last executing test programs: 2.327324187s ago: executing program 2 (id=110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf090000000000005509010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kfree\x00', r1}, 0x37) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 2.08377372s ago: executing program 2 (id=114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r6, 0x5) accept4(r6, 0x0, 0x0, 0x80800) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x20042, 0x5}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 2.005352078s ago: executing program 2 (id=118): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x0, 0x0) recvmmsg(r2, &(0x7f0000001340)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000001c0)}, {&(0x7f00000004c0)=""/7, 0x7}, {&(0x7f0000000580)=""/104, 0x68}, {&(0x7f0000000600)=""/126, 0x7e}, {&(0x7f0000000680)=""/157, 0x9d}, {&(0x7f00000013c0)=""/206, 0xce}, {&(0x7f0000000a40)=""/237, 0xed}, {&(0x7f0000000b40)=""/191, 0xbf}, {&(0x7f0000000500)=""/51, 0x33}, {&(0x7f0000000c00)=""/87, 0x57}], 0xa, &(0x7f0000000d40)=""/98, 0x62}, 0x6}, {{&(0x7f0000000dc0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e40)=""/243, 0xf3}, {&(0x7f0000000f40)=""/174, 0xae}, {&(0x7f0000001000)=""/247, 0xf7}, {&(0x7f0000001100)=""/115, 0x73}, {&(0x7f0000001180)=""/122, 0x7a}], 0x5, &(0x7f0000001280)=""/192, 0xc0}, 0x4816}], 0x2, 0x2, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = socket(0x11, 0xa, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0xe017be01}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000240)={0x0, 0x3000000}) 1.77782942s ago: executing program 0 (id=120): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440), 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000180)='7', 0x1}], 0x1) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000100)=@abs, 0x6e) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x138) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) connect$can_j1939(r6, &(0x7f0000000180)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0xff}, 0x18) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "6a26ccb7622a98cf58ac0f295fe0111d66706c62b9564ce0", "29fe1df5c401b77c31f2e9c517c0757aeb191e3b958a9b85564c45be3271886e"}}}}}}, 0x0) sendfile(r6, r6, 0x0, 0x7a680000) 1.678814469s ago: executing program 0 (id=121): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 1.642971462s ago: executing program 0 (id=122): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB="0031ab00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000400000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth0_to_bridge\x00'}}, 0x1e) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xac}, 'veth0_vlan\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) wait4(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c726c6580000000000000002f4e00"]) 1.595946887s ago: executing program 0 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x69, 0x1, 0xffffff80, 0x10, {{0xe, 0x4, 0x3, 0x28, 0x38, 0x68, 0x0, 0xa, 0x2f, 0x0, @private=0xa010101, @empty, {[@lsrr={0x83, 0xb, 0x75, [@local, @local]}, @lsrr={0x83, 0x13, 0x7f, [@broadcast, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x3, 0x76}, @end]}}}}}) 1.164115379s ago: executing program 1 (id=128): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="85", 0x1}], 0x1, 0x0, 0x0, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xf00, 0x0}, &(0x7f0000000180)=0x10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000340)={@nfc_llcp={0x27, r6, 0x2, 0x4, 0x8e, 0x8, "9508c654e986150061daf62cea6d06000000f381cce0f77611d0a8b1aafca7987cf78c45a059ee1432ee12b6bf003d4e8852eb9c715fdf0194afd2873c00", 0x15}, {0x0}, 0x0, 0x20}, 0xa0) r10 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r10, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0xa0600, 0x0, 0x0) connect$unix(r10, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x1) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 1.163574628s ago: executing program 3 (id=129): r0 = io_uring_setup(0x3dd3, &(0x7f0000001100)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) 1.155082959s ago: executing program 3 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x18}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.105955844s ago: executing program 2 (id=132): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 1.084437876s ago: executing program 2 (id=133): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="34f84ad6d3910a5f03886a99d20dcc60240d9cf4be2fb5ba010f55212db11a9431935f4264bb96f5b3867b6fe5"]) 1.063621198s ago: executing program 2 (id=134): capset(0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x60200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x1000) 1.057292349s ago: executing program 3 (id=136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) dup2(r1, r2) 1.008839044s ago: executing program 4 (id=138): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000000000957b72fb9900010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x124, &(0x7f0000000940)={@broadcast, @broadcast, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x10e, 0x66, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xfa, 0x0, @wg=@data={0x4, 0xe546, 0x2, "ed0393a575b79ff9ed59188eec26c778c4f0995429967add63ba6e362ca571162167b9f046fbeae79acba9583c20193617660370d1295fe2af0c01f2e552b626913a1776988d24fd03bf5aea3e606f4f2e91328f00a9676945fe5354bd1a01febcbb58af7d7f0a0bf90e6191dfe789b9e22a27318ee1d7c3ee9a1b5cc71d3d362f630a348ab256157bf8de6609df99e822d8cafd1610611c86763157b0e3a7369ec59d279abbc04747af9baf26d33978926f0b97336543f96c017e115c4bd56a3c88fd89d7b4c07c4712c8c59517822ca028b7ba6fc383df3670d4b253afa522c197"}}}}}}, 0x0) 1.008083634s ago: executing program 3 (id=139): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005000000000000", @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1.007541304s ago: executing program 4 (id=140): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) pause() recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000000b00)={0xa, 0x4e1e, 0x0, @mcast1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000b40)="f0dedb1f7bba2a474fa521a0da0ed37bc80c9b36f4ba7704bf950d7530551ebe3a0f7c5b220e53765f42d61fb3f60719f74839569e35b700257657363ce937820fc49394a5b1a6c9c20f36d7fc2b0fe134e358d528acd225991960d0259d843b7a2548e2", 0x64}, {&(0x7f0000000bc0)="00b5ce92cbe7dbc701884458519e3d6ee9a5478a8047f99ca233465bf0c288fc7b79c58949e467fd1e8b979d5d5732cc35321485b4cd12b1f61e8a59facb2bd0b434860c27c06fb49253e8d8396ceae231ae59f022f255fa85e85c74b3f37cf7cd773ecd8565528f088332e60550155bf579daba9b6235f985c4711722e3c94a2a0b793b3426c78189024d4b14dee3af56b9eeeb50cd98d9a2d74f4f93cfac8f47ff", 0xa2}, {&(0x7f0000003500)="45877bc8ce95b94b1e2ccbea8be9ad174bceabc0ea75948b16a06e2ceece70c53b65baad3684de9afdf2941010c941397224f38eeb810ea1190d08e20a76f5e483512fb6cc2f69c1963ab1c267b7015389a8c7866d6670f6e38f0fbe4c2a16e679ceb7a526e6644965c34809673f093f36bc5e677015bf43f05c67e07a58e19e93bdfd1534d67480beb5c44075dedcba9036a2611f385cd90ad49d3566b5e7c56c55c5a9dd340fdd3ebdf8ef35f054014a3ccb34ea3d1ee6d08136d6f060e7a8aa73ccc7a5ca4c6bd6b8645b68b2edcea019e38acdc9373c19ae78d362b7fa73563ea76636610d40117e34edab21b1d4444b4cd81a3d4ee21f333c81128026f10b7d243bc362a82b6c4c79a8d5c56e1dd090e9c602d347a1b300c52b4dda2a019b332821eb6373cc27cadc7aca89b18c9e7d91ccedf4082f3f7630d8376452f5710aeda9b439a3b484699dc1b90bdb69fd4db62094a74fe47bc08101688957dc615d249092099d64b05a93ce535a9f463b978df1b4a2418757b939a74c3d5fbc363ed556b0a96c5d78a75d8d57d18f1e88ca400ddac86b1932647f8750acb5d9e69f18d744780d8485ddf9374ec7850c62f1903fce2617bc42e038adbec8bc3cdd123d5379438ebd243e6adb1d7ae02ea24616ff0d00bb0ef3d234de20f1fbd1359d386f216a268f6ee6e3abe7e76cd7850735c6f18f5bd86be1326874b7497144f8deaec1f276bbcd0164eada03a3184706030c22f7f8f4a7641af0e6a24bd36f60996cf9e9d898b60ef53e0608768c3795b8ed9302865776b3f4e7f3372ed754200694193908e712eecdeac722b4208e4aadc5f904cc726113b09d1ea59220f1791585b54df36d1146aa0ceb15a1a2aa0c1d0f062794b4041f86819cc320daacf645c376933c3e79ebca4a708e77d2e129ccc1d8be4b856b818a68034cb51370b8810c3c43890153e426e73e52ff3f81ae26853eb46ff013949b466164adfedb1996b72532707d7f8aea9fedc807f2f83c7aae6938867f1a8b1fe434ff1974eb9f5c4ad6828179c3b813a9bcfdac8b08d8ff57a77d4331630c1b4a61ceacd82c4bb013fa006d999563d16859c8b994ae0f2dc9ece0d9473c04d8544ac2ab4d8c13cda8d66e63cfad0cbf82a3d371ebed53ea66363025f1462fe157f6007bcccbdffbee4ea04297d5aba19f09a50b7323a1f921d1681c271a4e6fdf6bee14c09eb2857027a22f39bedabc86628cc262b0da3f1858fdefa66ed672f8e615173dd6d32e087279f3bc7ee199500b4e50be583dc232b77ec27cb5a9c401aec384e8ddced381fa7b73cfef08424374dfb6b36127d916b38b2805c1d4e68e71952e619ca63eb98fdb191f4ba763eea000aae996690b4b5a66b9c836b83236dd4c843e31ce922a58d696ff26771977b6c41ea13f2bad3613419bb4de4340645571d6922b21af44d0b502c90e5c446911e7db0ecabd8b7f3a12bdb07acd119031150596a6ec63a70c7b9efd86a6dff5cf2bf04d94a213dba9927d57a1e1ebe0739fa5a78926c20bd05dc094d729dbc93e62d701d301a5ec7eaa79ae790814155752174f6c0150ba144823ea297f394ae20e065bc6a1bea8672097d79ed9caa229ae6031c2494738013096a5b5631578005ca24fd28fc0c10bf9d06a6f72c88d883a25a5df5fd2dc6cc065", 0x4a7}], 0x3}}], 0x1, 0x8001) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 899.444854ms ago: executing program 3 (id=141): r0 = io_uring_setup(0x3dd3, &(0x7f0000001100)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) 808.350973ms ago: executing program 3 (id=142): capset(0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x60200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x1000) 734.17348ms ago: executing program 0 (id=143): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x161, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x51, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='svc_xprt_enqueue\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10310}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r3, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r8 = io_uring_setup(0x1b91, &(0x7f0000000000)) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 338.306308ms ago: executing program 1 (id=144): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 337.369878ms ago: executing program 0 (id=145): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000d40)=ANY=[@ANYRESHEX=r0, @ANYBLOB="02f11bd15c278c629b8980cc27b03094bf0986ad8ed725f88f9c83d23935505fd7f4c78a334bf7e73f2f46a8a123926dd597765fa57a7313a177ad2fb3c09d2292fe50e19efb3dc1cb79", @ANYBLOB="0000000000000000b7020000030000fe840000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, &(0x7f0000000040)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x468, 0x190, 0x250, 0x190, 0x0, 0x190, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, &(0x7f0000000300), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0xf, 0xd, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x101}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x9, @rand_addr=0x64010101, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000380)='pipefs\x00', 0x1000880, &(0x7f00000003c0)='cpuacct.usage_percpu_user\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\a\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0xff}, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x4, 0x4, 0x1, 'syz1\x00', 0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3f8) splice(r4, 0x0, r2, 0x0, 0x7f, 0xf) r8 = dup2(r3, r3) write$UHID_CREATE2(r8, &(0x7f0000000440)=ANY=[], 0x1f9) r9 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000104c05f20d4000010203018a8609022d000101f4100709040005020301024f092155a5090122ad0609058103400037000709050203ff03064009d3cc735e8f2a716ca3d459799f2b8984971001afed01b2ec31520df0841072bd9b541d9b9ab76a5d44b7ce8233ab8fdaabf50eacb26dd1dc4d4c845aff5f77262556da"], &(0x7f0000000b00)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x140, 0x2, 0x7, 0x8, 0x20, 0x1}, 0x1c, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1c0002141004031f1bd86f7c0972bc72b94d03c0658f5c03100ba8ffa4172cba2b9abccbb024357384296ab33c2a0d45ee9d5162bc3d46c6c3e6870550104df929f2c137a4892c1af9019e156c3ae5e032e9da514f29970975349ea72754dec5def766b30a8107085b68bece9f674677e3f36a00650ae4feb465d468d86b5c14b5699a2b1c03cb2ad209633cb030c80c7a2452504a9f69ee669a758d24e3f8e78f6757225c2c0d5226d054e89270046df9ebf0"], 0x1, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x425}}]}) syz_usb_disconnect(r9) socket$inet6_sctp(0xa, 0x1, 0x84) mmap$xdp(&(0x7f000092e000/0x1000)=nil, 0x1000, 0x6, 0x10, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) unshare(0x20000400) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES64=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 287.363533ms ago: executing program 1 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x18}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 239.067877ms ago: executing program 1 (id=147): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 188.909752ms ago: executing program 1 (id=148): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x3200010, &(0x7f0000000c00)=ANY=[], 0x3, 0x7b9, &(0x7f0000000d40)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000001400), 0x0, 0x0) 124.682418ms ago: executing program 4 (id=149): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) 124.088759ms ago: executing program 1 (id=150): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000dc0)=""/4096, &(0x7f0000000080)=0x1000) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x14a80, 0x12, 0x38, &(0x7f00000002c0)="24006f20a01c2500", &(0x7f00000001c0)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="4b000000020000"], 0x0) 67.624944ms ago: executing program 4 (id=151): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 66.968114ms ago: executing program 4 (id=152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x3200010, &(0x7f0000000c00)=ANY=[], 0x3, 0x7b9, &(0x7f0000000d40)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000001400), 0x0, 0x0) 0s ago: executing program 4 (id=153): capset(0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x60200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x1000) kernel console output (not intermixed with test programs): 1 [ 17.615028][ T29] audit: type=1400 audit(1726846895.297:80): avc: denied { siginh } for pid=3142 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.367680][ T3145] sftp-server (3145) used greatest stack depth: 11368 bytes left [ 20.381736][ T29] audit: type=1400 audit(1726846898.077:81): avc: denied { read } for pid=2946 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts. [ 26.019837][ T29] audit: type=1400 audit(1726846903.707:82): avc: denied { mounton } for pid=3252 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.021135][ T3252] cgroup: Unknown subsys name 'net' [ 26.042763][ T29] audit: type=1400 audit(1726846903.717:83): avc: denied { mount } for pid=3252 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.070152][ T29] audit: type=1400 audit(1726846903.737:84): avc: denied { unmount } for pid=3252 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.310851][ T3252] cgroup: Unknown subsys name 'cpuset' [ 26.316981][ T3252] cgroup: Unknown subsys name 'rlimit' [ 26.444699][ T29] audit: type=1400 audit(1726846904.137:85): avc: denied { setattr } for pid=3252 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.470107][ T29] audit: type=1400 audit(1726846904.137:86): avc: denied { create } for pid=3252 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.482877][ T3255] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.490623][ T29] audit: type=1400 audit(1726846904.137:87): avc: denied { write } for pid=3252 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.510235][ T3252] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.519438][ T29] audit: type=1400 audit(1726846904.137:88): avc: denied { read } for pid=3252 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.519464][ T29] audit: type=1400 audit(1726846904.147:89): avc: denied { mounton } for pid=3252 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.573460][ T29] audit: type=1400 audit(1726846904.147:90): avc: denied { mount } for pid=3252 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.596833][ T29] audit: type=1400 audit(1726846904.187:91): avc: denied { relabelto } for pid=3255 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.435087][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 28.514666][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.521791][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.529072][ T3263] bridge_slave_0: entered allmulticast mode [ 28.535556][ T3263] bridge_slave_0: entered promiscuous mode [ 28.543586][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.550731][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.557878][ T3263] bridge_slave_1: entered allmulticast mode [ 28.564441][ T3263] bridge_slave_1: entered promiscuous mode [ 28.620888][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.635469][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 28.655440][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.692386][ T3263] team0: Port device team_slave_0 added [ 28.702384][ T3263] team0: Port device team_slave_1 added [ 28.708221][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 28.758246][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.765256][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.791413][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.802121][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 28.819365][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.826381][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.852434][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.863305][ T3262] chnl_net:caif_netlink_parms(): no params data found [ 28.911361][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.918436][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.925717][ T3264] bridge_slave_0: entered allmulticast mode [ 28.932018][ T3264] bridge_slave_0: entered promiscuous mode [ 28.946823][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.953970][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.961272][ T3268] bridge_slave_0: entered allmulticast mode [ 28.967727][ T3268] bridge_slave_0: entered promiscuous mode [ 28.979002][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.986093][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.993290][ T3264] bridge_slave_1: entered allmulticast mode [ 28.999663][ T3264] bridge_slave_1: entered promiscuous mode [ 29.018016][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.025212][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.032430][ T3268] bridge_slave_1: entered allmulticast mode [ 29.038854][ T3268] bridge_slave_1: entered promiscuous mode [ 29.055345][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.062420][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.069690][ T3269] bridge_slave_0: entered allmulticast mode [ 29.076180][ T3269] bridge_slave_0: entered promiscuous mode [ 29.089029][ T3263] hsr_slave_0: entered promiscuous mode [ 29.095171][ T3263] hsr_slave_1: entered promiscuous mode [ 29.110128][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.117193][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.124471][ T3269] bridge_slave_1: entered allmulticast mode [ 29.130745][ T3269] bridge_slave_1: entered promiscuous mode [ 29.142663][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.152885][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.172271][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.192479][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.201649][ T3262] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.208702][ T3262] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.215926][ T3262] bridge_slave_0: entered allmulticast mode [ 29.222330][ T3262] bridge_slave_0: entered promiscuous mode [ 29.243230][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.250444][ T3262] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.257580][ T3262] bridge_slave_1: entered allmulticast mode [ 29.264098][ T3262] bridge_slave_1: entered promiscuous mode [ 29.276288][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.286114][ T3268] team0: Port device team_slave_0 added [ 29.306460][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.316094][ T3268] team0: Port device team_slave_1 added [ 29.327038][ T3264] team0: Port device team_slave_0 added [ 29.335633][ T3264] team0: Port device team_slave_1 added [ 29.342543][ T3262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.363342][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.370318][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.396342][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.412378][ T3262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.432153][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.439183][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.465139][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.485313][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.492326][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.518270][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.529541][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.536516][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.562481][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.583592][ T3269] team0: Port device team_slave_0 added [ 29.592215][ T3262] team0: Port device team_slave_0 added [ 29.598791][ T3262] team0: Port device team_slave_1 added [ 29.617211][ T3269] team0: Port device team_slave_1 added [ 29.636708][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.643695][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.669708][ T3262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.702747][ T3262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.709711][ T3262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.735727][ T3262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.746708][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.753697][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.779726][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.790851][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.797929][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.823868][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.836842][ T3268] hsr_slave_0: entered promiscuous mode [ 29.842810][ T3268] hsr_slave_1: entered promiscuous mode [ 29.848714][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.856315][ T3268] Cannot create hsr debugfs directory [ 29.878607][ T3264] hsr_slave_0: entered promiscuous mode [ 29.884538][ T3264] hsr_slave_1: entered promiscuous mode [ 29.890466][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.898013][ T3264] Cannot create hsr debugfs directory [ 29.929692][ T3262] hsr_slave_0: entered promiscuous mode [ 29.935894][ T3262] hsr_slave_1: entered promiscuous mode [ 29.941811][ T3262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.949377][ T3262] Cannot create hsr debugfs directory [ 29.973247][ T3269] hsr_slave_0: entered promiscuous mode [ 29.979458][ T3269] hsr_slave_1: entered promiscuous mode [ 29.985332][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.993004][ T3269] Cannot create hsr debugfs directory [ 30.078929][ T3263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.087653][ T3263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.100450][ T3263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.125460][ T3263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.168150][ T3268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.178418][ T3268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.187458][ T3268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.196210][ T3268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.259558][ T3264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.269716][ T3264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.278753][ T3264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.289437][ T3264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.313625][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.322292][ T3262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.331255][ T3262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.339594][ T3262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.357871][ T3262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.377805][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.393978][ T3269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.403322][ T3269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.412153][ T3269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.430325][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.437537][ T3269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.453046][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.460257][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.481902][ T2112] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.488989][ T2112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.518666][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.532011][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.539090][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.556450][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.569378][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.576476][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.600318][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.609641][ T3263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.629793][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.636875][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.646183][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.653249][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.666525][ T3262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.702084][ T3262] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.719764][ T3264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.730523][ T3264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.758560][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.765669][ T2112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.776641][ T2112] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.783782][ T2112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.794871][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.821573][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.839683][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.863495][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.883482][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.890591][ T2112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.907556][ T2112] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.914684][ T2112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.929990][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.947567][ T3262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.064767][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.102640][ T3268] veth0_vlan: entered promiscuous mode [ 31.119594][ T3262] veth0_vlan: entered promiscuous mode [ 31.131219][ T3268] veth1_vlan: entered promiscuous mode [ 31.153664][ T3262] veth1_vlan: entered promiscuous mode [ 31.170767][ T3264] veth0_vlan: entered promiscuous mode [ 31.197225][ T3263] veth0_vlan: entered promiscuous mode [ 31.210896][ T3262] veth0_macvtap: entered promiscuous mode [ 31.217846][ T3268] veth0_macvtap: entered promiscuous mode [ 31.228337][ T3262] veth1_macvtap: entered promiscuous mode [ 31.235624][ T3268] veth1_macvtap: entered promiscuous mode [ 31.242889][ T3264] veth1_vlan: entered promiscuous mode [ 31.253637][ T3263] veth1_vlan: entered promiscuous mode [ 31.266266][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.288512][ T3269] veth0_vlan: entered promiscuous mode [ 31.296238][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.306750][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.317350][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.325654][ T3262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.335402][ T3269] veth1_vlan: entered promiscuous mode [ 31.346741][ T3262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.355549][ T3262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.364393][ T3262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.373217][ T3262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.383682][ T3264] veth0_macvtap: entered promiscuous mode [ 31.391606][ T3264] veth1_macvtap: entered promiscuous mode [ 31.400655][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.411256][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.422321][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.440631][ T3268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.449428][ T3268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.458267][ T3268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.467084][ T3268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.482751][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.493241][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.503114][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.513656][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.524125][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.538233][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.548812][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.558659][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.569158][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.579726][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.588141][ T3263] veth0_macvtap: entered promiscuous mode [ 31.597091][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.597104][ T29] audit: type=1400 audit(1726846909.287:110): avc: denied { mounton } for pid=3262 comm="syz-executor" path="/root/syzkaller.iA4tF3/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.631197][ T29] audit: type=1400 audit(1726846909.297:111): avc: denied { mount } for pid=3262 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.633961][ T3269] veth0_macvtap: entered promiscuous mode [ 31.653349][ T29] audit: type=1400 audit(1726846909.297:112): avc: denied { mounton } for pid=3262 comm="syz-executor" path="/root/syzkaller.iA4tF3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.664558][ T3269] veth1_macvtap: entered promiscuous mode [ 31.684190][ T29] audit: type=1400 audit(1726846909.297:113): avc: denied { mount } for pid=3262 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.696205][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.711759][ T29] audit: type=1400 audit(1726846909.297:114): avc: denied { unmount } for pid=3262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.713376][ T29] audit: type=1400 audit(1726846909.357:115): avc: denied { mounton } for pid=3262 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.722223][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.722232][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.722245][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.722253][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.722265][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.725433][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.835263][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.845735][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.855559][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.865979][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.875796][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.886234][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.897706][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.905728][ T3264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.914784][ T3264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.923555][ T3264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.932313][ T3264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.945949][ T3269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.954774][ T3269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.963507][ T3269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.972335][ T3269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.973067][ T29] audit: type=1400 audit(1726846909.637:116): avc: denied { read write } for pid=3262 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.984427][ T3263] veth1_macvtap: entered promiscuous mode [ 32.005208][ T29] audit: type=1400 audit(1726846909.637:117): avc: denied { open } for pid=3262 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.034992][ T29] audit: type=1400 audit(1726846909.637:118): avc: denied { ioctl } for pid=3262 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.061838][ T29] audit: type=1400 audit(1726846909.707:119): avc: denied { map_create } for pid=3402 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.113961][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.124468][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.134330][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.144806][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.154693][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.165302][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.175209][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.185727][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.199536][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.208138][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.218704][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.228672][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.239149][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.248974][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.259424][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.269914][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.280347][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.290941][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.311000][ T3263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.319919][ T3263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.328651][ T3263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.329772][ T3411] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.337399][ T3263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.421328][ T3416] FAULT_INJECTION: forcing a failure. [ 32.421328][ T3416] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.434470][ T3416] CPU: 1 UID: 0 PID: 3416 Comm: syz.1.6 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 32.444617][ T3416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 32.454704][ T3416] Call Trace: [ 32.458029][ T3416] [ 32.460983][ T3416] dump_stack_lvl+0xf2/0x150 [ 32.462794][ T3413] FAULT_INJECTION: forcing a failure. [ 32.462794][ T3413] name failslab, interval 1, probability 0, space 0, times 1 [ 32.465622][ T3416] dump_stack+0x15/0x20 [ 32.482389][ T3416] should_fail_ex+0x229/0x230 [ 32.487075][ T3416] should_fail+0xb/0x10 [ 32.491239][ T3416] should_fail_usercopy+0x1a/0x20 [ 32.496279][ T3416] _copy_to_user+0x1e/0xa0 [ 32.500710][ T3416] simple_read_from_buffer+0xa0/0x110 [ 32.506106][ T3416] proc_fail_nth_read+0xf9/0x140 [ 32.511059][ T3416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 32.516704][ T3416] vfs_read+0x195/0x720 [ 32.520870][ T3416] ? kmem_cache_free+0x1e9/0x2d0 [ 32.525814][ T3416] ? __rcu_read_unlock+0x4e/0x70 [ 32.530782][ T3416] ? __fget_files+0x1d4/0x210 [ 32.535472][ T3416] ksys_read+0xeb/0x1b0 [ 32.539665][ T3416] __x64_sys_read+0x42/0x50 [ 32.544174][ T3416] x64_sys_call+0x27d3/0x2d60 [ 32.548870][ T3416] do_syscall_64+0xc9/0x1c0 [ 32.553399][ T3416] ? clear_bhb_loop+0x55/0xb0 [ 32.558148][ T3416] ? clear_bhb_loop+0x55/0xb0 [ 32.562853][ T3416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.568838][ T3416] RIP: 0033:0x7f6d8cf0c93c [ 32.573264][ T3416] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 32.592878][ T3416] RSP: 002b:00007f6d8bb87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.601336][ T3416] RAX: ffffffffffffffda RBX: 00007f6d8d0c5f80 RCX: 00007f6d8cf0c93c [ 32.609340][ T3416] RDX: 000000000000000f RSI: 00007f6d8bb870a0 RDI: 0000000000000008 [ 32.617312][ T3416] RBP: 00007f6d8bb87090 R08: 0000000000000000 R09: 0000000000000000 [ 32.625330][ T3416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.633297][ T3416] R13: 0000000000000000 R14: 00007f6d8d0c5f80 R15: 00007ffd007e6c58 [ 32.641327][ T3416] [ 32.644353][ T3413] CPU: 0 UID: 0 PID: 3413 Comm: syz.2.3 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 32.654563][ T3413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 32.664624][ T3413] Call Trace: [ 32.667900][ T3413] [ 32.670874][ T3413] dump_stack_lvl+0xf2/0x150 [ 32.675486][ T3413] dump_stack+0x15/0x20 [ 32.679707][ T3413] should_fail_ex+0x229/0x230 [ 32.684389][ T3413] ? getname_kernel+0x3d/0x1e0 [ 32.689315][ T3413] should_failslab+0x8f/0xb0 [ 32.693991][ T3413] kmem_cache_alloc_noprof+0x4c/0x290 [ 32.699370][ T3413] getname_kernel+0x3d/0x1e0 [ 32.704119][ T3413] kern_path+0x21/0x110 [ 32.708379][ T3413] do_loopback+0x65/0x2d0 [ 32.712804][ T3413] path_mount+0x3d0/0xb30 [ 32.717142][ T3413] __se_sys_mount+0x27c/0x2d0 [ 32.721897][ T3413] ? fput+0x14e/0x190 [ 32.725980][ T3413] __x64_sys_mount+0x67/0x80 [ 32.730648][ T3413] x64_sys_call+0x203e/0x2d60 [ 32.735456][ T3413] do_syscall_64+0xc9/0x1c0 [ 32.739959][ T3413] ? clear_bhb_loop+0x55/0xb0 [ 32.744694][ T3413] ? clear_bhb_loop+0x55/0xb0 [ 32.749533][ T3413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.755439][ T3413] RIP: 0033:0x7fa4d648def9 [ 32.759850][ T3413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.779539][ T3413] RSP: 002b:00007fa4d5107038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.787957][ T3413] RAX: ffffffffffffffda RBX: 00007fa4d6645f80 RCX: 00007fa4d648def9 [ 32.795937][ T3413] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000020000580 [ 32.803912][ T3413] RBP: 00007fa4d5107090 R08: 0000000000000000 R09: 0000000000000000 [ 32.811882][ T3413] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000001 [ 32.819951][ T3413] R13: 0000000000000000 R14: 00007fa4d6645f80 R15: 00007ffd35799b08 [ 32.827963][ T3413] [ 32.854262][ T3421] loop3: detected capacity change from 0 to 1024 [ 32.893195][ T3421] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 32.904242][ T3421] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 32.934084][ T3429] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 32.939604][ T3421] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.041302][ T3421] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 33.050058][ T3421] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 33.071538][ T3433] loop1: detected capacity change from 0 to 512 [ 33.086704][ T3435] loop0: detected capacity change from 0 to 1024 [ 33.094537][ T3433] ======================================================= [ 33.094537][ T3433] WARNING: The mand mount option has been deprecated and [ 33.094537][ T3433] and is ignored by this kernel. Remove the mand [ 33.094537][ T3433] option from the mount to silence this warning. [ 33.094537][ T3433] ======================================================= [ 33.100858][ T3435] EXT4-fs: Ignoring removed orlov option [ 33.135361][ T3435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.180378][ T3439] loop3: detected capacity change from 0 to 1024 [ 33.187319][ T3439] EXT4-fs: Ignoring removed orlov option [ 33.193117][ T3439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.196678][ T3433] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 33.211274][ T3435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.268067][ T3433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 33.282741][ T3433] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.289606][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.290069][ T3439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.329638][ T3433] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12: bg 0: block 361: padding at end of block bitmap is not set [ 33.385355][ T3433] EXT4-fs (loop1): Remounting filesystem read-only [ 33.408428][ T3450] loop0: detected capacity change from 0 to 164 [ 33.416929][ T3433] EXT4-fs (loop1): 1 truncate cleaned up [ 33.430617][ T3433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 33.439844][ T3450] iso9660: Unknown parameter '' [ 33.455973][ T3433] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 33.469407][ T3433] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 33.496613][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.654085][ T3433] syz.1.12 (3433) used greatest stack depth: 11200 bytes left [ 33.836480][ T3467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 33.880898][ T3471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 33.890386][ T3472] 9pnet_fd: Insufficient options for proto=fd [ 33.928795][ T3474] FAULT_INJECTION: forcing a failure. [ 33.928795][ T3474] name failslab, interval 1, probability 0, space 0, times 0 [ 33.941561][ T3474] CPU: 0 UID: 0 PID: 3474 Comm: syz.1.23 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 33.951815][ T3474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 33.961914][ T3474] Call Trace: [ 33.965285][ T3474] [ 33.968232][ T3474] dump_stack_lvl+0xf2/0x150 [ 33.972853][ T3474] dump_stack+0x15/0x20 [ 33.977041][ T3474] should_fail_ex+0x229/0x230 [ 33.981822][ T3474] ? skb_clone+0x154/0x1f0 [ 33.986273][ T3474] should_failslab+0x8f/0xb0 [ 33.990941][ T3474] kmem_cache_alloc_noprof+0x4c/0x290 [ 33.996353][ T3474] ? mod_objcg_state+0x2ea/0x4f0 [ 34.001331][ T3474] skb_clone+0x154/0x1f0 [ 34.005588][ T3474] dev_queue_xmit_nit+0x149/0x620 [ 34.010710][ T3474] dev_hard_start_xmit+0xcc/0x3f0 [ 34.015747][ T3474] ? validate_xmit_skb+0x658/0x8d0 [ 34.020872][ T3474] __dev_queue_xmit+0xfe6/0x1fe0 [ 34.025874][ T3474] ? __dev_queue_xmit+0x161/0x1fe0 [ 34.031019][ T3474] ? should_fail_ex+0xd7/0x230 [ 34.035847][ T3474] ? __skb_clone+0x2d0/0x2f0 [ 34.040525][ T3474] __netlink_deliver_tap+0x39f/0x4c0 [ 34.045829][ T3474] netlink_unicast+0x64a/0x670 [ 34.050615][ T3474] netlink_sendmsg+0x5cc/0x6e0 [ 34.055444][ T3474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.060743][ T3474] __sock_sendmsg+0x140/0x180 [ 34.065429][ T3474] ____sys_sendmsg+0x312/0x410 [ 34.070234][ T3474] __sys_sendmsg+0x1dd/0x270 [ 34.074954][ T3474] __x64_sys_sendmsg+0x46/0x50 [ 34.079731][ T3474] x64_sys_call+0x2689/0x2d60 [ 34.084415][ T3474] do_syscall_64+0xc9/0x1c0 [ 34.088968][ T3474] ? clear_bhb_loop+0x55/0xb0 [ 34.093799][ T3474] ? clear_bhb_loop+0x55/0xb0 [ 34.098483][ T3474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.104415][ T3474] RIP: 0033:0x7f6d8cf0def9 [ 34.108834][ T3474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.128501][ T3474] RSP: 002b:00007f6d8bb87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.136944][ T3474] RAX: ffffffffffffffda RBX: 00007f6d8d0c5f80 RCX: 00007f6d8cf0def9 [ 34.144954][ T3474] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 34.152932][ T3474] RBP: 00007f6d8bb87090 R08: 0000000000000000 R09: 0000000000000000 [ 34.160930][ T3474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.169011][ T3474] R13: 0000000000000000 R14: 00007f6d8d0c5f80 R15: 00007ffd007e6c58 [ 34.176988][ T3474] [ 34.211003][ T3476] loop2: detected capacity change from 0 to 1024 [ 34.217636][ T3476] EXT4-fs: Ignoring removed orlov option [ 34.223502][ T3476] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.254307][ T3476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.261909][ T3480] loop1: detected capacity change from 0 to 2048 [ 34.267350][ T3484] loop4: detected capacity change from 0 to 512 [ 34.284172][ T3484] EXT4-fs: inline encryption not supported [ 34.293758][ T3480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.306812][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.317134][ T3480] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 34.319207][ T3484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.340805][ T3484] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.365857][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 34.376704][ T3484] FAULT_INJECTION: forcing a failure. [ 34.376704][ T3484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.390014][ T3484] CPU: 1 UID: 0 PID: 3484 Comm: syz.4.27 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 34.400240][ T3484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 34.410287][ T3484] Call Trace: [ 34.413624][ T3484] [ 34.416584][ T3484] dump_stack_lvl+0xf2/0x150 [ 34.421192][ T3484] dump_stack+0x15/0x20 [ 34.425423][ T3484] should_fail_ex+0x229/0x230 [ 34.430157][ T3484] should_fail+0xb/0x10 [ 34.434340][ T3484] should_fail_usercopy+0x1a/0x20 [ 34.439449][ T3484] _copy_from_user+0x1e/0xd0 [ 34.444038][ T3484] copy_msghdr_from_user+0x54/0x2a0 [ 34.449287][ T3484] __sys_sendmsg+0x171/0x270 [ 34.453894][ T3484] __x64_sys_sendmsg+0x46/0x50 [ 34.458844][ T3484] x64_sys_call+0x2689/0x2d60 [ 34.463547][ T3484] do_syscall_64+0xc9/0x1c0 [ 34.468046][ T3484] ? clear_bhb_loop+0x55/0xb0 [ 34.472823][ T3484] ? clear_bhb_loop+0x55/0xb0 [ 34.477505][ T3484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.483414][ T3484] RIP: 0033:0x7f6b2cf8def9 [ 34.487906][ T3484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.507510][ T3484] RSP: 002b:00007f6b2bc01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.515983][ T3484] RAX: ffffffffffffffda RBX: 00007f6b2d145f80 RCX: 00007f6b2cf8def9 [ 34.523949][ T3484] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000007 [ 34.531950][ T3484] RBP: 00007f6b2bc01090 R08: 0000000000000000 R09: 0000000000000000 [ 34.540002][ T3484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.547981][ T3484] R13: 0000000000000000 R14: 00007f6b2d145f80 R15: 00007ffe8767d388 [ 34.556049][ T3484] [ 34.586125][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.708811][ T3494] loop2: detected capacity change from 0 to 512 [ 34.729518][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.745371][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 34.773150][ T3507] 9pnet_fd: Insufficient options for proto=fd [ 34.817721][ T3513] loop1: detected capacity change from 0 to 164 [ 34.826075][ T3509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34'. [ 34.836744][ T3513] iso9660: Unknown parameter '' [ 34.939054][ T3512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 34.949799][ T3524] loop2: detected capacity change from 0 to 1024 [ 34.967874][ T3524] EXT4-fs: Ignoring removed orlov option [ 34.973808][ T3524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.994987][ T3525] loop4: detected capacity change from 0 to 1024 [ 35.013493][ T3525] EXT4-fs: Ignoring removed orlov option [ 35.019419][ T3525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.047593][ T3531] loop1: detected capacity change from 0 to 2048 [ 35.081577][ T3525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.082781][ T3531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.108224][ T3524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.125769][ T3531] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 35.172870][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.193090][ T3544] 9pnet_fd: Insufficient options for proto=fd [ 35.203739][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.246730][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.295434][ T3552] loop3: detected capacity change from 0 to 164 [ 35.319278][ T3558] loop4: detected capacity change from 0 to 2048 [ 35.323356][ T3552] iso9660: Unknown parameter '' [ 35.333028][ T3560] loop2: detected capacity change from 0 to 764 [ 35.348848][ T3562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 35.363764][ T3558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.397593][ T3566] loop1: detected capacity change from 0 to 256 [ 35.411300][ T3566] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.422178][ T3558] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 35.446504][ T3570] loop3: detected capacity change from 0 to 1024 [ 35.468991][ T3570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.505736][ T3568] loop2: detected capacity change from 0 to 1024 [ 35.533737][ T3568] EXT4-fs: Ignoring removed orlov option [ 35.539491][ T3568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.564210][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.574799][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.604047][ T3568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.631030][ T3584] loop3: detected capacity change from 0 to 256 [ 35.643697][ T3584] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.667855][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.695394][ T3589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.68'. [ 35.733139][ T3595] loop2: detected capacity change from 0 to 764 [ 35.751542][ T3593] loop4: detected capacity change from 0 to 164 [ 35.770852][ T3593] iso9660: Unknown parameter '' [ 35.878221][ T3608] loop2: detected capacity change from 0 to 2048 [ 35.930454][ T3608] loop2: p1 < > p4 [ 35.950563][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 35.953394][ T3624] loop4: detected capacity change from 0 to 764 [ 35.967780][ T3608] loop2: p4 size 8388608 extends beyond EOD, truncated [ 35.982715][ T3625] Cannot find del_set index 0 as target [ 36.032235][ T2964] loop2: p1 < > p4 [ 36.036629][ T2964] loop2: p4 size 8388608 extends beyond EOD, truncated [ 36.098719][ T3256] udevd[3256]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.115904][ T3424] udevd[3424]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.132400][ T3636] 9pnet_fd: Insufficient options for proto=fd [ 36.150692][ T3638] tipc: Started in network mode [ 36.155646][ T3638] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 36.170341][ T3638] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:e000:0002 [ 36.178497][ T3638] tipc: Enabled bearer , priority 10 [ 36.288156][ C0] hrtimer: interrupt took 48135 ns [ 36.319811][ T3654] ip6gretap0 speed is unknown, defaulting to 1000 [ 36.332937][ T3654] ip6gretap0 speed is unknown, defaulting to 1000 [ 36.345438][ T3654] ip6gretap0 speed is unknown, defaulting to 1000 [ 36.354965][ T3654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.373104][ T3654] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 36.424483][ T3654] ip6gretap0 speed is unknown, defaulting to 1000 [ 36.443036][ T3654] ip6gretap0 speed is unknown, defaulting to 1000 [ 36.453559][ T3654] ip6gretap0 speed is unknown, defaulting to 1000 [ 36.462893][ T3654] ip6gretap0 speed is unknown, defaulting to 1000 [ 36.485795][ T3654] ip6gretap0 speed is unknown, defaulting to 1000 [ 36.489042][ T3677] loop0: detected capacity change from 0 to 1024 [ 36.499179][ T3677] EXT4-fs: Ignoring removed orlov option [ 36.504938][ T3677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.513453][ T3654] ip6gretap0 speed is unknown, defaulting to 1000 [ 36.523533][ T3677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.547238][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.614670][ T3686] loop0: detected capacity change from 0 to 1024 [ 36.621633][ T3686] EXT4-fs: Ignoring removed orlov option [ 36.627359][ T3686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.642699][ T3686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.667079][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.688168][ T3690] FAULT_INJECTION: forcing a failure. [ 36.688168][ T3690] name failslab, interval 1, probability 0, space 0, times 0 [ 36.700955][ T3690] CPU: 1 UID: 0 PID: 3690 Comm: syz.0.104 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 36.711240][ T3690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 36.721375][ T3690] Call Trace: [ 36.724648][ T3690] [ 36.727573][ T3690] dump_stack_lvl+0xf2/0x150 [ 36.732272][ T3690] dump_stack+0x15/0x20 [ 36.736517][ T3690] should_fail_ex+0x229/0x230 [ 36.741284][ T3690] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 36.747623][ T3690] should_failslab+0x8f/0xb0 [ 36.752300][ T3690] __kmalloc_noprof+0xa5/0x370 [ 36.757067][ T3690] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 36.763176][ T3690] genl_rcv_msg+0x470/0x6c0 [ 36.767733][ T3690] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 36.773738][ T3690] ? ref_tracker_free+0x3a5/0x410 [ 36.778783][ T3690] ? __dev_queue_xmit+0x161/0x1fe0 [ 36.783962][ T3690] netlink_rcv_skb+0x12c/0x230 [ 36.788818][ T3690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 36.793912][ T3690] genl_rcv+0x28/0x40 [ 36.797964][ T3690] netlink_unicast+0x599/0x670 [ 36.802738][ T3690] netlink_sendmsg+0x5cc/0x6e0 [ 36.807580][ T3690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.812897][ T3690] __sock_sendmsg+0x140/0x180 [ 36.817660][ T3690] ____sys_sendmsg+0x312/0x410 [ 36.822469][ T3690] __sys_sendmsg+0x1dd/0x270 [ 36.827174][ T3690] __x64_sys_sendmsg+0x46/0x50 [ 36.832013][ T3690] x64_sys_call+0x2689/0x2d60 [ 36.836739][ T3690] do_syscall_64+0xc9/0x1c0 [ 36.841329][ T3690] ? clear_bhb_loop+0x55/0xb0 [ 36.846050][ T3690] ? clear_bhb_loop+0x55/0xb0 [ 36.850820][ T3690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.856736][ T3690] RIP: 0033:0x7f0d79cbdef9 [ 36.861159][ T3690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.880788][ T3690] RSP: 002b:00007f0d78931038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.889217][ T3690] RAX: ffffffffffffffda RBX: 00007f0d79e75f80 RCX: 00007f0d79cbdef9 [ 36.897271][ T3690] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 36.905263][ T3690] RBP: 00007f0d78931090 R08: 0000000000000000 R09: 0000000000000000 [ 36.913314][ T3690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.921294][ T3690] R13: 0000000000000000 R14: 00007f0d79e75f80 R15: 00007ffd2a090e48 [ 36.929274][ T3690] [ 36.995080][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 36.995093][ T29] audit: type=1400 audit(1726846914.687:673): avc: denied { ioctl } for pid=3693 comm="syz.3.107" path="socket:[5217]" dev="sockfs" ino=5217 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.025902][ T29] audit: type=1326 audit(1726846914.687:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5a56def9 code=0x7ffc0000 [ 37.056855][ T3654] syz.2.89 (3654) used greatest stack depth: 10480 bytes left [ 37.074431][ T3694] tmpfs: Unknown parameter 'mpolrle€' [ 37.091861][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 37.096805][ T29] audit: type=1326 audit(1726846914.757:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe5a56def9 code=0x7ffc0000 [ 37.104160][ T3704] loop1: detected capacity change from 0 to 128 [ 37.124061][ T29] audit: type=1326 audit(1726846914.757:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5a56def9 code=0x7ffc0000 [ 37.150438][ T3704] pim6reg1: entered promiscuous mode [ 37.153515][ T29] audit: type=1326 audit(1726846914.757:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe5a56def9 code=0x7ffc0000 [ 37.158738][ T3704] pim6reg1: entered allmulticast mode [ 37.181842][ T29] audit: type=1400 audit(1726846914.757:678): avc: denied { create } for pid=3693 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.196598][ T3704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.206576][ T29] audit: type=1326 audit(1726846914.757:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5a56def9 code=0x7ffc0000 [ 37.206612][ T29] audit: type=1326 audit(1726846914.767:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efe5a56def9 code=0x7ffc0000 [ 37.206641][ T29] audit: type=1326 audit(1726846914.767:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5a56def9 code=0x7ffc0000 [ 37.206671][ T29] audit: type=1326 audit(1726846914.767:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efe5a56def9 code=0x7ffc0000 [ 37.215812][ T3314] tipc: Node number set to 1 [ 37.318790][ T3704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.351723][ T3707] loop3: detected capacity change from 0 to 164 [ 37.359201][ T3707] iso9660: Unknown parameter '' [ 37.414290][ T3718] loop0: detected capacity change from 0 to 1024 [ 37.426023][ T3718] EXT4-fs: inline encryption not supported [ 37.432847][ T3718] EXT4-fs: Mount option(s) incompatible with ext2 [ 37.654347][ T3737] loop0: detected capacity change from 0 to 512 [ 37.663022][ T3737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.676283][ T3737] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.695653][ T3737] EXT4-fs (loop0): 1 truncate cleaned up [ 37.703393][ T3737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.732993][ T3262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.789868][ T3742] tmpfs: Unknown parameter 'mpolrle€' [ 38.065926][ T3747] loop1: detected capacity change from 0 to 256 [ 38.083730][ T3747] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.124625][ T3749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 38.331841][ T3769] 9pnet_fd: Insufficient options for proto=fd [ 38.431194][ T3785] loop3: detected capacity change from 0 to 1024 [ 38.439028][ T3785] EXT4-fs: Ignoring removed orlov option [ 38.444804][ T3785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.472130][ T3785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.512378][ T3268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.103434][ T3807] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 39.239844][ T3815] loop1: detected capacity change from 0 to 764 [ 39.299433][ T3819] netlink: 'syz.1.150': attribute type 13 has an invalid length. [ 39.326056][ T3819] gretap0: refused to change device tx_queue_len [ 39.344621][ T3819] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.374881][ T3823] loop4: detected capacity change from 0 to 764 [ 39.409930][ T3824] syz.1.150 uses obsolete (PF_INET,SOCK_PACKET) [ 39.432916][ T3825] loop1: detected capacity change from 0 to 512 [ 39.447852][ T3825] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.496681][ T3795] ================================================================== [ 39.504805][ T3795] BUG: KCSAN: data-race in __ep_remove / __fput [ 39.511054][ T3795] [ 39.513377][ T3795] write to 0xffff888117ce4690 of 8 bytes by task 3797 on cpu 1: [ 39.521007][ T3795] __ep_remove+0x3c8/0x450 [ 39.525427][ T3795] ep_clear_and_put+0x158/0x260 [ 39.530282][ T3795] ep_eventpoll_release+0x2c/0x40 [ 39.535318][ T3795] __fput+0x17a/0x6d0 [ 39.539297][ T3795] ____fput+0x1c/0x30 [ 39.543294][ T3795] task_work_run+0x13a/0x1a0 [ 39.547897][ T3795] get_signal+0xf87/0x1100 [ 39.552330][ T3795] arch_do_signal_or_restart+0x95/0x4b0 [ 39.557881][ T3795] syscall_exit_to_user_mode+0x59/0x130 [ 39.563441][ T3795] do_syscall_64+0xd6/0x1c0 [ 39.567943][ T3795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.573849][ T3795] [ 39.576167][ T3795] read to 0xffff888117ce4690 of 8 bytes by task 3795 on cpu 0: [ 39.583707][ T3795] __fput+0xee/0x6d0 [ 39.587602][ T3795] ____fput+0x1c/0x30 [ 39.591610][ T3795] task_work_run+0x13a/0x1a0 [ 39.596207][ T3795] get_signal+0xf87/0x1100 [ 39.600640][ T3795] arch_do_signal_or_restart+0x95/0x4b0 [ 39.606186][ T3795] syscall_exit_to_user_mode+0x59/0x130 [ 39.611770][ T3795] do_syscall_64+0xd6/0x1c0 [ 39.616285][ T3795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.622205][ T3795] [ 39.624529][ T3795] value changed: 0xffff888103209140 -> 0x0000000000000000 [ 39.631667][ T3795] [ 39.633987][ T3795] Reported by Kernel Concurrency Sanitizer on: [ 39.640133][ T3795] CPU: 0 UID: 0 PID: 3795 Comm: syz.3.142 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 39.650376][ T3795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 39.660428][ T3795] ================================================================== [ 39.710073][ T3825] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 39.724499][ T3825] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.747772][ T3825] EXT4-fs (loop1): 1 truncate cleaned up [ 39.754093][ T3825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.783984][ T3819] EXT4-fs error (device loop1): ext4_nfs_get_inode:1537: inode #18: comm syz.1.150: iget: bad extra_isize 46 (inode size 256) [ 39.878177][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.