last executing test programs: 1.666217827s ago: executing program 4 (id=132): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x10}, 0x2000, 0xb11d, 0x4, 0x7, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x4cc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x49c, 0x2, [@TCA_ROUTE4_POLICE={0x498, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffdffffffa, 0x80000001, 0x64face9b, 0x4, {0x63, 0x2, 0x5, 0x8, 0x6, 0x7}, {0x7, 0x0, 0x8, 0x1, 0x9}, 0xea1d, 0xff, 0x5}}, @TCA_POLICE_TBF={0x6, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, 0x0, 0x8000000, 0x10001}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]}]}}]}, 0x4cc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.575562147s ago: executing program 4 (id=136): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.524879753s ago: executing program 4 (id=137): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00'}) 1.432149494s ago: executing program 1 (id=141): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000240)=ANY=[@ANYBLOB="757466382c63727566742c6d6f64653d3078303030303030303030303030303037642c686964652c636865636b3d72656c617865642c757466382c757466382c007850bebd8d7d036618c1146a34cfd146c5861d8bd4466228f0bc2de3f77e11157c389fc315c06b7ba5db6a0be20cefe83f41117225bf80377cd9f3f8ce47ac8bf58ed6e8a5f46c37d64ff6e2fb871053a53f8747dada0e0a13c5a2c79eb2bada5d986d2d2899a7"], 0x0, 0x558, &(0x7f0000000fc0)="$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") 1.406118377s ago: executing program 4 (id=143): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x30}}, 0x0) 1.350103144s ago: executing program 1 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000002000000004800000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @private}, &(0x7f0000000240)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @alu={0x7, 0x0, 0x2, 0x3, 0x7, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x2c, &(0x7f00000000c0)=""/44, 0x41100, 0x66, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0x6, 0x4}, 0x10, 0x5dd4, r1, 0x2, &(0x7f0000000300)=[r0, r0, r0, r0], &(0x7f0000000400)=[{0x5, 0x3, 0xd, 0xa}, {0x4, 0x2, 0x3, 0x1}], 0x10, 0x6, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000d40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8d0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x4100, 0x840}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x2c}}, 0x20008840) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$AUDIT_TRIM(r6, &(0x7f0000000b40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1f03fdb5abae4510}, 0x4000000) close(r8) r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r10 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000800)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3}}, 0x20) 583.548622ms ago: executing program 2 (id=156): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 556.760655ms ago: executing program 4 (id=157): modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x1000, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) kexec_load(0xffffffffffffffff, 0x0, 0x0, 0x280000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_req\x00', r4}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) close_range(r1, r7, 0x2) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="916baa8b48d27789e6aba0900e2474dae418c9fcfae1fab5a98d9c0c61ef76e35191e5faa81c08a9ca1520bdb492903e764d265d3b6f0e63966e1893b5dc653acab5f63f4d6c247f765a54275fa990e5eb53908ea57f7fc8c91c7c00000000080000000000000000000000000000000000000048ab5af7022c05000000825237ac87609bef5a4625a4fd12fd9ad9eb63bf1fd16527e6c95f079da2fe93a16ea03dc329971ff95e53c7bee8e8d67f92ddcc2ac6d17b89833cda218b52527b46568b5a7a7cc0625bde6ddeb221c0706d517ffeaaa604a6742a86be29473f9ff4977ee883c0f08a949d516b016d7f2404a6ed3dab9ed6f1d0ebcd2ed4f636ecc5d9a9a4cb863049f5e3613e48169d186a998cc95ab5a88f1e17c01d26bc9d4054658f1003157e731b2bda0d19db0569f1a756916be0fda618d62a2db701cef3fd576e2a", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) open(0x0, 0x100000001a1540, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00'}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 549.857936ms ago: executing program 2 (id=158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) 518.992409ms ago: executing program 2 (id=159): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x8, 0x8001, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x16c) sendfile(r4, r4, 0x0, 0x800000009) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7adb, 0x100000001}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r7, 0x40304580, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) 483.861044ms ago: executing program 1 (id=160): modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x1000, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) kexec_load(0xffffffffffffffff, 0x0, 0x0, 0x280000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_req\x00', r4}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) close_range(r1, r7, 0x2) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(0x0, 0x100000001a1540, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00'}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 402.606313ms ago: executing program 0 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f0000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@random="a579bbcb1e8e", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0xe0, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 366.387977ms ago: executing program 1 (id=162): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002300)=ANY=[@ANYBLOB="400000006800010000000000feffffff0a00000000000000060007000700000008000500", @ANYRES32=r1, @ANYBLOB="18000880"], 0x40}}, 0x0) 341.4412ms ago: executing program 4 (id=163): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x8, 0x8001, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x16c) sendfile(r4, r4, 0x0, 0x800000009) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7adb, 0x100000001}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x45, 0x2}, @const={0x3, {0x400, 0x5, 0x9, 0x3}}}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) 252.15705ms ago: executing program 3 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 251.640131ms ago: executing program 1 (id=165): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) connect$netlink(r0, &(0x7f0000000000)=@unspec={0x0, 0xe803}, 0xc) 244.674381ms ago: executing program 0 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) 189.051557ms ago: executing program 3 (id=167): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 158.714031ms ago: executing program 1 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x242000, 0xc0}, 0x18) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 141.751123ms ago: executing program 0 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000200)=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) 120.796165ms ago: executing program 0 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000002000000004800000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @private}, &(0x7f0000000240)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @alu={0x7, 0x0, 0x2, 0x3, 0x7, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x2c, &(0x7f00000000c0)=""/44, 0x41100, 0x66, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0x6, 0x4}, 0x10, 0x5dd4, r1, 0x2, &(0x7f0000000300)=[r0, r0, r0, r0], &(0x7f0000000400)=[{0x5, 0x3, 0xd, 0xa}, {0x4, 0x2, 0x3, 0x1}], 0x10, 0x6, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000d40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8d0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x4100, 0x840}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x2c}}, 0x20008840) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$AUDIT_TRIM(r6, &(0x7f0000000b40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1f03fdb5abae4510}, 0x4000000) close(r8) r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r10 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r2}}, 0x48) 81.11331ms ago: executing program 3 (id=172): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200480, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={0x0, 0x0, 0xb}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) renameat2(r1, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) 0s ago: executing program 3 (id=173): modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x1000, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) kexec_load(0xffffffffffffffff, 0x0, 0x0, 0x280000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_req\x00', r4}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) close_range(r1, r7, 0x2) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) open(0x0, 0x100000001a1540, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00'}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) kernel console output (not intermixed with test programs): [ 18.687982][ T29] audit: type=1400 audit(1729776590.091:81): avc: denied { read } for pid=2950 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. [ 22.386216][ T29] audit: type=1400 audit(1729776593.791:82): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.387210][ T3254] cgroup: Unknown subsys name 'net' [ 22.408921][ T29] audit: type=1400 audit(1729776593.791:83): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.436381][ T29] audit: type=1400 audit(1729776593.821:84): avc: denied { unmount } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.555797][ T3254] cgroup: Unknown subsys name 'cpuset' [ 22.561996][ T3254] cgroup: Unknown subsys name 'rlimit' [ 22.669396][ T29] audit: type=1400 audit(1729776594.071:85): avc: denied { setattr } for pid=3254 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.692633][ T29] audit: type=1400 audit(1729776594.071:86): avc: denied { create } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.708951][ T3258] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.713329][ T29] audit: type=1400 audit(1729776594.071:87): avc: denied { write } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.742396][ T29] audit: type=1400 audit(1729776594.071:88): avc: denied { read } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.763326][ T29] audit: type=1400 audit(1729776594.071:89): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.764895][ T3254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.788192][ T29] audit: type=1400 audit(1729776594.071:90): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.820189][ T29] audit: type=1400 audit(1729776594.131:91): avc: denied { relabelto } for pid=3258 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.927042][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 24.025839][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.032945][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.040169][ T3269] bridge_slave_0: entered allmulticast mode [ 24.046759][ T3269] bridge_slave_0: entered promiscuous mode [ 24.053156][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 24.067802][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.074889][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.082147][ T3269] bridge_slave_1: entered allmulticast mode [ 24.088363][ T3269] bridge_slave_1: entered promiscuous mode [ 24.096656][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 24.126083][ T3275] chnl_net:caif_netlink_parms(): no params data found [ 24.168498][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.187846][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.215868][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 24.241207][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.248332][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.255484][ T3268] bridge_slave_0: entered allmulticast mode [ 24.261877][ T3268] bridge_slave_0: entered promiscuous mode [ 24.270856][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.278052][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.285268][ T3266] bridge_slave_0: entered allmulticast mode [ 24.291641][ T3266] bridge_slave_0: entered promiscuous mode [ 24.298320][ T3269] team0: Port device team_slave_0 added [ 24.308589][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.315671][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.322933][ T3268] bridge_slave_1: entered allmulticast mode [ 24.329626][ T3268] bridge_slave_1: entered promiscuous mode [ 24.337840][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.344923][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.352203][ T3266] bridge_slave_1: entered allmulticast mode [ 24.358584][ T3266] bridge_slave_1: entered promiscuous mode [ 24.365250][ T3269] team0: Port device team_slave_1 added [ 24.374524][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.381633][ T3275] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.389028][ T3275] bridge_slave_0: entered allmulticast mode [ 24.395624][ T3275] bridge_slave_0: entered promiscuous mode [ 24.422470][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.429558][ T3275] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.436975][ T3275] bridge_slave_1: entered allmulticast mode [ 24.443232][ T3275] bridge_slave_1: entered promiscuous mode [ 24.470625][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.480064][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.487138][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.513133][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.529326][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.544162][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.557569][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.564532][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.590542][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.606923][ T3275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.617083][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.642230][ T3266] team0: Port device team_slave_0 added [ 24.648865][ T3275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.662218][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.669460][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.676716][ T3265] bridge_slave_0: entered allmulticast mode [ 24.682981][ T3265] bridge_slave_0: entered promiscuous mode [ 24.690175][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.697278][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.704416][ T3265] bridge_slave_1: entered allmulticast mode [ 24.710982][ T3265] bridge_slave_1: entered promiscuous mode [ 24.717564][ T3266] team0: Port device team_slave_1 added [ 24.728022][ T3268] team0: Port device team_slave_0 added [ 24.739059][ T3275] team0: Port device team_slave_0 added [ 24.766457][ T3268] team0: Port device team_slave_1 added [ 24.772719][ T3275] team0: Port device team_slave_1 added [ 24.788278][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.797612][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.804574][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.830587][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.855929][ T3269] hsr_slave_0: entered promiscuous mode [ 24.861843][ T3269] hsr_slave_1: entered promiscuous mode [ 24.868809][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.882548][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.889749][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.915870][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.926970][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.934001][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.960304][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.971272][ T3275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.978303][ T3275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.004606][ T3275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.017122][ T3275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.024142][ T3275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.050207][ T3275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.065957][ T3265] team0: Port device team_slave_0 added [ 25.077889][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.084850][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.110855][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.131845][ T3265] team0: Port device team_slave_1 added [ 25.167729][ T3268] hsr_slave_0: entered promiscuous mode [ 25.173758][ T3268] hsr_slave_1: entered promiscuous mode [ 25.179723][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.187294][ T3268] Cannot create hsr debugfs directory [ 25.202415][ T3275] hsr_slave_0: entered promiscuous mode [ 25.208416][ T3275] hsr_slave_1: entered promiscuous mode [ 25.214361][ T3275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.221941][ T3275] Cannot create hsr debugfs directory [ 25.227654][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.234611][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.260529][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.271720][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.278774][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.304676][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.333091][ T3266] hsr_slave_0: entered promiscuous mode [ 25.339210][ T3266] hsr_slave_1: entered promiscuous mode [ 25.345316][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.352875][ T3266] Cannot create hsr debugfs directory [ 25.386350][ T3265] hsr_slave_0: entered promiscuous mode [ 25.392290][ T3265] hsr_slave_1: entered promiscuous mode [ 25.398462][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.406085][ T3265] Cannot create hsr debugfs directory [ 25.553647][ T3269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.562356][ T3269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.575869][ T3269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.585860][ T3269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.602650][ T3275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.611045][ T3275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.621072][ T3275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.629844][ T3275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.652016][ T3268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.669645][ T3268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.686742][ T3268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.697375][ T3268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.708729][ T3266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.717334][ T3266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.726477][ T3266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.734956][ T3266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.769921][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.779471][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.795218][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.813922][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.837090][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.847479][ T3275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.884726][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.895989][ T3275] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.911102][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.919097][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.926159][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.934657][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.941759][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.955140][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.965476][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.972521][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.981136][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.988187][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.009184][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.027621][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.042356][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.049480][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.059029][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.066098][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.076480][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.083618][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.103453][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.110551][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.132693][ T3269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.143107][ T3269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.168441][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.193033][ T3266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.203488][ T3266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.260847][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.271695][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.280223][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.287308][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.309797][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.316938][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.335912][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.350321][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.360248][ T3265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.370651][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.383155][ T3275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.502023][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.539504][ T3266] veth0_vlan: entered promiscuous mode [ 26.549456][ T3269] veth0_vlan: entered promiscuous mode [ 26.568004][ T3266] veth1_vlan: entered promiscuous mode [ 26.587123][ T3275] veth0_vlan: entered promiscuous mode [ 26.601591][ T3275] veth1_vlan: entered promiscuous mode [ 26.610006][ T3268] veth0_vlan: entered promiscuous mode [ 26.621399][ T3269] veth1_vlan: entered promiscuous mode [ 26.634626][ T3275] veth0_macvtap: entered promiscuous mode [ 26.644943][ T3275] veth1_macvtap: entered promiscuous mode [ 26.652777][ T3268] veth1_vlan: entered promiscuous mode [ 26.672277][ T3265] veth0_vlan: entered promiscuous mode [ 26.683566][ T3266] veth0_macvtap: entered promiscuous mode [ 26.691665][ T3266] veth1_macvtap: entered promiscuous mode [ 26.702485][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.714262][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.726290][ T3265] veth1_vlan: entered promiscuous mode [ 26.733303][ T3275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.742082][ T3275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.750913][ T3275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.759754][ T3275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.771098][ T3269] veth0_macvtap: entered promiscuous mode [ 26.778938][ T3268] veth0_macvtap: entered promiscuous mode [ 26.787114][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.797596][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.808316][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.816534][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.827061][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.838116][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.846636][ T3266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.855510][ T3266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.864212][ T3266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.873308][ T3266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.890801][ T3268] veth1_macvtap: entered promiscuous mode [ 26.902816][ T3269] veth1_macvtap: entered promiscuous mode [ 26.921520][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.931995][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.942021][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.952464][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.963300][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.971175][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.981764][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.991683][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.002167][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.012776][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.023463][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.034284][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.048998][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.059617][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.069499][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.079934][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.093095][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.104961][ T3265] veth0_macvtap: entered promiscuous mode [ 27.112707][ T3266] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.113132][ T3269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.136068][ T3269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.144791][ T3269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.153573][ T3269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.164452][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.174991][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.184872][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.195342][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.205359][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.215785][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.226621][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.234891][ T3268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.243792][ T3268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.252691][ T3268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.261451][ T3268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.275615][ T3265] veth1_macvtap: entered promiscuous mode [ 27.309123][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.320317][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.330165][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.340620][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.350005][ T3411] loop2: detected capacity change from 0 to 512 [ 27.350509][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.367584][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.377398][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.387834][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.402362][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.406802][ T3411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.425441][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 27.425455][ T29] audit: type=1400 audit(1729776598.831:128): avc: denied { mount } for pid=3410 comm="syz.2.6" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.426981][ T3411] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.465187][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.475649][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.485487][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.487171][ T29] audit: type=1400 audit(1729776598.891:129): avc: denied { create } for pid=3416 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.495909][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.495920][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.535382][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.545475][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.555986][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.569233][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.576951][ T29] audit: type=1400 audit(1729776598.921:130): avc: denied { connect } for pid=3416 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.581702][ T3411] EXT4-fs (loop2): shut down requested (0) [ 27.596540][ T29] audit: type=1400 audit(1729776598.971:131): avc: denied { create } for pid=3418 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.598311][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.630228][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.639102][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.647875][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.657457][ T29] audit: type=1400 audit(1729776598.981:132): avc: denied { write } for pid=3410 comm="syz.2.6" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.679044][ T29] audit: type=1400 audit(1729776598.981:133): avc: denied { add_name } for pid=3410 comm="syz.2.6" name="blkio.bfq.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.701606][ T29] audit: type=1400 audit(1729776598.981:134): avc: denied { create } for pid=3410 comm="syz.2.6" name="blkio.bfq.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.723732][ T29] audit: type=1400 audit(1729776598.981:135): avc: denied { read append open } for pid=3410 comm="syz.2.6" path="/1/bus/blkio.bfq.io_service_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.748633][ T29] audit: type=1400 audit(1729776598.981:136): avc: denied { ioctl } for pid=3410 comm="syz.2.6" path="/1/bus/blkio.bfq.io_service_bytes" dev="loop2" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.773973][ T29] audit: type=1400 audit(1729776599.061:137): avc: denied { read write } for pid=3418 comm="syz.1.8" name="rdma_cm" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.799563][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.966290][ T3437] loop1: detected capacity change from 0 to 1024 [ 27.997038][ T3437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.011698][ T3444] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 28.017645][ T3448] loop3: detected capacity change from 0 to 1024 [ 28.032640][ T3448] EXT4-fs: Ignoring removed oldalloc option [ 28.048566][ T3448] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 28.080163][ T3454] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.107075][ T3275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.119637][ T3448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.170284][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.328646][ T3489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36'. [ 28.438391][ T3502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'. [ 28.496845][ T3509] loop4: detected capacity change from 0 to 512 [ 28.509373][ T3509] ======================================================= [ 28.509373][ T3509] WARNING: The mand mount option has been deprecated and [ 28.509373][ T3509] and is ignored by this kernel. Remove the mand [ 28.509373][ T3509] option from the mount to silence this warning. [ 28.509373][ T3509] ======================================================= [ 28.545933][ T3509] EXT4-fs: inline encryption not supported [ 28.557231][ T3509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.566018][ T3509] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 28.593237][ T3512] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 28.604758][ T3509] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.44: bg 0: block 64: padding at end of block bitmap is not set [ 28.621815][ T3509] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.44: Failed to acquire dquot type 0 [ 28.633756][ T3509] EXT4-fs (loop4): 1 truncate cleaned up [ 28.640978][ T3509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.643377][ T3515] loop2: detected capacity change from 0 to 1024 [ 28.669072][ T3509] syz.4.44 (3509) used greatest stack depth: 9344 bytes left [ 28.683658][ T3515] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 28.696689][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.720951][ T3515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.774245][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.851639][ T3525] loop3: detected capacity change from 0 to 8192 [ 28.926867][ T3537] loop3: detected capacity change from 0 to 512 [ 28.927108][ T3536] loop2: detected capacity change from 0 to 512 [ 28.951317][ T3250] udevd[3250]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 28.972096][ T3259] udevd[3259]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 29.005124][ T3537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.018383][ T3539] loop0: detected capacity change from 0 to 128 [ 29.025359][ T3537] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.036667][ T3536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.046146][ T3537] syz.3.55[3537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.049358][ T3536] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.052682][ T3537] syz.3.55[3537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.102772][ T3537] syz.3.55[3537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.128373][ T3539] syz.0.57: attempt to access beyond end of device [ 29.128373][ T3539] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 29.190007][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.200103][ T3379] kworker/u8:7: attempt to access beyond end of device [ 29.200103][ T3379] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 29.275567][ T3259] udevd[3259]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 29.295300][ T3537] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.55: corrupted inode contents [ 29.319239][ T3551] loop0: detected capacity change from 0 to 512 [ 29.320540][ T3537] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #19: comm syz.3.55: mark_inode_dirty error [ 29.349195][ T3537] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #19: comm syz.3.55: corrupted inode contents [ 29.362636][ T3537] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.55: mark_inode_dirty error [ 29.377746][ C0] ------------[ cut here ]------------ [ 29.378241][ T3537] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.55: mark inode dirty (error -117) [ 29.383225][ C0] refcount_t: underflow; use-after-free. [ 29.383448][ C0] WARNING: CPU: 0 PID: 15 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 29.397250][ T3537] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 29.401200][ C0] Modules linked in: [ 29.413831][ T3259] udevd[3259]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 29.419412][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 29.445358][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 29.450715][ T3562] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET) [ 29.455607][ C0] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 29.462569][ T3551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.467882][ C0] Code: 72 ff ff ff e8 9b 83 71 ff 48 c7 c7 fe d6 b2 86 e8 3f 6a 8a ff c6 05 d6 2c f4 04 01 90 48 c7 c7 5a a4 1b 86 e8 ab 49 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 6c 83 71 ff 48 c7 c7 fb d6 b2 86 e8 [ 29.482932][ T3551] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.500074][ C0] RSP: 0018:ffffc900000879e8 EFLAGS: 00010246 [ 29.500099][ C0] RAX: 91b5451ae3b43900 RBX: ffff888103b5fae4 RCX: ffff8881001c8000 [ 29.500111][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.500123][ C0] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 29.500135][ C0] R10: 0001ffffffffffff R11: 0001c900000878e0 R12: 0000000000000001 [ 29.500148][ C0] R13: ffff888116677400 R14: ffff888103b5fae4 R15: 0000000000000000 [ 29.500174][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 29.555426][ T3557] loop4: detected capacity change from 0 to 1024 [ 29.556555][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.570781][ T3557] EXT4-fs: Ignoring removed orlov option [ 29.571897][ C0] CR2: 0000000020001000 CR3: 0000000115f3e000 CR4: 00000000003506f0 [ 29.578528][ T3557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.584107][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.597072][ T3259] udevd[3259]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 29.598704][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.625767][ T3557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.626040][ C0] Call Trace: [ 29.641460][ C0] [ 29.644189][ T3557] process 'syz.4.64' launched './file0/file0' with NULL argv: empty string added [ 29.644520][ C0] ? __warn+0x141/0x350 [ 29.657797][ C0] ? report_bug+0x315/0x420 [ 29.662417][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 29.667965][ C0] ? handle_bug+0x60/0x90 [ 29.672352][ C0] ? exc_invalid_op+0x1a/0x50 [ 29.677042][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 29.682103][ C0] ? __warn_printk+0x167/0x1b0 [ 29.686914][ C0] ? refcount_warn_saturate+0x1c6/0x230 [ 29.692515][ C0] ? refcount_warn_saturate+0x1c5/0x230 [ 29.698077][ C0] sk_skb_reason_drop+0xe9/0x290 [ 29.703040][ C0] j1939_xtp_rx_cts+0x3c4/0x6c0 [ 29.707924][ C0] j1939_tp_recv+0x699/0xa80 [ 29.712524][ C0] j1939_can_recv+0x45f/0x550 [ 29.717210][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 29.722451][ C0] can_rcv_filter+0x225/0x4c0 [ 29.727151][ C0] can_receive+0x182/0x1f0 [ 29.731613][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 29.736159][ C0] can_rcv+0xe7/0x180 [ 29.740168][ C0] ? __pfx_can_rcv+0x10/0x10 [ 29.744769][ C0] __netif_receive_skb+0x123/0x280 [ 29.749915][ C0] process_backlog+0x22e/0x440 [ 29.754726][ C0] __napi_poll+0x63/0x3c0 [ 29.759081][ C0] ? net_rx_action+0x376/0x7f0 [ 29.763864][ C0] net_rx_action+0x3a1/0x7f0 [ 29.768518][ C0] handle_softirqs+0xbf/0x280 [ 29.773229][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 29.778350][ C0] run_ksoftirqd+0x1c/0x30 [ 29.782782][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 29.787901][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 29.793389][ C0] kthread+0x1d1/0x210 [ 29.797473][ C0] ? __pfx_kthread+0x10/0x10 [ 29.802094][ C0] ret_from_fork+0x4b/0x60 [ 29.806528][ C0] ? __pfx_kthread+0x10/0x10 [ 29.811124][ C0] ret_from_fork_asm+0x1a/0x30 [ 29.815904][ C0] [ 29.818931][ C0] ---[ end trace 0000000000000000 ]--- [ 29.829146][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.838642][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.849011][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.860608][ T3259] udevd[3259]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 29.863863][ T3571] loop3: detected capacity change from 0 to 164 [ 29.880960][ T3259] udevd[3259]: symlink '../../loop3' '/dev/disk/by-label/CDROM.tmp-b7:3' failed: Read-only file system [ 29.893006][ T3571] Unable to read rock-ridge attributes [ 29.893959][ T3259] udevd[3259]: symlink '../../loop3' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:3' failed: Read-only file system [ 29.931412][ T3425] udevd[3425]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 29.937906][ T3259] udevd[3259]: symlink '../../loop3' '/dev/disk/by-label/CDROM.tmp-b7:3' failed: Read-only file system [ 29.957899][ T3575] loop7: detected capacity change from 0 to 16384 [ 29.965268][ T3575] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.991409][ T3579] dvmrp0: entered allmulticast mode [ 29.997441][ T3579] dvmrp0: left allmulticast mode [ 30.024951][ T3584] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 30.034595][ T3584] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 30.039937][ T3586] loop2: detected capacity change from 0 to 512 [ 30.042972][ T3584] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 30.057404][ T3586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.058034][ T3584] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 30.074947][ T3584] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 30.083360][ T3584] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 30.083377][ T3586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.091735][ T3584] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 30.104611][ T3586] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.112535][ T3584] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 30.131317][ T3584] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 30.131337][ T3584] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 30.131354][ T3584] Buffer I/O error on dev loop7, logical block 9, lost async page write [ 30.195828][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.213164][ T3597] netlink: 'syz.2.76': attribute type 4 has an invalid length. [ 30.233121][ T3599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.242021][ T3599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.256330][ T3599] loop2: detected capacity change from 0 to 512 [ 30.263054][ T3599] EXT4-fs: Ignoring removed oldalloc option [ 30.274844][ T3599] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.287935][ T3599] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.299099][ T3599] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 30.312224][ T3599] EXT4-fs (loop2): 1 truncate cleaned up [ 30.318231][ T3599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.385410][ T3602] loop3: detected capacity change from 0 to 1024 [ 30.392125][ T3602] EXT4-fs: Ignoring removed orlov option [ 30.397787][ T3602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.411793][ T3602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.435322][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.483203][ T3613] Zero length message leads to an empty skb [ 30.553693][ C0] vcan0: j1939_tp_rxtimer: 0xffff888116677400: rx timeout, send abort [ 30.561934][ C0] vcan0: j1939_tp_rxtimer: 0xffff888116677600: rx timeout, send abort [ 30.570177][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888116677400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 30.584582][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888116677600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 30.628318][ T3627] loop3: detected capacity change from 0 to 128 [ 30.646164][ T3627] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.658684][ T3627] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.679565][ T3269] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.695592][ T3631] loop3: detected capacity change from 0 to 128 [ 30.705082][ T3631] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.717446][ T3631] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.763279][ T3634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.774223][ T3634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.787012][ T3634] loop4: detected capacity change from 0 to 512 [ 30.793476][ T3634] EXT4-fs: Ignoring removed oldalloc option [ 30.801038][ T3634] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 30.801741][ T3269] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.827412][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.837026][ T3634] EXT4-fs (loop4): 1 truncate cleaned up [ 30.843129][ T3634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.058803][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 31.065010][ T3653] loop0: detected capacity change from 0 to 2048 [ 31.068903][ T3657] Invalid ELF header type: 0 != 1 [ 31.108835][ T3653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.135201][ T3665] loop7: detected capacity change from 0 to 16384 [ 31.147115][ T3665] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 31.158460][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.207813][ T3673] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 31.297347][ T3672] loop1: detected capacity change from 0 to 1024 [ 31.304148][ T3672] EXT4-fs: Ignoring removed orlov option [ 31.309890][ T3672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.336485][ T3672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.360157][ T3275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.378902][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.410901][ T3688] loop0: detected capacity change from 0 to 256 [ 31.426570][ T3688] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 31.504013][ T3703] loop0: detected capacity change from 0 to 164 [ 31.525265][ T3705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.538491][ T3705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.550511][ T3708] loop4: detected capacity change from 0 to 512 [ 31.563226][ T3708] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.564075][ T3705] loop1: detected capacity change from 0 to 512 [ 31.574709][ T3708] EXT4-fs (loop4): 1 truncate cleaned up [ 31.591545][ T3708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.596472][ T3705] EXT4-fs: Ignoring removed oldalloc option [ 31.613646][ T3705] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.650245][ T3705] EXT4-fs (loop1): 1 truncate cleaned up [ 31.653140][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.656583][ T3705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.706973][ T3718] syz.0.121[3718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.707053][ T3718] syz.0.121[3718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.718458][ T3718] syz.0.121[3718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.848269][ T3749] loop4: detected capacity change from 0 to 512 [ 31.882275][ T3749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.900203][ T3754] loop0: detected capacity change from 0 to 1024 [ 31.901262][ T3749] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.906878][ T3754] EXT4-fs: Ignoring removed orlov option [ 31.922716][ T3754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.950981][ T3754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.954527][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.008741][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.049641][ T3768] loop0: detected capacity change from 0 to 512 [ 32.056934][ T3768] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.068961][ T3768] EXT4-fs (loop0): 1 truncate cleaned up [ 32.075132][ T3768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.107332][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.164011][ T3778] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=3778 comm=syz.0.140 [ 32.181484][ T3275] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.200206][ T3781] loop0: detected capacity change from 0 to 512 [ 32.215165][ T3781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.223726][ T3787] loop1: detected capacity change from 0 to 164 [ 32.228035][ T3781] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.237723][ T3786] loop4: detected capacity change from 0 to 512 [ 32.260212][ T3781] syz.0.142[3781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.260317][ T3781] syz.0.142[3781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.272221][ T3781] syz.0.142[3781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.293787][ T3786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.299757][ T3791] loop7: detected capacity change from 0 to 16384 [ 32.305424][ T3786] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.320110][ T3791] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 32.337281][ T3786] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.143: path /27/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 32.364851][ T3786] EXT4-fs (loop4): Remounting filesystem read-only [ 32.365804][ T3792] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.142: corrupted inode contents [ 32.384304][ T3792] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #19: comm syz.0.142: mark_inode_dirty error [ 32.396861][ T3792] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.142: corrupted inode contents [ 32.397024][ T3794] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 32.416998][ T3792] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.142: mark_inode_dirty error [ 32.432310][ T3792] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.142: mark inode dirty (error -117) [ 32.445198][ T3792] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 32.481168][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.567267][ T3800] loop3: detected capacity change from 0 to 128 [ 32.596763][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 32.596777][ T29] audit: type=1326 audit(1729776604.114:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef067dff9 code=0x7ffc0000 [ 32.626527][ T29] audit: type=1326 audit(1729776604.114:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9ef067dff9 code=0x7ffc0000 [ 32.643202][ T3800] syz.3.148: attempt to access beyond end of device [ 32.643202][ T3800] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 32.649723][ T29] audit: type=1326 audit(1729776604.114:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef067dff9 code=0x7ffc0000 [ 32.686564][ T29] audit: type=1326 audit(1729776604.114:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9ef067dff9 code=0x7ffc0000 [ 32.699242][ T3799] syz.3.148: attempt to access beyond end of device [ 32.699242][ T3799] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 32.709855][ T29] audit: type=1326 audit(1729776604.114:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef067dff9 code=0x7ffc0000 [ 32.726709][ T3800] syz.3.148: attempt to access beyond end of device [ 32.726709][ T3800] loop3: rw=0, sector=177, nr_sectors = 1 limit=128 [ 32.747144][ T29] audit: type=1326 audit(1729776604.114:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ef067dff9 code=0x7ffc0000 [ 32.783357][ T29] audit: type=1326 audit(1729776604.114:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef067dff9 code=0x7ffc0000 [ 32.815132][ T29] audit: type=1326 audit(1729776604.155:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ef067dff9 code=0x7ffc0000 [ 32.838623][ T29] audit: type=1326 audit(1729776604.155:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef067dff9 code=0x7ffc0000 [ 32.861894][ T29] audit: type=1326 audit(1729776604.155:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3797 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef067dff9 code=0x7ffc0000 [ 32.972830][ T3814] loop0: detected capacity change from 0 to 1024 [ 33.005970][ T3814] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 33.080935][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.105946][ T3825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.116527][ T3814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.146664][ T3825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.200829][ T3825] loop2: detected capacity change from 0 to 512 [ 33.218607][ T3825] EXT4-fs: Ignoring removed oldalloc option [ 33.228040][ T3825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.253126][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.278126][ T3825] EXT4-fs (loop2): 1 truncate cleaned up [ 33.278794][ T3835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 33.289530][ T3825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.307161][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.341942][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.378645][ T3838] loop4: detected capacity change from 0 to 512 [ 33.385665][ T3838] EXT4-fs: Ignoring removed oldalloc option [ 33.393948][ T3838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.405097][ T3838] EXT4-fs (loop4): 1 truncate cleaned up [ 33.411094][ T3838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.501808][ T3856] loop7: detected capacity change from 0 to 16384 [ 33.508517][ T3856] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 33.541641][ T3861] loop3: detected capacity change from 0 to 1024 [ 33.548266][ T3861] EXT4-fs: Ignoring removed orlov option [ 33.554004][ T3861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.568498][ T3862] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 33.590265][ T3861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.612864][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.623974][ T2968] ================================================================== [ 33.632073][ T2968] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 33.638851][ T2968] [ 33.641158][ T2968] write to 0xffff888102184620 of 8 bytes by task 3269 on cpu 0: [ 33.648854][ T2968] inc_diskseq+0x2c/0x40 [ 33.653086][ T2968] disk_force_media_change+0x9f/0xf0 [ 33.658353][ T2968] lo_release+0x2ca/0x400 [ 33.662693][ T2968] bdev_release+0x3c6/0x420 [ 33.667181][ T2968] blkdev_release+0x15/0x20 [ 33.671665][ T2968] __fput+0x17a/0x6d0 [ 33.675629][ T2968] __fput_sync+0x43/0x60 [ 33.679859][ T2968] __se_sys_close+0xf9/0x1a0 [ 33.684792][ T2968] __x64_sys_close+0x1f/0x30 [ 33.689368][ T2968] x64_sys_call+0x25cb/0x2d60 [ 33.694034][ T2968] do_syscall_64+0xc9/0x1c0 [ 33.698518][ T2968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.704396][ T2968] [ 33.706703][ T2968] read to 0xffff888102184620 of 8 bytes by task 2968 on cpu 1: [ 33.714227][ T2968] block_uevent+0x31/0x50 [ 33.718544][ T2968] dev_uevent+0x2fd/0x380 [ 33.722855][ T2968] uevent_show+0x10c/0x1f0 [ 33.727249][ T2968] dev_attr_show+0x3a/0xa0 [ 33.731658][ T2968] sysfs_kf_seq_show+0x17c/0x250 [ 33.731679][ T2968] kernfs_seq_show+0x7c/0x90 [ 33.741181][ T2968] seq_read_iter+0x2d1/0x930 [ 33.741204][ T2968] kernfs_fop_read_iter+0xc0/0x310 [ 33.750870][ T2968] vfs_read+0x5f6/0x720 [ 33.755013][ T2968] ksys_read+0xeb/0x1b0 [ 33.759174][ T2968] __x64_sys_read+0x42/0x50 [ 33.763702][ T2968] x64_sys_call+0x27d3/0x2d60 [ 33.768383][ T2968] do_syscall_64+0xc9/0x1c0 [ 33.772869][ T2968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.778757][ T2968] [ 33.781064][ T2968] value changed: 0x0000000000000053 -> 0x0000000000000054 [ 33.788241][ T2968] [ 33.790547][ T2968] Reported by Kernel Concurrency Sanitizer on: [ 33.796778][ T2968] CPU: 1 UID: 0 PID: 2968 Comm: udevd Tainted: G W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 33.808476][ T2968] Tainted: [W]=WARN [ 33.812257][ T2968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 33.822301][ T2968] ================================================================== [ 33.836000][ T3259] udevd[3259]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 34.133259][ T3266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.133783][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.157377][ T3259] udevd[3259]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system