: Adding interface: ip6gretap1 [ 52.573917][ T4023] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.600811][ T4023] batman_adv: batadv0: Interface activated: ip6gretap1 [ 52.657431][ T4017] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.676579][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.786413][ T4017] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.815995][ T4017] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.828901][ T4017] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.848291][ T4017] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.862317][ T4031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.928765][ T4034] netlink: 'syz.4.204': attribute type 10 has an invalid length. [ 52.936754][ T4034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.204'. [ 52.962929][ T4031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.026381][ T4034] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 53.061210][ T4034] team0: Failed to send options change via netlink (err -105) [ 53.068820][ T4034] team0: Port device geneve1 added [ 53.139470][ T4031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.152479][ T4039] loop3: detected capacity change from 0 to 2048 [ 53.204582][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.213145][ T4036] lo speed is unknown, defaulting to 1000 [ 53.237132][ T4031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.251002][ T4047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 53.260775][ T4039] loop3: p1 < > p4 [ 53.266190][ T4039] loop3: p4 size 8388608 extends beyond EOD, truncated [ 53.300869][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 53.300898][ T29] audit: type=1400 audit(2000000006.840:513): avc: denied { bind } for pid=4048 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.326326][ T29] audit: type=1400 audit(2000000006.840:514): avc: denied { name_bind } for pid=4048 comm="syz.2.212" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 53.347975][ T29] audit: type=1400 audit(2000000006.840:515): avc: denied { node_bind } for pid=4048 comm="syz.2.212" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 53.378566][ T29] audit: type=1400 audit(2000000006.920:516): avc: denied { name_connect } for pid=4048 comm="syz.2.212" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 53.415048][ T29] audit: type=1400 audit(2000000006.920:517): avc: denied { shutdown } for pid=4048 comm="syz.2.212" laddr=::1 lport=51226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.440655][ T4054] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.213'. [ 53.488040][ T4031] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.509082][ T4031] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.519100][ T4052] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 53.538037][ T3006] loop3: p1 < > p4 [ 53.548227][ T4031] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.566038][ T3006] loop3: p4 size 8388608 extends beyond EOD, truncated [ 53.577755][ T29] audit: type=1400 audit(2000000007.110:518): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.605499][ T4031] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.636493][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.647645][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 53.677530][ T29] audit: type=1400 audit(2000000007.220:519): avc: denied { connect } for pid=4057 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 53.711694][ T29] audit: type=1400 audit(2000000007.240:520): avc: denied { write } for pid=4057 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.759484][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 53.768439][ T4062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.218'. [ 53.805017][ T4066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.219'. [ 53.819570][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 53.824860][ T4066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.219'. [ 53.842001][ T4070] process 'syz.2.221' launched './file1' with NULL argv: empty string added [ 53.853526][ T29] audit: type=1400 audit(2000000007.390:521): avc: denied { execute_no_trans } for pid=4069 comm="syz.2.221" path="/32/file1" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.854235][ T4070] IPv6: sit1: Disabled Multicast RS [ 53.883118][ T4070] sit1: entered allmulticast mode [ 53.952812][ T4075] loop3: detected capacity change from 0 to 512 [ 53.999008][ T4076] loop4: detected capacity change from 0 to 2048 [ 54.022839][ T4075] EXT4-fs (loop3): 1 orphan inode deleted [ 54.035111][ T37] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 54.045038][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 54.064238][ T4075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.104925][ T3526] Alternate GPT is invalid, using primary GPT. [ 54.111264][ T3526] loop4: p1 p2 p3 [ 54.113990][ T4075] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.153783][ T4076] Alternate GPT is invalid, using primary GPT. [ 54.160143][ T4076] loop4: p1 p2 p3 [ 54.174556][ T4075] random: crng reseeded on system resumption [ 54.209601][ T3006] Alternate GPT is invalid, using primary GPT. [ 54.216125][ T3006] loop4: p1 p2 p3 [ 54.270617][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 54.281809][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 54.299333][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 54.363101][ T4090] vlan2: entered allmulticast mode [ 54.369661][ T4090] bond0: entered allmulticast mode [ 54.371501][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 54.376071][ T4090] bond_slave_0: entered allmulticast mode [ 54.393191][ T4090] bond_slave_1: entered allmulticast mode [ 54.400331][ T4090] gretap1: entered allmulticast mode [ 54.410894][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 54.415058][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 54.641291][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 54.641316][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 54.795860][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.930277][ T4102] loop0: detected capacity change from 0 to 1024 [ 54.980541][ T4102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.001348][ T4102] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.013482][ T4108] loop4: detected capacity change from 0 to 1024 [ 55.104262][ T4108] EXT4-fs: Ignoring removed nobh option [ 55.176261][ T4108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.682236][ T4121] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 55.775751][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.874691][ T4135] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 55.909408][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.970923][ T4141] loop1: detected capacity change from 0 to 512 [ 56.167742][ T4149] pim6reg1: entered promiscuous mode [ 56.174202][ T4149] pim6reg1: entered allmulticast mode [ 56.544885][ T4154] syzkaller0: entered promiscuous mode [ 56.550505][ T4154] syzkaller0: entered allmulticast mode [ 56.708673][ T4159] __nla_validate_parse: 2 callbacks suppressed [ 56.708686][ T4159] netlink: 268 bytes leftover after parsing attributes in process `syz.1.251'. [ 56.708874][ T4159] unsupported nla_type 65024 [ 57.272733][ T4172] loop3: detected capacity change from 0 to 512 [ 57.307833][ T4174] loop1: detected capacity change from 0 to 1024 [ 57.319095][ T4172] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.324485][ T4174] EXT4-fs: Ignoring removed nobh option [ 57.334701][ T4174] EXT4-fs: Ignoring removed bh option [ 57.363673][ T4172] EXT4-fs (loop3): 1 truncate cleaned up [ 57.391636][ T4172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.415526][ T4174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.429699][ T4184] loop2: detected capacity change from 0 to 128 [ 57.495522][ T4184] syz.2.261: attempt to access beyond end of device [ 57.495522][ T4184] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 57.539789][ T37] kworker/u8:2: attempt to access beyond end of device [ 57.539789][ T37] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 57.600393][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.979529][ T4201] netlink: 'syz.0.267': attribute type 4 has an invalid length. [ 58.006203][ T4201] netlink: 'syz.0.267': attribute type 4 has an invalid length. [ 58.247197][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.282570][ T4208] loop1: detected capacity change from 0 to 512 [ 58.306697][ T4208] EXT4-fs (loop1): 1 orphan inode deleted [ 58.318403][ T4208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.331160][ T12] __quota_error: 26 callbacks suppressed [ 58.331176][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.333950][ T4208] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.336872][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 58.584859][ T4218] loop2: detected capacity change from 0 to 512 [ 58.644970][ T4218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.657630][ T4218] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.737234][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.824254][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.855834][ T29] audit: type=1326 audit(2000000012.400:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85c7e929 code=0x7ffc0000 [ 58.880695][ T29] audit: type=1326 audit(2000000012.420:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7faf85c7e929 code=0x7ffc0000 [ 58.904162][ T29] audit: type=1326 audit(2000000012.420:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85c7e929 code=0x7ffc0000 [ 58.927419][ T29] audit: type=1326 audit(2000000012.420:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85c7e929 code=0x7ffc0000 [ 58.951236][ T29] audit: type=1326 audit(2000000012.420:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7faf85c7e929 code=0x7ffc0000 [ 58.974642][ T29] audit: type=1326 audit(2000000012.450:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf85cb11e5 code=0x7ffc0000 [ 58.997912][ T29] audit: type=1326 audit(2000000012.450:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85c7e929 code=0x7ffc0000 [ 59.021299][ T29] audit: type=1326 audit(2000000012.450:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf85c7e929 code=0x7ffc0000 [ 59.044606][ T29] audit: type=1326 audit(2000000012.470:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf85c7e929 code=0x7ffc0000 [ 59.418854][ T4248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.282'. [ 59.427985][ T4248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.282'. [ 59.436899][ T4248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.282'. [ 59.446230][ T4248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.282'. [ 59.496325][ T4251] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.551220][ T4252] syzkaller0: entered promiscuous mode [ 59.556965][ T4252] syzkaller0: entered allmulticast mode [ 59.575382][ T4251] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.600555][ T4260] netlink: 192 bytes leftover after parsing attributes in process `syz.3.287'. [ 59.617388][ T4261] loop0: detected capacity change from 0 to 1024 [ 59.626152][ T4261] ext4: Unknown parameter 'nouser_xattr' [ 59.642460][ T4251] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.716719][ T4251] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.740080][ T4268] vlan2: entered allmulticast mode [ 59.809313][ T4251] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.841547][ T4251] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.856597][ T4281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 59.860174][ T4251] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.880333][ T4251] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.024102][ T4291] hub 9-0:1.0: USB hub found [ 60.028839][ T4291] hub 9-0:1.0: 8 ports detected [ 60.111163][ T4297] netlink: 'syz.4.301': attribute type 10 has an invalid length. [ 60.212013][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 60.229009][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 60.245491][ T4297] team0 (unregistering): Port device geneve1 removed [ 60.490226][ T4299] tipc: Started in network mode [ 60.495254][ T4299] tipc: Node identity 824617ae4b89, cluster identity 4711 [ 60.502463][ T4299] tipc: Enabled bearer , priority 0 [ 60.674811][ T4301] syzkaller0: entered promiscuous mode [ 60.681611][ T4301] syzkaller0: entered allmulticast mode [ 60.696683][ T4298] tipc: Resetting bearer [ 60.753870][ T4298] tipc: Disabling bearer [ 60.893690][ T4320] loop2: detected capacity change from 0 to 512 [ 60.913175][ T4322] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.951103][ T4320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.987238][ T4322] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.998786][ T4320] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.037280][ T4320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.311'. [ 61.060456][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.075056][ T4322] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.135771][ T4322] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.208490][ T4322] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.224741][ T4337] loop2: detected capacity change from 0 to 1024 [ 61.233029][ T4337] ext4: Unknown parameter 'nouser_xattr' [ 61.250038][ T4322] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.262034][ T4322] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.273436][ T4322] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.320071][ T4343] loop3: detected capacity change from 0 to 512 [ 61.337066][ T4343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.363871][ T4343] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.408910][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 61.742262][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.780961][ T4364] loop1: detected capacity change from 0 to 512 [ 61.835642][ T4364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.849362][ T4364] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.008938][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.025335][ T4373] loop3: detected capacity change from 0 to 512 [ 62.035223][ T4373] EXT4-fs: Ignoring removed nobh option [ 62.068900][ T4373] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.325: iget: bad i_size value: 38620345925642 [ 62.083191][ T4373] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.325: couldn't read orphan inode 15 (err -117) [ 62.095673][ T4373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.296132][ T4383] loop0: detected capacity change from 0 to 1024 [ 62.308429][ T4383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.403825][ T4327] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 62.421569][ T4381] lo speed is unknown, defaulting to 1000 [ 62.492769][ T4385] lo speed is unknown, defaulting to 1000 [ 62.628672][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.881293][ T4392] loop4: detected capacity change from 0 to 512 [ 62.926836][ T4392] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.956384][ T4392] EXT4-fs (loop4): 1 truncate cleaned up [ 62.963706][ T4392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.003725][ T4396] loop1: detected capacity change from 0 to 1024 [ 63.012717][ T4396] ext4: Unknown parameter 'nouser_xattr' [ 63.103593][ T4402] hub 9-0:1.0: USB hub found [ 63.108608][ T4402] hub 9-0:1.0: 8 ports detected [ 63.182002][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.205516][ T4406] netlink: 'syz.1.336': attribute type 1 has an invalid length. [ 63.253188][ T4406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 63.269681][ T4406] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 63.278413][ T4406] bond0: (slave batadv1): Enslaving as a backup interface with an up link [ 63.294299][ T4406] bond0 (unregistering): (slave batadv1): Releasing backup interface [ 63.310859][ T4406] bond0 (unregistering): Released all slaves [ 63.334059][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.434087][ T4419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.342'. [ 63.443049][ T4419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.342'. [ 63.452028][ T4419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.342'. [ 63.460920][ T4419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.342'. [ 63.929702][ T4423] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 63.948741][ T4423] team0 (unregistering): Port device team_slave_0 removed [ 63.957950][ T4423] team0 (unregistering): Port device team_slave_1 removed [ 64.027987][ T4422] lo speed is unknown, defaulting to 1000 [ 64.037767][ T4426] lo speed is unknown, defaulting to 1000 [ 64.057135][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 64.057153][ T29] audit: type=1326 audit(2000000017.600:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 64.086945][ T29] audit: type=1326 audit(2000000017.600:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 64.110222][ T29] audit: type=1326 audit(2000000017.600:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 64.133645][ T29] audit: type=1326 audit(2000000017.600:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 64.157069][ T29] audit: type=1326 audit(2000000017.600:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 64.180378][ T29] audit: type=1326 audit(2000000017.600:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 64.203653][ T29] audit: type=1326 audit(2000000017.600:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 64.227020][ T29] audit: type=1326 audit(2000000017.600:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 64.250246][ T29] audit: type=1326 audit(2000000017.600:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 64.273526][ T29] audit: type=1326 audit(2000000017.600:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.0.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f729b5de929 code=0x7ffc0000 [ 64.565804][ T4440] hub 9-0:1.0: USB hub found [ 64.574018][ T4440] hub 9-0:1.0: 8 ports detected [ 64.581776][ T4443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.669035][ T4443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.685236][ T4446] tipc: Enabled bearer , priority 0 [ 64.692749][ T4445] tipc: Resetting bearer [ 64.702445][ T4451] siw: device registration error -23 [ 64.708512][ T4445] tipc: Disabling bearer [ 64.728874][ T4443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.730034][ T4453] loop2: detected capacity change from 0 to 1024 [ 64.750316][ T4453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.817457][ T4443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.902694][ T4443] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.916499][ T4443] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.931878][ T4443] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.326238][ T4443] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.373377][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'. [ 65.477653][ T4471] loop1: detected capacity change from 0 to 128 [ 65.497412][ T4468] loop4: detected capacity change from 0 to 8192 [ 65.547827][ T4471] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.624022][ T4471] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.745030][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.795012][ T4485] vlan0: entered allmulticast mode [ 65.936845][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.952638][ T4488] loop4: detected capacity change from 0 to 512 [ 66.014509][ T4488] EXT4-fs: Ignoring removed i_version option [ 66.021642][ T4488] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.085217][ T4488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.110326][ T4488] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 66.219498][ T4509] loop0: detected capacity change from 0 to 512 [ 66.282362][ T4509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.301063][ T4509] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.321615][ T4488] loop4: detected capacity change from 0 to 1024 [ 66.369984][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.407906][ T4488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.483913][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.794736][ T4533] syzkaller0: entered promiscuous mode [ 66.800335][ T4533] syzkaller0: entered allmulticast mode [ 67.048566][ T4551] syzkaller0: entered promiscuous mode [ 67.054166][ T4551] syzkaller0: entered allmulticast mode [ 67.116664][ T4569] loop3: detected capacity change from 0 to 128 [ 67.225256][ T4580] loop0: detected capacity change from 0 to 512 [ 67.238019][ T4569] syz.3.386: attempt to access beyond end of device [ 67.238019][ T4569] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 67.273414][ T4580] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 67.282551][ T4580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.331154][ T383] kworker/u8:5: attempt to access beyond end of device [ 67.331154][ T383] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 67.350407][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.404719][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 67.414305][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 67.627055][ T4609] syzkaller0: entered promiscuous mode [ 67.632598][ T4609] syzkaller0: entered allmulticast mode [ 67.736021][ T4634] loop2: detected capacity change from 0 to 128 [ 67.751386][ T4634] EXT4-fs: Ignoring removed nobh option [ 67.760690][ T4634] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.773575][ T4639] loop0: detected capacity change from 0 to 512 [ 67.806202][ T4634] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.836170][ T4639] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.403: bad orphan inode 11862016 [ 67.848117][ T4639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 67.862050][ T4639] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.877953][ T4639] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 67.907878][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 67.922650][ T4655] loop3: detected capacity change from 0 to 1024 [ 67.951031][ T4655] EXT4-fs: Ignoring removed i_version option [ 67.968437][ T4655] EXT4-fs: Ignoring removed nobh option [ 67.976327][ T4655] EXT4-fs: Mount option(s) incompatible with ext2 [ 67.987179][ T4660] loop0: detected capacity change from 0 to 128 [ 68.046104][ T4655] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 68.072645][ T3525] ================================================================== [ 68.080790][ T3525] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 68.087786][ T3525] [ 68.090120][ T3525] write to 0xffff8881035026bc of 4 bytes by task 3502 on cpu 1: [ 68.097755][ T3525] shmem_mknod+0x137/0x180 [ 68.102186][ T3525] shmem_create+0x34/0x50 [ 68.106527][ T3525] path_openat+0x1102/0x2170 [ 68.111136][ T3525] do_filp_open+0x109/0x230 [ 68.115658][ T3525] do_sys_openat2+0xa6/0x110 [ 68.120351][ T3525] __x64_sys_openat+0xf2/0x120 [ 68.125142][ T3525] x64_sys_call+0x1af/0x2fb0 [ 68.129739][ T3525] do_syscall_64+0xd2/0x200 [ 68.134260][ T3525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.140159][ T3525] [ 68.142488][ T3525] read to 0xffff8881035026bc of 4 bytes by task 3525 on cpu 0: [ 68.150033][ T3525] fill_mg_cmtime+0x5b/0x260 [ 68.154637][ T3525] generic_fillattr+0x24a/0x340 [ 68.159514][ T3525] shmem_getattr+0x181/0x200 [ 68.164114][ T3525] vfs_getattr_nosec+0x143/0x1e0 [ 68.169063][ T3525] vfs_statx+0x113/0x390 [ 68.173317][ T3525] vfs_fstatat+0x115/0x170 [ 68.177745][ T3525] __se_sys_newfstatat+0x55/0x260 [ 68.182785][ T3525] __x64_sys_newfstatat+0x55/0x70 [ 68.187822][ T3525] x64_sys_call+0x2c22/0x2fb0 [ 68.192505][ T3525] do_syscall_64+0xd2/0x200 [ 68.197020][ T3525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.202935][ T3525] [ 68.205262][ T3525] value changed: 0x2509e328 -> 0x251103ab [ 68.210991][ T3525] [ 68.213316][ T3525] Reported by Kernel Concurrency Sanitizer on: [ 68.219499][ T3525] CPU: 0 UID: 0 PID: 3525 Comm: udevd Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(voluntary) [ 68.231137][ T3525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.241311][ T3525] ================================================================== [ 68.277621][ T4660] syz.0.404: attempt to access beyond end of device [ 68.277621][ T4660] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 68.316769][ T383] kworker/u8:5: attempt to access beyond end of device [ 68.316769][ T383] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 68.576009][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.