last executing test programs: 33.113797893s ago: executing program 1 (id=384): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) 32.983101485s ago: executing program 1 (id=391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xfffbffec, 0x294, 0x40, 0x3e5, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe2, 0x1, 0x3}], "", ['\x00']}, 0x178) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 32.912388576s ago: executing program 1 (id=395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2440, 0x0) fcntl$setlease(r2, 0x400, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) 32.874662537s ago: executing program 1 (id=398): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0xc010, 0x0) 32.839093567s ago: executing program 1 (id=400): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000120000f1850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) close(r1) 32.584360751s ago: executing program 1 (id=407): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) 32.577731141s ago: executing program 32 (id=407): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) 13.677047605s ago: executing program 0 (id=1039): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 12.804317178s ago: executing program 0 (id=1063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0xf, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xffffffff}, @TCA_FLOW_POLICE={0x48, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffff05}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x35db}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x8}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, 0x0, &(0x7f0000000080)) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc800) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r7, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x5c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8014) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffffff8]}, 0x8, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f00000024c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r9}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000340)=""/107, 0x6b, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x3}, 0x1}, 0x18) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 12.492776643s ago: executing program 0 (id=1076): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 12.428802784s ago: executing program 0 (id=1077): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0x2) 12.303260995s ago: executing program 0 (id=1078): r0 = open(0x0, 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x8001, 0x4, 0xd92, 0x0, 0x2401}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0x6e, 0x4) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x48}}, 0x0) 12.091293019s ago: executing program 0 (id=1086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 12.075524099s ago: executing program 33 (id=1086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.377966209s ago: executing program 6 (id=1368): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.32079317s ago: executing program 6 (id=1360): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='pagemap\x00') 1.220771832s ago: executing program 3 (id=1364): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.105380833s ago: executing program 3 (id=1367): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x3}, 0x4100, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 1.068530644s ago: executing program 3 (id=1369): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_delroute={0x14, 0x19, 0x400, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x3}}, 0x14}}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1.003888365s ago: executing program 2 (id=1372): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2, 0x0, 0x8}, 0x18) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/47, 0x2f) 968.738986ms ago: executing program 3 (id=1373): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="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", 0x402}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)='9', 0x1}], 0x1}}], 0x2, 0xc010) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000480)=""/161, 0xa1}], 0x4}, 0xfe}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/250, 0xc4}], 0x2}, 0xff}], 0x2, 0x141, 0x0) 921.293966ms ago: executing program 2 (id=1374): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 920.898336ms ago: executing program 5 (id=1375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001240)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000016c0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14, 0x7}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x28, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010120, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b7046"}}, 0x36) 920.441856ms ago: executing program 3 (id=1377): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) 858.619107ms ago: executing program 2 (id=1378): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0xfff) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) 718.759229ms ago: executing program 5 (id=1380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 718.370299ms ago: executing program 2 (id=1381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r2, r3, 0x0) 685.96867ms ago: executing program 5 (id=1382): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 641.86722ms ago: executing program 4 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 539.116542ms ago: executing program 4 (id=1384): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000e40)={{0xcc, 0x21, 0x2, 0x373, 0x389, 0x23, 0x68, 0x5}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 538.035602ms ago: executing program 2 (id=1394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000c1d8000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 519.508173ms ago: executing program 5 (id=1385): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x63) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 491.662453ms ago: executing program 5 (id=1386): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) pipe2$9p(&(0x7f0000000240), 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 410.409504ms ago: executing program 6 (id=1387): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248080, &(0x7f0000000340), 0x0, 0x5fd, &(0x7f00000004c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 409.576944ms ago: executing program 4 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000001700)=""/47}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x10, 0x0, {0xa, 0x4e20, 0x0, @loopback, 0x5}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 285.948416ms ago: executing program 6 (id=1389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x16}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20040044) 285.574886ms ago: executing program 4 (id=1390): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x2}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) getrandom(0x0, 0x0, 0x0) 94.560629ms ago: executing program 6 (id=1391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x800000009) 78.441259ms ago: executing program 4 (id=1392): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) mprotect(&(0x7f0000af8000/0x1000)=nil, 0x1000, 0x1000000) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) mmap(&(0x7f000093e000/0x3000)=nil, 0x3000, 0x0, 0x10010, 0xffffffffffffffff, 0x98173000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 51.05089ms ago: executing program 6 (id=1393): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xaf1d, 0x0, 0x44, 0x1a7}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xd}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x100000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x0) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 50.53183ms ago: executing program 5 (id=1395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000001240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 49.42763ms ago: executing program 2 (id=1396): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x2ffb, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xb) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) 49.16759ms ago: executing program 3 (id=1397): syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x90f, 0x12, 0x2, 0x0}) r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x80a, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 0s ago: executing program 4 (id=1398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.203' (ED25519) to the list of known hosts. [ 25.137390][ T29] audit: type=1400 audit(1752767166.631:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.138262][ T3293] cgroup: Unknown subsys name 'net' [ 25.160207][ T29] audit: type=1400 audit(1752767166.631:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.187604][ T29] audit: type=1400 audit(1752767166.661:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.359335][ T3293] cgroup: Unknown subsys name 'cpuset' [ 25.365575][ T3293] cgroup: Unknown subsys name 'rlimit' [ 25.476436][ T29] audit: type=1400 audit(1752767166.971:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.500367][ T29] audit: type=1400 audit(1752767166.971:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.525374][ T29] audit: type=1400 audit(1752767166.971:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.528764][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.545931][ T29] audit: type=1400 audit(1752767166.971:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.575402][ T29] audit: type=1400 audit(1752767166.981:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.595561][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.600322][ T29] audit: type=1400 audit(1752767166.991:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.634228][ T29] audit: type=1400 audit(1752767167.061:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.484964][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 27.523168][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 27.554927][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 27.563537][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.596378][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.603589][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.610953][ T3302] bridge_slave_0: entered allmulticast mode [ 27.617825][ T3302] bridge_slave_0: entered promiscuous mode [ 27.637623][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.644794][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.652364][ T3302] bridge_slave_1: entered allmulticast mode [ 27.658746][ T3302] bridge_slave_1: entered promiscuous mode [ 27.691797][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 27.706466][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.730975][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.745436][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.752617][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.759907][ T3304] bridge_slave_0: entered allmulticast mode [ 27.766470][ T3304] bridge_slave_0: entered promiscuous mode [ 27.781733][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.788816][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.795889][ T3308] bridge_slave_0: entered allmulticast mode [ 27.802893][ T3308] bridge_slave_0: entered promiscuous mode [ 27.814366][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.821755][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.829497][ T3304] bridge_slave_1: entered allmulticast mode [ 27.835859][ T3304] bridge_slave_1: entered promiscuous mode [ 27.850907][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.858100][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.865472][ T3308] bridge_slave_1: entered allmulticast mode [ 27.871821][ T3308] bridge_slave_1: entered promiscuous mode [ 27.878745][ T3302] team0: Port device team_slave_0 added [ 27.897646][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.904887][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.912055][ T3310] bridge_slave_0: entered allmulticast mode [ 27.918929][ T3310] bridge_slave_0: entered promiscuous mode [ 27.925544][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.932731][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.940253][ T3310] bridge_slave_1: entered allmulticast mode [ 27.946572][ T3310] bridge_slave_1: entered promiscuous mode [ 27.953345][ T3302] team0: Port device team_slave_1 added [ 27.980056][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.995539][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.011806][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.022874][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.032187][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.039216][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.065226][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.077642][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.101932][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.111359][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.118681][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.144822][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.175030][ T3308] team0: Port device team_slave_0 added [ 28.181334][ T3304] team0: Port device team_slave_0 added [ 28.187132][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.194383][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.202235][ T3303] bridge_slave_0: entered allmulticast mode [ 28.208590][ T3303] bridge_slave_0: entered promiscuous mode [ 28.221235][ T3310] team0: Port device team_slave_0 added [ 28.227635][ T3310] team0: Port device team_slave_1 added [ 28.239213][ T3308] team0: Port device team_slave_1 added [ 28.251906][ T3304] team0: Port device team_slave_1 added [ 28.258046][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.265234][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.272946][ T3303] bridge_slave_1: entered allmulticast mode [ 28.279701][ T3303] bridge_slave_1: entered promiscuous mode [ 28.322390][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.331717][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.338690][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.364742][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.376543][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.383609][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.409925][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.420788][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.427731][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.453884][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.467342][ T3302] hsr_slave_0: entered promiscuous mode [ 28.473361][ T3302] hsr_slave_1: entered promiscuous mode [ 28.480028][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.494346][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.501346][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.527448][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.538355][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.545534][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.571606][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.584822][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.591858][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.617777][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.643127][ T3303] team0: Port device team_slave_0 added [ 28.665592][ T3303] team0: Port device team_slave_1 added [ 28.683444][ T3308] hsr_slave_0: entered promiscuous mode [ 28.689467][ T3308] hsr_slave_1: entered promiscuous mode [ 28.695210][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.704010][ T3308] Cannot create hsr debugfs directory [ 28.714615][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.722143][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.748189][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.759425][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.766372][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.792344][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.828295][ T3304] hsr_slave_0: entered promiscuous mode [ 28.834338][ T3304] hsr_slave_1: entered promiscuous mode [ 28.840325][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.847863][ T3304] Cannot create hsr debugfs directory [ 28.869010][ T3310] hsr_slave_0: entered promiscuous mode [ 28.875107][ T3310] hsr_slave_1: entered promiscuous mode [ 28.881060][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.888745][ T3310] Cannot create hsr debugfs directory [ 28.905248][ T3303] hsr_slave_0: entered promiscuous mode [ 28.911469][ T3303] hsr_slave_1: entered promiscuous mode [ 28.917305][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.924938][ T3303] Cannot create hsr debugfs directory [ 29.087314][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.112988][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.123794][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.136395][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.160584][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.188847][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.199459][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.211852][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.221176][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.230017][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.252263][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.263985][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.273232][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.285022][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.294870][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.303615][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.316361][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.345544][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.363219][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.389636][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.401367][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.408465][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.419498][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.432834][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.443202][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.450348][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.483444][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.498070][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.520577][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.539570][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.546886][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.560680][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.580093][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.587223][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.607869][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.619518][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.627516][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.638087][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.657759][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.669782][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.676912][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.687840][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.694969][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.715971][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.726415][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.741677][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.748882][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.769402][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.776937][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.813342][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.837040][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.847518][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.876290][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.887536][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.902316][ T3302] veth0_vlan: entered promiscuous mode [ 29.911232][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.924903][ T3302] veth1_vlan: entered promiscuous mode [ 29.956633][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.963802][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.973289][ T3302] veth0_macvtap: entered promiscuous mode [ 29.987285][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.997949][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.005080][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.036984][ T3308] veth0_vlan: entered promiscuous mode [ 30.047991][ T3302] veth1_macvtap: entered promiscuous mode [ 30.061841][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.072470][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.086770][ T3308] veth1_vlan: entered promiscuous mode [ 30.113001][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.127779][ T3304] veth0_vlan: entered promiscuous mode [ 30.137284][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.146629][ T3304] veth1_vlan: entered promiscuous mode [ 30.169335][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.178079][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.187039][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.195998][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.222453][ T3304] veth0_macvtap: entered promiscuous mode [ 30.230117][ T3308] veth0_macvtap: entered promiscuous mode [ 30.236647][ T3304] veth1_macvtap: entered promiscuous mode [ 30.252674][ T3310] veth0_vlan: entered promiscuous mode [ 30.260839][ T3308] veth1_macvtap: entered promiscuous mode [ 30.271769][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.281084][ T3310] veth1_vlan: entered promiscuous mode [ 30.293596][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.302064][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 30.302073][ T29] audit: type=1400 audit(1752767171.801:81): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.COvn0Q/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.330148][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.343420][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.352594][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.361551][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.370378][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.371130][ T29] audit: type=1400 audit(1752767171.811:82): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.401557][ T29] audit: type=1400 audit(1752767171.811:83): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.COvn0Q/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.427279][ T29] audit: type=1400 audit(1752767171.811:84): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.435107][ T3310] veth0_macvtap: entered promiscuous mode [ 30.452151][ T29] audit: type=1400 audit(1752767171.811:85): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.COvn0Q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.476550][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.486531][ T29] audit: type=1400 audit(1752767171.811:86): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.COvn0Q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=1990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.522758][ T29] audit: type=1400 audit(1752767171.811:87): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.543258][ T29] audit: type=1400 audit(1752767171.871:88): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.566397][ T29] audit: type=1400 audit(1752767171.871:89): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=4042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.593389][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.594031][ T3310] veth1_macvtap: entered promiscuous mode [ 30.616467][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.635771][ T29] audit: type=1400 audit(1752767172.131:90): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.636587][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.669889][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.679322][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.688468][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.731856][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.760087][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.783715][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.792682][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.801905][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.810852][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.945775][ T3303] veth0_vlan: entered promiscuous mode [ 30.957986][ T3488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.989706][ T3303] veth1_vlan: entered promiscuous mode [ 31.045519][ T3303] veth0_macvtap: entered promiscuous mode [ 31.065384][ T3488] Zero length message leads to an empty skb [ 31.067527][ T3303] veth1_macvtap: entered promiscuous mode [ 31.087095][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.111673][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.138328][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.148180][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.157803][ T3502] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 31.158560][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.175079][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.285466][ T3513] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.299178][ T3511] Falling back ldisc for ttyS3. [ 31.310384][ T3515] serio: Serial port ptm0 [ 31.372502][ T3525] Cannot find del_set index 0 as target [ 31.492544][ T3540] netem: change failed [ 31.531153][ T3542] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 31.559584][ T3546] loop0: detected capacity change from 0 to 1024 [ 31.575921][ T3546] ======================================================= [ 31.575921][ T3546] WARNING: The mand mount option has been deprecated and [ 31.575921][ T3546] and is ignored by this kernel. Remove the mand [ 31.575921][ T3546] option from the mount to silence this warning. [ 31.575921][ T3546] ======================================================= [ 31.650882][ T3546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.723284][ T3557] syzkaller1: entered promiscuous mode [ 31.728863][ T3557] syzkaller1: entered allmulticast mode [ 31.771238][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.837530][ T3561] loop0: detected capacity change from 0 to 1024 [ 31.866786][ T3561] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.892013][ T3561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.930577][ T3569] syz.3.40 (3569) used greatest stack depth: 10880 bytes left [ 31.973882][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.994028][ T3573] smc: net device bond0 applied user defined pnetid SYZ2 [ 32.003266][ T3573] smc: net device bond0 erased user defined pnetid SYZ2 [ 32.014900][ T3575] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 32.117833][ C1] hrtimer: interrupt took 38321 ns [ 32.135389][ T3587] process 'syz.3.49' launched '/dev/fd/3' with NULL argv: empty string added [ 32.227882][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 32.256479][ T3596] loop3: detected capacity change from 0 to 512 [ 32.264014][ T3598] loop0: detected capacity change from 0 to 8192 [ 32.295332][ T3596] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.53: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 32.321198][ T3302] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 32.329198][ T3302] FAT-fs (loop0): Filesystem has been set read-only [ 32.337424][ T3596] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.53: Bad quota inode: 3, type: 0 [ 32.362867][ T3596] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 32.380368][ T3596] EXT4-fs (loop3): mount failed [ 32.429486][ T3596] SELinux: failed to load policy [ 32.528004][ T3513] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.632740][ T3634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.782134][ T3691] loop4: detected capacity change from 0 to 1024 [ 32.793924][ T3691] EXT4-fs: Ignoring removed nobh option [ 32.799870][ T3691] EXT4-fs: Ignoring removed bh option [ 32.813031][ T3691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.851861][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.438368][ T3733] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.652816][ T3737] syz.2.85 (3737) used greatest stack depth: 10848 bytes left [ 33.666157][ T3513] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.685942][ T3745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'. [ 33.695085][ T3745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'. [ 33.732201][ T3513] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.775691][ T3750] loop0: detected capacity change from 0 to 1024 [ 33.787276][ T3634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.791393][ T3750] EXT4-fs: Ignoring removed bh option [ 33.803885][ T3750] EXT4-fs: inline encryption not supported [ 33.817782][ T3750] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.837244][ T3513] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.847451][ T3750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 33.866138][ T3634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.877566][ T3750] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.88: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.899917][ T3750] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.88: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.916468][ T3513] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.938198][ T3634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.953584][ T3750] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.88: Failed to acquire dquot type 0 [ 33.969944][ T3750] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 33.988304][ T3513] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.018799][ T3750] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.88: mark_inode_dirty error [ 34.034939][ T3513] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.046246][ T3750] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 34.075891][ T3634] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.078303][ T3750] EXT4-fs (loop0): 1 orphan inode deleted [ 34.095670][ T3668] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:49: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.096944][ T3750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.128283][ T3634] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.137399][ T3668] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:49: Failed to release dquot type 0 [ 34.151575][ T3634] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.181426][ T3634] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.373928][ T3743] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.88: lblock 0 mapped to illegal pblock 48 (length 1) [ 34.497694][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.564713][ T3783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.105'. [ 34.573835][ T3783] netlink: 32 bytes leftover after parsing attributes in process `syz.4.105'. [ 34.582749][ T3783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.105'. [ 34.609109][ T3783] netlink: 32 bytes leftover after parsing attributes in process `syz.4.105'. [ 34.674478][ T3789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3789 comm=syz.0.108 [ 34.970947][ T3826] syz.0.125 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.338703][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 35.338720][ T29] audit: type=1107 audit(1752767176.831:249): pid=3855 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 35.359145][ T29] audit: type=1400 audit(1752767176.831:250): avc: denied { create } for pid=3855 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 35.381029][ T29] audit: type=1400 audit(1752767176.831:251): avc: denied { write } for pid=3855 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 35.476748][ T29] audit: type=1400 audit(1752767176.841:252): avc: denied { mounton } for pid=3857 comm="syz.3.138" path="/32/file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.513551][ T3862] loop3: detected capacity change from 0 to 1024 [ 35.543831][ T3862] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 35.555392][ T3862] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 35.575492][ T29] audit: type=1400 audit(1752767177.071:253): avc: denied { read } for pid=3865 comm="syz.1.141" name="event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.598614][ T29] audit: type=1400 audit(1752767177.071:254): avc: denied { open } for pid=3865 comm="syz.1.141" path="/dev/input/event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.624641][ T29] audit: type=1400 audit(1752767177.071:255): avc: denied { ioctl } for pid=3865 comm="syz.1.141" path="/dev/input/event2" dev="devtmpfs" ino=249 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.659251][ T3862] JBD2: no valid journal superblock found [ 35.665075][ T3862] EXT4-fs (loop3): Could not load journal inode [ 35.733582][ T29] audit: type=1400 audit(1752767177.221:256): avc: denied { validate_trans } for pid=3861 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 35.842756][ T29] audit: type=1400 audit(1752767177.341:257): avc: denied { create } for pid=3877 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.904563][ T29] audit: type=1400 audit(1752767177.341:258): avc: denied { bind } for pid=3877 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.064448][ T3893] pim6reg1: entered promiscuous mode [ 36.069922][ T3893] pim6reg1: entered allmulticast mode [ 36.230813][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 36.241675][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 36.396465][ T3936] netlink: 68 bytes leftover after parsing attributes in process `syz.0.174'. [ 36.448419][ T3944] program syz.4.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.458814][ T3848] syz.2.134 (3848) used greatest stack depth: 10712 bytes left [ 36.492092][ T3940] SELinux: failed to load policy [ 36.572159][ T3950] SELinux: ebitmap: truncated map [ 36.581877][ T3950] SELinux: failed to load policy [ 36.649560][ T3965] vhci_hcd: invalid port number 236 [ 36.765268][ T36] kernel write not supported for file /100/clear_refs (pid: 36 comm: kworker/1:1) [ 36.822625][ T3988] xt_hashlimit: max too large, truncated to 1048576 [ 36.830540][ T3986] syzkaller1: entered promiscuous mode [ 36.838583][ T3986] syzkaller1: entered allmulticast mode [ 36.994733][ T3999] loop2: detected capacity change from 0 to 512 [ 37.057427][ T3999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.108890][ T3999] ext4 filesystem being mounted at /32/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.130214][ T4021] SELinux: failed to load policy [ 37.181082][ T4030] devtmpfs: Too few inodes for current use [ 37.233992][ T4037] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 37.294773][ T4046] __nla_validate_parse: 2 callbacks suppressed [ 37.294788][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 37.314063][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.328156][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 37.398797][ T4059] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 37.419341][ T4061] loop1: detected capacity change from 0 to 128 [ 37.441216][ T4061] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 37.449569][ T4061] FAT-fs (loop1): Filesystem has been set read-only [ 37.457425][ T4061] syz.1.230: attempt to access beyond end of device [ 37.457425][ T4061] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 37.457776][ T4066] netlink: 48 bytes leftover after parsing attributes in process `syz.0.233'. [ 37.472769][ T4061] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 37.488811][ T4061] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 37.508215][ T4061] syz.1.230: attempt to access beyond end of device [ 37.508215][ T4061] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.630139][ T4084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 37.655821][ T4084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 37.718586][ T4090] loop1: detected capacity change from 0 to 512 [ 37.727792][ T4090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.750888][ T4090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.764087][ T4090] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.848731][ T4105] SELinux: syz.2.249 (4105) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 38.029251][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.151434][ T4118] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 38.234054][ T4125] mmap: syz.2.259 (4125) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.270033][ T4130] netem: incorrect gi model size [ 38.275501][ T4130] netem: change failed [ 38.290810][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.298412][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.305886][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.322809][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.330479][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.338018][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.345825][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.355438][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.363195][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.371741][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.379631][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.387337][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.395623][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.403766][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.412557][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.422780][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.430370][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.439390][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.446896][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.454324][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.461843][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.469371][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.476839][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.484340][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.492090][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.499785][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.507454][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.515065][ T3368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.524468][ T3368] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 38.802661][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.810759][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.818566][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.826299][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.833902][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.841645][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.849237][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.857669][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.866794][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.870600][ T4177] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 38.874885][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.889799][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.897699][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.909556][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.917181][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.925529][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.934020][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.942172][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.951143][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.958859][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.966776][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.974449][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.982065][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 38.985474][ T4179] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 38.989788][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.007267][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.014927][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.022753][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.030358][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.043594][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 39.065957][ T4181] xt_hashlimit: max too large, truncated to 1048576 [ 39.444127][ T4219] program syz.0.300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.444573][ T4221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.301'. [ 39.494751][ T4224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.302'. [ 39.561629][ T4233] Driver unsupported XDP return value 0 on prog (id 297) dev N/A, expect packet loss! [ 39.574657][ T4234] pim6reg: entered allmulticast mode [ 39.601863][ T4234] pim6reg: left allmulticast mode [ 39.615017][ T4239] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 39.633190][ T4241] loop2: detected capacity change from 0 to 1024 [ 39.650893][ T4241] EXT4-fs: Ignoring removed orlov option [ 39.669158][ T4241] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 39.719047][ T4241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.930587][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.031575][ T4275] loop3: detected capacity change from 0 to 1024 [ 40.053682][ T4275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.107820][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.181778][ T4288] bridge: RTM_NEWNEIGH with invalid ether address [ 40.438516][ T4307] loop2: detected capacity change from 0 to 128 [ 40.466592][ T4307] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 40.475636][ T4307] FAT-fs (loop2): Filesystem has been set read-only [ 40.491977][ T4307] syz.2.338: attempt to access beyond end of device [ 40.491977][ T4307] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 40.506318][ T4307] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 40.514285][ T4307] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 40.524555][ T4307] syz.2.338: attempt to access beyond end of device [ 40.524555][ T4307] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.554451][ T4314] syz.2.338: attempt to access beyond end of device [ 40.554451][ T4314] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 40.567868][ T4314] Buffer I/O error on dev loop2, logical block 2065, async page read [ 40.577521][ T4314] syz.2.338: attempt to access beyond end of device [ 40.577521][ T4314] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 40.590813][ T4314] Buffer I/O error on dev loop2, logical block 2066, async page read [ 40.600332][ T4314] syz.2.338: attempt to access beyond end of device [ 40.600332][ T4314] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 40.613516][ T4314] Buffer I/O error on dev loop2, logical block 2067, async page read [ 40.623956][ T4314] syz.2.338: attempt to access beyond end of device [ 40.623956][ T4314] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 40.637527][ T4314] Buffer I/O error on dev loop2, logical block 2068, async page read [ 40.647552][ T4314] syz.2.338: attempt to access beyond end of device [ 40.647552][ T4314] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 40.662189][ T4314] Buffer I/O error on dev loop2, logical block 2069, async page read [ 40.674267][ T4314] syz.2.338: attempt to access beyond end of device [ 40.674267][ T4314] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 40.687685][ T4314] Buffer I/O error on dev loop2, logical block 2070, async page read [ 40.697721][ T4314] Buffer I/O error on dev loop2, logical block 2071, async page read [ 40.706059][ T4314] Buffer I/O error on dev loop2, logical block 2072, async page read [ 40.715833][ T4307] Buffer I/O error on dev loop2, logical block 2065, async page read [ 40.724532][ T4307] Buffer I/O error on dev loop2, logical block 2066, async page read [ 40.772007][ T4324] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 40.778474][ T4324] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 40.800236][ T4320] loop4: detected capacity change from 0 to 1024 [ 40.828896][ T4320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.858176][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 40.858193][ T29] audit: type=1400 audit(1752767182.341:356): avc: denied { create } for pid=4329 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.884786][ T29] audit: type=1400 audit(1752767182.341:357): avc: denied { setopt } for pid=4329 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.907664][ T4328] loop3: detected capacity change from 0 to 1024 [ 40.969377][ T29] audit: type=1400 audit(1752767182.441:358): avc: denied { connect } for pid=4336 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.988873][ T29] audit: type=1400 audit(1752767182.441:359): avc: denied { write } for pid=4336 comm="syz.0.352" path="socket:[7648]" dev="sockfs" ino=7648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.041102][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.052154][ T4328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.068391][ T29] audit: type=1400 audit(1752767182.571:360): avc: denied { create } for pid=4327 comm="syz.3.349" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.102654][ T4328] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.349: Allocating blocks 449-513 which overlap fs metadata [ 41.134348][ T4341] capability: warning: `syz.4.353' uses deprecated v2 capabilities in a way that may be insecure [ 41.136240][ T29] audit: type=1400 audit(1752767182.631:361): avc: denied { bind } for pid=4340 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.164382][ T29] audit: type=1400 audit(1752767182.631:362): avc: denied { listen } for pid=4340 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.187505][ T4327] EXT4-fs (loop3): pa ffff888106ebf070: logic 48, phys. 177, len 21 [ 41.195888][ T4327] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 41.207939][ T29] audit: type=1400 audit(1752767182.651:363): avc: denied { setopt } for pid=4340 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.228057][ T29] audit: type=1400 audit(1752767182.651:364): avc: denied { write } for pid=4340 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.249543][ T4328] syz.3.349 (4328) used greatest stack depth: 10640 bytes left [ 41.265540][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.347504][ T4351] syzkaller1: entered promiscuous mode [ 41.353202][ T4351] syzkaller1: entered allmulticast mode [ 41.478953][ T29] audit: type=1400 audit(1752767182.971:365): avc: denied { getopt } for pid=4364 comm="syz.3.364" lport=60615 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 41.535590][ T4370] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 41.557069][ T4374] loop2: detected capacity change from 0 to 512 [ 41.583225][ T4374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.614495][ T4374] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.701790][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 41.746145][ T4385] loop1: detected capacity change from 0 to 512 [ 41.766346][ T4385] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 41.821803][ T4385] EXT4-fs (loop1): failed to open journal device unknown-block(1,255) -6 [ 41.839034][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.959738][ T4419] loop4: detected capacity change from 0 to 512 [ 41.966770][ T4419] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.985525][ T4417] veth1_macvtap: left promiscuous mode [ 42.009962][ T4417] macsec0: entered allmulticast mode [ 42.244487][ T4451] ALSA: seq fatal error: cannot create timer (-19) [ 42.310679][ T4457] netlink: 14 bytes leftover after parsing attributes in process `syz.2.403'. [ 42.362763][ T4459] loop2: detected capacity change from 0 to 128 [ 42.370477][ T4459] FAT-fs (loop2): Directory bread(block 162) failed [ 42.377248][ T4459] FAT-fs (loop2): Directory bread(block 163) failed [ 42.384299][ T4459] FAT-fs (loop2): Directory bread(block 164) failed [ 42.391685][ T4459] FAT-fs (loop2): Directory bread(block 165) failed [ 42.398523][ T4459] FAT-fs (loop2): Directory bread(block 166) failed [ 42.406704][ T4459] FAT-fs (loop2): Directory bread(block 167) failed [ 42.414771][ T4459] FAT-fs (loop2): Directory bread(block 168) failed [ 42.425080][ T3668] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.438776][ T4459] FAT-fs (loop2): Directory bread(block 169) failed [ 42.461886][ T4459] FAT-fs (loop2): Directory bread(block 162) failed [ 42.477296][ T4459] FAT-fs (loop2): Directory bread(block 163) failed [ 42.485987][ T3668] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.497891][ T4459] bio_check_eod: 49506 callbacks suppressed [ 42.497909][ T4459] syz.2.404: attempt to access beyond end of device [ 42.497909][ T4459] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 42.519436][ T4459] syz.2.404: attempt to access beyond end of device [ 42.519436][ T4459] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 42.555291][ T3668] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.590995][ T3668] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.675425][ T3668] bridge_slave_1: left allmulticast mode [ 42.681162][ T3668] bridge_slave_1: left promiscuous mode [ 42.686808][ T3668] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.704959][ T3668] bridge_slave_0: left allmulticast mode [ 42.710678][ T3668] bridge_slave_0: left promiscuous mode [ 42.716393][ T3668] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.831581][ T3668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.843676][ T3668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.853565][ T3668] bond0 (unregistering): Released all slaves [ 42.911402][ T4467] chnl_net:caif_netlink_parms(): no params data found [ 42.922856][ T3668] hsr_slave_0: left promiscuous mode [ 42.928968][ T3668] hsr_slave_1: left promiscuous mode [ 42.934895][ T3668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.942592][ T3668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.950739][ T3668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.958220][ T3668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.968338][ T3668] veth0_macvtap: left promiscuous mode [ 42.974086][ T3668] veth1_vlan: left promiscuous mode [ 42.979457][ T3668] veth0_vlan: left promiscuous mode [ 43.032276][ T3668] team0 (unregistering): Port device team_slave_1 removed [ 43.044979][ T3668] team0 (unregistering): Port device team_slave_0 removed [ 43.110671][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.117871][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.125424][ T4467] bridge_slave_0: entered allmulticast mode [ 43.131904][ T4467] bridge_slave_0: entered promiscuous mode [ 43.138924][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.146083][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.153924][ T4467] bridge_slave_1: entered allmulticast mode [ 43.160432][ T4467] bridge_slave_1: entered promiscuous mode [ 43.187342][ T4467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.198591][ T4467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.221954][ T4467] team0: Port device team_slave_0 added [ 43.228433][ T4467] team0: Port device team_slave_1 added [ 43.243564][ T4467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.250544][ T4467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.276790][ T4467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.288527][ T4467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.295759][ T4467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.323224][ T4467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.349462][ T4467] hsr_slave_0: entered promiscuous mode [ 43.355610][ T4467] hsr_slave_1: entered promiscuous mode [ 43.361692][ T4467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.377139][ T4467] Cannot create hsr debugfs directory [ 43.440874][ T4529] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 43.468293][ T4467] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.477679][ T4467] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.488803][ T4467] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.497627][ T4467] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.537119][ T4467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.552161][ T4467] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.562931][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.570487][ T3654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.582541][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.589832][ T3654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.706977][ T4467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.719561][ T4539] smc: net device bond0 applied user defined pnetid SYZ2 [ 43.732571][ T4539] smc: net device bond0 erased user defined pnetid SYZ2 [ 43.776273][ T4549] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 43.914690][ T4575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4575 comm=syz.3.439 [ 43.935894][ T4467] veth0_vlan: entered promiscuous mode [ 43.945219][ T4467] veth1_vlan: entered promiscuous mode [ 43.966442][ T4583] loop4: detected capacity change from 0 to 512 [ 43.983565][ T4583] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.996981][ T4583] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.997887][ T4467] veth0_macvtap: entered promiscuous mode [ 44.018395][ T4583] EXT4-fs (loop4): 1 truncate cleaned up [ 44.026825][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.055331][ T4467] veth1_macvtap: entered promiscuous mode [ 44.111077][ T4467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.122521][ T4589] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 44.144234][ T4467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.152143][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.179845][ T4467] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.188585][ T4467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.197410][ T4467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.206295][ T4467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.236476][ T4579] smc: net device bond0 applied user defined pnetid SYZ2 [ 44.273569][ T4579] smc: net device bond0 erased user defined pnetid SYZ2 [ 44.385034][ T4611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4611 comm=syz.4.458 [ 44.397534][ T4611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4611 comm=syz.4.458 [ 44.495976][ T4623] netlink: 28 bytes leftover after parsing attributes in process `syz.5.464'. [ 44.532676][ T4630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.466'. [ 44.560012][ T4632] sd 0:0:1:0: device reset [ 44.607157][ T4645] sd 0:0:1:0: device reset [ 44.722694][ T4660] loop5: detected capacity change from 0 to 256 [ 44.734102][ T4660] FAT-fs (loop5): bogus number of FAT sectors [ 44.736257][ T4638] smc: net device bond0 applied user defined pnetid SYZ2 [ 44.740366][ T4660] FAT-fs (loop5): Can't find a valid FAT filesystem [ 44.775798][ T4638] smc: net device bond0 erased user defined pnetid SYZ2 [ 44.837949][ T4674] sd 0:0:1:0: device reset [ 44.907667][ T4683] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 44.914299][ T4683] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 44.922093][ T4683] vhci_hcd vhci_hcd.0: Device attached [ 44.937010][ T4687] vhci_hcd: connection closed [ 44.937348][ T3667] vhci_hcd: stop threads [ 44.946445][ T3667] vhci_hcd: release socket [ 44.950921][ T3667] vhci_hcd: disconnect device [ 44.960766][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 45.209147][ T4714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4714 comm=syz.2.504 [ 45.222212][ T4714] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4714 comm=syz.2.504 [ 45.251226][ T4717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 45.394147][ T4737] netlink: 'syz.3.511': attribute type 4 has an invalid length. [ 45.422783][ T4734] smc: net device bond0 applied user defined pnetid SYZ2 [ 45.430119][ T4734] smc: net device bond0 erased user defined pnetid SYZ2 [ 45.499870][ T4743] loop5: detected capacity change from 0 to 512 [ 45.521395][ T4743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.559473][ T4743] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.515: bg 0: block 265: padding at end of block bitmap is not set [ 45.575152][ T4750] loop4: detected capacity change from 0 to 512 [ 45.582420][ T4750] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.596701][ T4750] EXT4-fs (loop4): 1 truncate cleaned up [ 45.604994][ T4750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.626733][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.649839][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.745152][ T4765] loop2: detected capacity change from 0 to 512 [ 45.761789][ T4765] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.777648][ T4765] EXT4-fs (loop2): mount failed [ 45.832677][ T4771] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.845326][ T4773] @: renamed from vlan0 (while UP) [ 45.879124][ T4775] rdma_op ffff88811a985d80 conn xmit_rdma 0000000000000000 [ 45.921781][ T4771] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.992919][ T4771] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.020562][ T4777] smc: net device bond0 applied user defined pnetid SYZ2 [ 46.026444][ T4782] loop5: detected capacity change from 0 to 164 [ 46.036742][ T4782] ISOFS: unable to read i-node block [ 46.039137][ T4777] smc: net device bond0 erased user defined pnetid SYZ2 [ 46.042105][ T4782] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 46.061427][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 46.061441][ T29] audit: type=1400 audit(46.044:730): avc: denied { mount } for pid=4781 comm="syz.5.530" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 46.089578][ T29] audit: type=1400 audit(46.044:731): avc: denied { unmount } for pid=4467 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 46.090042][ T4771] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.175302][ T4784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.542'. [ 46.194965][ T4771] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.212350][ T4771] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.214214][ T4786] loop3: detected capacity change from 0 to 512 [ 46.236275][ T4771] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.272359][ T4786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.300570][ T4771] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.328394][ T4786] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.531: bg 0: block 265: padding at end of block bitmap is not set [ 46.373746][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.385051][ T4801] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 46.391663][ T4801] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 46.532930][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 46.556987][ T4819] bridge_slave_0: left allmulticast mode [ 46.563277][ T4819] bridge_slave_0: left promiscuous mode [ 46.569746][ T4819] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.585942][ T4819] bridge_slave_1: left allmulticast mode [ 46.591908][ T4819] bridge_slave_1: left promiscuous mode [ 46.597810][ T4819] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.609495][ T4819] bond0: (slave bond_slave_0): Releasing backup interface [ 46.620885][ T4819] bond0: (slave bond_slave_1): Releasing backup interface [ 46.622371][ T4831] loop2: detected capacity change from 0 to 512 [ 46.638691][ T4831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.641446][ T4819] team0: Port device team_slave_0 removed [ 46.660110][ T4819] team0: Port device team_slave_1 removed [ 46.660374][ T4831] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.552: bg 0: block 265: padding at end of block bitmap is not set [ 46.666989][ T4819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.687768][ T4819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.697075][ T4819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.704917][ T4819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.713579][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.778328][ T4840] loop3: detected capacity change from 0 to 512 [ 46.783724][ T29] audit: type=1326 audit(46.754:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2c74e929 code=0x7ffc0000 [ 46.787017][ T4840] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.807740][ T29] audit: type=1326 audit(46.754:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2c74e929 code=0x7ffc0000 [ 46.807768][ T29] audit: type=1326 audit(46.754:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcf2c74e929 code=0x7ffc0000 [ 46.862735][ T29] audit: type=1326 audit(46.754:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf2c74e963 code=0x7ffc0000 [ 46.885603][ T29] audit: type=1326 audit(46.754:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcf2c74d3df code=0x7ffc0000 [ 46.909046][ T29] audit: type=1326 audit(46.754:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcf2c74e9b7 code=0x7ffc0000 [ 46.931755][ T29] audit: type=1326 audit(46.754:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf2c74d290 code=0x7ffc0000 [ 46.955122][ T29] audit: type=1326 audit(46.754:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf2c74e52b code=0x7ffc0000 [ 46.990637][ T4840] EXT4-fs (loop3): 1 truncate cleaned up [ 46.997282][ T4840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.059904][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.120958][ T4861] loop3: detected capacity change from 0 to 512 [ 47.137743][ T4861] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.164361][ T4861] EXT4-fs (loop3): mount failed [ 47.174462][ T4868] pim6reg1: entered promiscuous mode [ 47.179838][ T4868] pim6reg1: entered allmulticast mode [ 47.207112][ T4857] smc: net device bond0 applied user defined pnetid SYZ2 [ 47.217844][ T4857] smc: net device bond0 erased user defined pnetid SYZ2 [ 47.461589][ T4897] loop3: detected capacity change from 0 to 1024 [ 47.481671][ T4897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.492862][ T4906] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 47.525577][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.537824][ T4910] loop4: detected capacity change from 0 to 256 [ 47.546203][ T4910] vfat: Unknown parameter 'iocharet' [ 47.801891][ T4940] hub 6-0:1.0: USB hub found [ 47.806663][ T4940] hub 6-0:1.0: 8 ports detected [ 48.377567][ T4978] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 48.727288][ T5017] netlink: 'syz.2.620': attribute type 4 has an invalid length. [ 48.805518][ T5015] smc: net device bond0 applied user defined pnetid SYZ2 [ 48.826946][ T5015] smc: net device bond0 erased user defined pnetid SYZ2 [ 48.887570][ T5030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.630'. [ 48.896796][ T5030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.630'. [ 48.905897][ T5030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.630'. [ 48.916531][ T5030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.630'. [ 48.968167][ T5033] loop4: detected capacity change from 0 to 8192 [ 49.178271][ T5049] smc: net device bond0 applied user defined pnetid SYZ2 [ 49.413829][ T5075] loop4: detected capacity change from 0 to 1024 [ 49.424683][ T5075] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 49.456226][ T5069] smc: net device bond0 erased user defined pnetid SYZ2 [ 49.547840][ T5067] smc: net device bond0 applied user defined pnetid SYZ2 [ 49.634871][ T5083] smc: net device bond0 erased user defined pnetid SYZ2 [ 49.644813][ T5100] loop4: detected capacity change from 0 to 1024 [ 49.665202][ T5100] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 49.766063][ T5103] smc: net device bond0 applied user defined pnetid SYZ2 [ 49.773997][ T5103] smc: net device bond0 erased user defined pnetid SYZ2 [ 49.850596][ T5123] pim6reg1: entered promiscuous mode [ 49.856182][ T5123] pim6reg1: entered allmulticast mode [ 50.007773][ T5151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 50.027346][ T5151] bridge_slave_1: left allmulticast mode [ 50.033620][ T5151] bridge_slave_1: left promiscuous mode [ 50.039445][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.054636][ T5151] bridge_slave_0: left allmulticast mode [ 50.060468][ T5151] bridge_slave_0: left promiscuous mode [ 50.066567][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.074757][ T5154] loop5: detected capacity change from 0 to 1024 [ 50.082456][ T5154] EXT4-fs: Ignoring removed orlov option [ 50.100488][ T5154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.115038][ T5154] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.180033][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.218249][ T5161] smc: net device bond0 applied user defined pnetid SYZ2 [ 50.263107][ T5157] smc: net device bond0 erased user defined pnetid SYZ2 [ 50.338665][ T5182] loop2: detected capacity change from 0 to 128 [ 50.437399][ T5195] syzkaller1: entered promiscuous mode [ 50.443730][ T5195] syzkaller1: entered allmulticast mode [ 50.472645][ T5199] loop5: detected capacity change from 0 to 1024 [ 50.509782][ T5199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.533861][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.620676][ T5218] pim6reg1: entered promiscuous mode [ 50.626159][ T5218] pim6reg1: entered allmulticast mode [ 50.681120][ T5220] smc: net device bond0 applied user defined pnetid SYZ2 [ 50.689184][ T5220] smc: net device bond0 erased user defined pnetid SYZ2 [ 50.722676][ T5225] loop3: detected capacity change from 0 to 256 [ 50.730555][ T5225] vfat: Unknown parameter 'iocharet' [ 50.859959][ T5227] loop4: detected capacity change from 0 to 128 [ 50.867985][ T5227] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.898904][ T5232] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 50.906532][ T5232] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 50.915404][ T5232] netlink: 44 bytes leftover after parsing attributes in process `syz.5.717'. [ 50.939399][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.165736][ T5249] netlink: 36 bytes leftover after parsing attributes in process `syz.5.724'. [ 51.175559][ T5249] netlink: 'syz.5.724': attribute type 10 has an invalid length. [ 51.183701][ T5249] syz_tun: entered promiscuous mode [ 51.193248][ T5249] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 51.204235][ T5249] syz.5.724 (5249) used greatest stack depth: 10416 bytes left [ 51.237803][ T5254] xt_hashlimit: size too large, truncated to 1048576 [ 51.528763][ T5266] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 51.535316][ T5266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.542946][ T5266] vhci_hcd vhci_hcd.0: Device attached [ 51.550376][ T5267] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 51.574345][ T3676] vhci_hcd: stop threads [ 51.578774][ T3676] vhci_hcd: release socket [ 51.583239][ T3676] vhci_hcd: disconnect device [ 51.652973][ T5280] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 51.755170][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e81800: rx timeout, send abort [ 51.763465][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119e81800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 51.840430][ T5290] xt_hashlimit: size too large, truncated to 1048576 [ 52.041266][ T5294] loop3: detected capacity change from 0 to 4096 [ 52.050685][ T5294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.239460][ T5301] smc: net device bond0 applied user defined pnetid SYZ2 [ 52.250392][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.258935][ T5301] smc: net device bond0 erased user defined pnetid SYZ2 [ 52.280672][ T5303] loop3: detected capacity change from 0 to 128 [ 52.301233][ T5303] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.384299][ T5312] Cannot find add_set index 0 as target [ 52.393482][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.497166][ T5314] smc: net device bond0 applied user defined pnetid SYZ2 [ 52.511135][ T5326] loop2: detected capacity change from 0 to 128 [ 52.519109][ T5328] netlink: 14 bytes leftover after parsing attributes in process `syz.0.757'. [ 52.540155][ T5328] hsr_slave_0: left promiscuous mode [ 52.567934][ T5328] hsr_slave_1: left promiscuous mode [ 52.576749][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 52.576788][ T29] audit: type=1400 audit(52.553:869): avc: denied { load_policy } for pid=5330 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 52.577696][ T5331] SELinux: failed to load policy [ 52.680985][ T29] audit: type=1326 audit(52.663:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4953c2e929 code=0x7ffc0000 [ 52.722570][ T29] audit: type=1326 audit(52.683:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4953c2e929 code=0x7ffc0000 [ 52.750734][ T29] audit: type=1326 audit(52.683:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4953c2e963 code=0x7ffc0000 [ 52.774697][ T29] audit: type=1326 audit(52.683:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4953c2d3df code=0x7ffc0000 [ 52.798351][ T29] audit: type=1326 audit(52.683:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4953c2e9b7 code=0x7ffc0000 [ 52.823615][ T29] audit: type=1326 audit(52.683:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4953c2d290 code=0x7ffc0000 [ 52.848210][ T29] audit: type=1326 audit(52.683:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4953c2d58a code=0x7ffc0000 [ 52.873522][ T29] audit: type=1326 audit(52.683:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4953c2e929 code=0x7ffc0000 [ 52.901054][ T29] audit: type=1326 audit(52.693:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5340 comm="syz.0.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f4953c2e929 code=0x7ffc0000 [ 53.016185][ T5361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 53.028005][ T5363] netlink: 14 bytes leftover after parsing attributes in process `syz.2.774'. [ 53.048960][ T5363] hsr_slave_0: left promiscuous mode [ 53.060713][ T5363] hsr_slave_1: left promiscuous mode [ 53.084555][ T5367] IPv6: Can't replace route, no match found [ 53.207529][ T5380] loop2: detected capacity change from 0 to 1024 [ 53.216317][ T5380] EXT4-fs: Ignoring removed orlov option [ 53.222897][ T5380] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 53.252796][ T5380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.292477][ T5380] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.782: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 53.323955][ T5392] hsr_slave_0: left promiscuous mode [ 53.478859][ T5392] hsr_slave_1: left promiscuous mode [ 53.494860][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.912128][ T5410] smc: net device bond0 erased user defined pnetid SYZ2 [ 54.237469][ T5418] smc: net device bond0 applied user defined pnetid SYZ2 [ 54.254142][ T5418] smc: net device bond0 erased user defined pnetid SYZ2 [ 54.373744][ T5443] __nla_validate_parse: 2 callbacks suppressed [ 54.373789][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 54.439626][ T5447] netlink: 96 bytes leftover after parsing attributes in process `syz.3.809'. [ 54.495618][ T5451] program syz.3.811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.510478][ T5451] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 54.521753][ T5454] smc: net device bond0 applied user defined pnetid SYZ2 [ 54.597236][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 54.609644][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 54.723455][ T5478] loop4: detected capacity change from 0 to 1024 [ 54.733962][ T5478] EXT4-fs: Ignoring removed nobh option [ 54.740128][ T5478] EXT4-fs: Ignoring removed bh option [ 54.750466][ T5478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.770876][ T5478] EXT4-fs (loop4): shut down requested (0) [ 54.796075][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.913528][ T5487] smc: net device bond0 erased user defined pnetid SYZ2 [ 54.994198][ T5506] 9pnet: p9_errstr2errno: server reported unknown error @vlen=2 Invalid name [ 54.994198][ T5506] [ 55.023734][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.834'. [ 55.219430][ T5528] smc: net device bond0 applied user defined pnetid SYZ2 [ 55.228380][ T5528] smc: net device bond0 erased user defined pnetid SYZ2 [ 55.382540][ T5537] smc: net device bond0 applied user defined pnetid SYZ2 [ 55.488864][ T5541] smc: net device bond0 erased user defined pnetid SYZ2 [ 55.814162][ T5559] smc: net device bond0 applied user defined pnetid SYZ2 [ 55.825573][ T5559] smc: net device bond0 erased user defined pnetid SYZ2 [ 55.861996][ T5568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5568 comm=syz.2.858 [ 55.884786][ T5570] loop5: detected capacity change from 0 to 1024 [ 55.896932][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a500200: rx timeout, send abort [ 55.905531][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a500200: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 55.930959][ T5570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.003646][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.005669][ T5577] syzkaller0: entered allmulticast mode [ 56.045219][ T5577] syzkaller0 (unregistering): left allmulticast mode [ 56.070459][ T5583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.863'. [ 56.130837][ T5591] netlink: 'syz.5.868': attribute type 10 has an invalid length. [ 56.163456][ T5591] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.311127][ T5600] smc: net device bond0 applied user defined pnetid SYZ2 [ 56.319145][ T5600] smc: net device bond0 erased user defined pnetid SYZ2 [ 56.332591][ T5601] smc: net device bond0 applied user defined pnetid SYZ2 [ 56.453393][ T5613] netlink: 'syz.4.877': attribute type 39 has an invalid length. [ 56.463190][ T5611] 9pnet: p9_errstr2errno: server reported unknown error @vlen=2 Invalid name [ 56.463190][ T5611] [ 56.558393][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 56.569878][ T5628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 56.578984][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 56.588432][ T5627] program syz.0.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.599455][ T5627] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 56.608873][ T5628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 56.619218][ T5628] netlink: 'syz.3.885': attribute type 6 has an invalid length. [ 56.662868][ T5636] macvtap0: entered promiscuous mode [ 56.669464][ T5636] macvtap0: left promiscuous mode [ 56.799420][ T5654] loop3: detected capacity change from 0 to 1024 [ 56.811423][ T5654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.899257][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.278066][ T5677] syzkaller0: entered allmulticast mode [ 57.310157][ T5677] syzkaller0 (unregistering): left allmulticast mode [ 57.383320][ T5681] macvtap0: entered promiscuous mode [ 57.390605][ T5681] macvtap0: left promiscuous mode [ 57.592365][ T5692] loop5: detected capacity change from 0 to 128 [ 57.623726][ T5692] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.708790][ T4467] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.886750][ T5708] netlink: 'syz.0.921': attribute type 6 has an invalid length. [ 58.283004][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 58.283090][ T29] audit: type=1326 audit(58.263:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 58.312275][ T29] audit: type=1326 audit(58.263:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 58.406207][ T29] audit: type=1326 audit(58.323:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 58.430809][ T29] audit: type=1326 audit(58.323:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 58.456367][ T29] audit: type=1326 audit(58.323:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 58.735283][ T5744] macvtap0: entered promiscuous mode [ 58.743898][ T5744] macvtap0: left promiscuous mode [ 58.795458][ T29] audit: type=1400 audit(58.773:933): avc: denied { unmount } for pid=5745 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.905261][ T5752] loop5: detected capacity change from 0 to 1024 [ 58.921323][ T5752] EXT4-fs: Ignoring removed orlov option [ 58.934715][ T5752] EXT4-fs: Mount option(s) incompatible with ext2 [ 59.014921][ T29] audit: type=1326 audit(58.993:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 59.056756][ T5756] 9pnet_fd: Insufficient options for proto=fd [ 59.091542][ T29] audit: type=1326 audit(59.023:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 59.116922][ T29] audit: type=1326 audit(59.023:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 59.144266][ T29] audit: type=1326 audit(59.023:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.4.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 59.173777][ T5760] bridge: RTM_NEWNEIGH with invalid ether address [ 59.232858][ T5766] loop5: detected capacity change from 0 to 512 [ 59.270686][ T5766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.290199][ T5766] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.944: Unimplemented hash flags: 0x0001 [ 59.303615][ T5766] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.944: Corrupt directory, running e2fsck is recommended [ 59.319605][ T5766] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.944: path /104/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 59.390847][ T5773] wg2: entered promiscuous mode [ 59.396154][ T5773] wg2: entered allmulticast mode [ 59.425426][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.906085][ T5810] __nla_validate_parse: 6 callbacks suppressed [ 59.906098][ T5810] netlink: 80 bytes leftover after parsing attributes in process `syz.5.965'. [ 60.423393][ T5865] syz_tun: entered allmulticast mode [ 60.458938][ T5865] dvmrp8: entered allmulticast mode [ 60.475279][ T5863] syz_tun: left allmulticast mode [ 60.645625][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 60.651316][ T5878] smc: net device bond0 erased user defined pnetid SYZ2 [ 60.670571][ T5888] Invalid ELF header magic: != ELF [ 60.946353][ T5919] smc: net device bond0 applied user defined pnetid SYZ2 [ 61.159691][ T5948] netlink: 'syz.5.1028': attribute type 3 has an invalid length. [ 61.182955][ T5938] smc: net device bond0 erased user defined pnetid SYZ2 [ 61.259081][ T5942] smc: net device bond0 applied user defined pnetid SYZ2 [ 61.267529][ T5942] smc: net device bond0 erased user defined pnetid SYZ2 [ 61.503490][ T5990] loop2: detected capacity change from 0 to 512 [ 61.552486][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.581894][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.645142][ T6003] Invalid ELF header magic: != ELF [ 61.769291][ T6005] smc: net device bond0 applied user defined pnetid SYZ2 [ 61.778989][ T6005] smc: net device bond0 erased user defined pnetid SYZ2 [ 61.793126][ T6009] loop2: detected capacity change from 0 to 2048 [ 61.813524][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.891329][ T6013] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.901410][ T6013] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 61.962469][ T6009] syz.2.1055 (6009) used greatest stack depth: 10232 bytes left [ 61.986253][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.999108][ T6016] futex_wake_op: syz.4.1067 tries to shift op by 144; fix this program [ 62.060089][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 62.337623][ T6038] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1068'. [ 62.592668][ T6057] loop3: detected capacity change from 0 to 512 [ 62.628561][ T6057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.782850][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.857064][ T6067] netlink: 'syz.5.1080': attribute type 1 has an invalid length. [ 62.936002][ T3679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.023261][ T3679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.105881][ T3679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.128438][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'. [ 63.138553][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'. [ 63.174629][ T3679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.263238][ T6114] loop2: detected capacity change from 0 to 1024 [ 63.276694][ T6114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.291339][ T3679] bridge_slave_1: left allmulticast mode [ 63.297495][ T3679] bridge_slave_1: left promiscuous mode [ 63.303592][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.314604][ T3679] bridge_slave_0: left allmulticast mode [ 63.322135][ T3679] bridge_slave_0: left promiscuous mode [ 63.328353][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.350639][ T6114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.395600][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.481673][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.493617][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.504954][ T3679] bond0 (unregistering): Released all slaves [ 63.532945][ T6082] chnl_net:caif_netlink_parms(): no params data found [ 63.565794][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.573580][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.581624][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.589489][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.600855][ T3679] veth1_macvtap: left promiscuous mode [ 63.606676][ T3679] veth0_macvtap: left promiscuous mode [ 63.612847][ T3679] veth1_vlan: left promiscuous mode [ 63.619369][ T3679] veth0_vlan: left promiscuous mode [ 63.686447][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 63.699514][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 63.739586][ T6120] smc: net device bond0 applied user defined pnetid SYZ2 [ 63.760762][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.768859][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.776969][ T6082] bridge_slave_0: entered allmulticast mode [ 63.784975][ T6082] bridge_slave_0: entered promiscuous mode [ 63.793749][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.801629][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.809257][ T6082] bridge_slave_1: entered allmulticast mode [ 63.817092][ T6082] bridge_slave_1: entered promiscuous mode [ 63.834320][ T6082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.845455][ T6082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.881214][ T6082] team0: Port device team_slave_0 added [ 63.894192][ T6082] team0: Port device team_slave_1 added [ 63.914851][ T6082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.923740][ T6082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.954097][ T6082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.007310][ T6082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.015079][ T6082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.042634][ T6082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.073213][ T6082] hsr_slave_0: entered promiscuous mode [ 64.080670][ T6082] hsr_slave_1: entered promiscuous mode [ 64.160817][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 64.318571][ T6082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 64.355935][ T6082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 64.378111][ T6082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 64.401476][ T6082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 64.463271][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.473144][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.481822][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.489799][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.534980][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 64.534996][ T29] audit: type=1400 audit(64.513:1005): avc: denied { associate } for pid=6170 comm="syz.3.1112" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 64.547879][ T6082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.653517][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.664962][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.717308][ T6082] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.759759][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.768799][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.825343][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.834819][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.983668][ T6082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.051093][ T29] audit: type=1326 audit(65.033:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 65.090635][ T29] audit: type=1326 audit(65.033:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 65.129225][ T29] audit: type=1326 audit(65.033:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 65.167991][ T29] audit: type=1326 audit(65.033:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 65.195645][ T29] audit: type=1326 audit(65.063:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 65.223411][ T29] audit: type=1326 audit(65.063:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 65.230557][ T6082] veth0_vlan: entered promiscuous mode [ 65.251670][ T29] audit: type=1326 audit(65.063:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 65.251698][ T29] audit: type=1326 audit(65.063:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 65.265139][ T6082] veth1_vlan: entered promiscuous mode [ 65.289280][ T29] audit: type=1326 audit(65.063:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c69e7e929 code=0x7ffc0000 [ 65.333515][ T6082] veth0_macvtap: entered promiscuous mode [ 65.363467][ T6082] veth1_macvtap: entered promiscuous mode [ 65.400446][ T6082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.446130][ T6216] loop5: detected capacity change from 0 to 512 [ 65.454189][ T6082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.462537][ T6216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.476372][ T6082] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.489703][ T6082] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.499991][ T6082] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.509801][ T6082] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.534377][ T6216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.573454][ T6216] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 65.658396][ T6216] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 65.700363][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.728320][ T6235] loop5: detected capacity change from 0 to 128 [ 65.767606][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1133'. [ 65.826353][ T6237] smc: net device bond0 erased user defined pnetid SYZ2 [ 65.949555][ T6247] smc: net device bond0 applied user defined pnetid SYZ2 [ 65.959394][ T6247] smc: net device bond0 erased user defined pnetid SYZ2 [ 66.185319][ T6287] loop3: detected capacity change from 0 to 512 [ 66.194531][ T6287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.205036][ T6287] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 66.242834][ T6287] netlink: zone id is out of range [ 66.258716][ T6287] netlink: zone id is out of range [ 66.265744][ T6293] IPVS: Error connecting to the multicast addr [ 66.280058][ T6287] netlink: zone id is out of range [ 66.286723][ T6287] netlink: zone id is out of range [ 66.290057][ T6291] smc: net device bond0 applied user defined pnetid SYZ2 [ 66.304682][ T6291] smc: net device bond0 erased user defined pnetid SYZ2 [ 66.317322][ T6287] netlink: zone id is out of range [ 66.323565][ T6287] netlink: zone id is out of range [ 66.329292][ T6287] netlink: zone id is out of range [ 66.334787][ T6287] netlink: zone id is out of range [ 66.341261][ T6287] netlink: zone id is out of range [ 66.347237][ T6287] netlink: zone id is out of range [ 66.405290][ T6301] netlink: 268 bytes leftover after parsing attributes in process `syz.6.1163'. [ 66.414971][ T6301] unsupported nla_type 65024 [ 66.485055][ T6299] smc: net device bond0 applied user defined pnetid SYZ2 [ 66.493175][ T6299] smc: net device bond0 erased user defined pnetid SYZ2 [ 66.666786][ T6328] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1173'. [ 66.700235][ T6330] loop4: detected capacity change from 0 to 128 [ 66.725058][ T6322] smc: net device bond0 applied user defined pnetid SYZ2 [ 66.978088][ T6350] smc: net device bond0 erased user defined pnetid SYZ2 [ 67.122164][ T6371] loop2: detected capacity change from 0 to 128 [ 67.214322][ T6376] syz.5.1193 (6376) used greatest stack depth: 10200 bytes left [ 67.487807][ T6389] smc: net device bond0 applied user defined pnetid SYZ2 [ 67.499336][ T6389] smc: net device bond0 erased user defined pnetid SYZ2 [ 67.528298][ T6396] all: renamed from lo [ 67.558851][ T6398] loop2: detected capacity change from 0 to 128 [ 67.657811][ T6402] tipc: Started in network mode [ 67.663436][ T6402] tipc: Node identity ea58b57f105e, cluster identity 4711 [ 67.671431][ T6402] tipc: Enabled bearer , priority 0 [ 67.722009][ T6402] syzkaller0: entered promiscuous mode [ 67.728479][ T6402] syzkaller0: entered allmulticast mode [ 67.782143][ T6402] tipc: Resetting bearer [ 67.795729][ T6401] tipc: Resetting bearer [ 67.845994][ T6401] tipc: Disabling bearer [ 68.154474][ T6425] smc: net device bond0 applied user defined pnetid SYZ2 [ 68.166059][ T6425] smc: net device bond0 erased user defined pnetid SYZ2 [ 68.251973][ T6428] smc: net device bond0 applied user defined pnetid SYZ2 [ 68.262326][ T6428] smc: net device bond0 erased user defined pnetid SYZ2 [ 68.555280][ T6460] loop5: detected capacity change from 0 to 2048 [ 68.609253][ T6460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.721609][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.773087][ T6476] pim6reg1: entered promiscuous mode [ 68.781701][ T6476] pim6reg1: entered allmulticast mode [ 69.044324][ T6491] vhci_hcd: invalid port number 96 [ 69.050274][ T6491] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 69.068220][ T6496] loop6: detected capacity change from 0 to 1024 [ 69.111551][ T6496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.186608][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'. [ 69.330641][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.364044][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.450177][ T6522] smc: net device bond0 applied user defined pnetid SYZ2 [ 69.591493][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 69.591506][ T29] audit: type=1400 audit(69.573:1173): avc: denied { getopt } for pid=6527 comm="syz.2.1256" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.743916][ T6530] SELinux: syz.2.1257 (6530) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 69.900509][ T6536] loop3: detected capacity change from 0 to 2048 [ 69.907476][ T6536] EXT4-fs: quotafile must be on filesystem root [ 69.972676][ T6542] loop5: detected capacity change from 0 to 2048 [ 69.981857][ T6542] EXT4-fs: quotafile must be on filesystem root [ 69.989959][ T6082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.024583][ T6544] loop6: detected capacity change from 0 to 2048 [ 70.030291][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1264'. [ 70.064451][ T6544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.065333][ T6552] loop5: detected capacity change from 0 to 256 [ 70.113408][ T6552] FAT-fs (loop5): Directory bread(block 64) failed [ 70.128696][ T6552] FAT-fs (loop5): Directory bread(block 65) failed [ 70.136562][ T6552] FAT-fs (loop5): Directory bread(block 66) failed [ 70.144786][ T6552] FAT-fs (loop5): Directory bread(block 67) failed [ 70.152483][ T6552] FAT-fs (loop5): Directory bread(block 68) failed [ 70.159778][ T6552] FAT-fs (loop5): Directory bread(block 69) failed [ 70.161078][ T6082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.167472][ T6552] FAT-fs (loop5): Directory bread(block 70) failed [ 70.185419][ T6552] FAT-fs (loop5): Directory bread(block 71) failed [ 70.193038][ T6552] FAT-fs (loop5): Directory bread(block 72) failed [ 70.201654][ T6552] FAT-fs (loop5): Directory bread(block 73) failed [ 70.202022][ T6550] smc: net device bond0 erased user defined pnetid SYZ2 [ 70.255964][ T6552] syz.5.1266: attempt to access beyond end of device [ 70.255964][ T6552] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 70.278096][ T6552] syz.5.1266: attempt to access beyond end of device [ 70.278096][ T6552] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 70.398264][ T6569] loop4: detected capacity change from 0 to 1024 [ 70.443376][ T6569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.444633][ T6564] smc: net device bond0 applied user defined pnetid SYZ2 [ 70.489745][ T6580] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 70.508285][ T6572] smc: net device bond0 erased user defined pnetid SYZ2 [ 70.613405][ T6588] vhci_hcd: invalid port number 96 [ 70.619339][ T6588] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 70.656289][ T6595] loop6: detected capacity change from 0 to 256 [ 70.671885][ T6595] FAT-fs (loop6): Directory bread(block 64) failed [ 70.679409][ T6595] FAT-fs (loop6): Directory bread(block 65) failed [ 70.686827][ T6595] FAT-fs (loop6): Directory bread(block 66) failed [ 70.694504][ T6595] FAT-fs (loop6): Directory bread(block 67) failed [ 70.704893][ T6595] FAT-fs (loop6): Directory bread(block 68) failed [ 70.705143][ T6597] syzkaller1: entered promiscuous mode [ 70.714348][ T6595] FAT-fs (loop6): Directory bread(block 69) failed [ 70.721299][ T6597] syzkaller1: entered allmulticast mode [ 70.729150][ T6595] FAT-fs (loop6): Directory bread(block 70) failed [ 70.743914][ T6595] FAT-fs (loop6): Directory bread(block 71) failed [ 70.769543][ T6595] FAT-fs (loop6): Directory bread(block 72) failed [ 70.777129][ T6595] FAT-fs (loop6): Directory bread(block 73) failed [ 70.825172][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 70.860612][ T6595] syz.6.1283: attempt to access beyond end of device [ 70.860612][ T6595] loop6: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 70.882910][ T6607] team0: Port device ip6gretap1 added [ 70.898725][ T6595] syz.6.1283: attempt to access beyond end of device [ 70.898725][ T6595] loop6: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 71.137709][ T6633] netlink: 'syz.6.1298': attribute type 4 has an invalid length. [ 71.236669][ T29] audit: type=1326 audit(71.213:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc7ce929 code=0x7ffc0000 [ 71.310088][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.318904][ T29] audit: type=1326 audit(71.253:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fbc7ce929 code=0x7ffc0000 [ 71.346866][ T29] audit: type=1326 audit(71.253:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc7ce929 code=0x7ffc0000 [ 71.361093][ T6628] smc: net device bond0 applied user defined pnetid SYZ2 [ 71.385016][ T29] audit: type=1326 audit(71.253:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fbc7ce929 code=0x7ffc0000 [ 71.422987][ T29] audit: type=1326 audit(71.253:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc7ce929 code=0x7ffc0000 [ 71.454120][ T29] audit: type=1326 audit(71.253:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fbc7ce929 code=0x7ffc0000 [ 71.465938][ T6648] smc: net device bond0 erased user defined pnetid SYZ2 [ 71.491658][ T29] audit: type=1326 audit(71.253:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc7ce929 code=0x7ffc0000 [ 71.526257][ T29] audit: type=1326 audit(71.253:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fbc7ce929 code=0x7ffc0000 [ 71.552447][ T29] audit: type=1326 audit(71.253:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.6.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc7ce929 code=0x7ffc0000 [ 71.644375][ T6651] loop4: detected capacity change from 0 to 512 [ 71.703955][ T6651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.729588][ T6651] syz.4.1305 (6651) used greatest stack depth: 10096 bytes left [ 71.746312][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.877722][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1314'. [ 71.887834][ T6677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1314'. [ 71.897718][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1314'. [ 71.910367][ T6677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1314'. [ 72.214154][ T6707] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1328'. [ 72.228290][ T6713] loop5: detected capacity change from 0 to 512 [ 72.271838][ T6713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.329835][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.388529][ T6723] net_ratelimit: 74 callbacks suppressed [ 72.388545][ T6723] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.403399][ T6723] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.691159][ T6736] syzkaller1: entered promiscuous mode [ 72.698114][ T6736] syzkaller1: entered allmulticast mode [ 72.707801][ T6740] loop6: detected capacity change from 0 to 128 [ 72.722671][ T6740] EXT4-fs: Ignoring removed nobh option [ 72.746625][ T6740] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.810510][ T6082] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.834813][ T6744] loop6: detected capacity change from 0 to 512 [ 72.853384][ T6746] loop5: detected capacity change from 0 to 128 [ 72.860875][ T6744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.884551][ T6746] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 72.893554][ T6746] FAT-fs (loop5): Filesystem has been set read-only [ 72.901745][ T6746] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 72.910952][ T6746] syz.5.1344: attempt to access beyond end of device [ 72.910952][ T6746] loop5: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 73.089234][ T6082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.687984][ T6786] loop5: detected capacity change from 0 to 512 [ 73.715440][ T6712] syz.4.1331 (6712) used greatest stack depth: 7160 bytes left [ 73.735138][ T6786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.797383][ T6799] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1363'. [ 73.923399][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.150361][ T6827] syzkaller1: entered promiscuous mode [ 74.156891][ T6827] syzkaller1: entered allmulticast mode [ 74.297247][ T6834] loop4: detected capacity change from 0 to 512 [ 74.310629][ T6834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.408928][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.437449][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1383'. [ 74.532809][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 74.550646][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.560092][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.571733][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1386'. [ 74.586028][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.594737][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.621049][ T6857] vlan2: entered promiscuous mode [ 74.650865][ T6859] loop6: detected capacity change from 0 to 1024 [ 74.684375][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 74.684389][ T29] audit: type=1400 audit(74.663:1248): avc: denied { write } for pid=6863 comm="syz.6.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.714500][ T29] audit: type=1326 audit(74.663:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6865 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 74.739587][ T29] audit: type=1326 audit(74.663:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6865 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 74.764929][ T29] audit: type=1326 audit(74.663:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6865 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 74.790599][ T29] audit: type=1326 audit(74.673:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6865 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 74.815046][ T29] audit: type=1326 audit(74.673:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6865 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 74.840228][ T29] audit: type=1326 audit(74.673:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6865 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 74.870348][ T29] audit: type=1326 audit(74.673:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6865 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 74.897013][ T29] audit: type=1326 audit(74.673:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6865 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 74.921751][ T29] audit: type=1326 audit(74.673:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6865 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3e209e929 code=0x7ffc0000 [ 75.100139][ T6877] ================================================================== [ 75.109124][ T6877] BUG: KCSAN: data-race in n_tty_poll / pty_unix98_ioctl [ 75.116941][ T6877] [ 75.119396][ T6877] write to 0xffff8881049509d5 of 1 bytes by task 6881 on cpu 1: [ 75.127836][ T6877] pty_unix98_ioctl+0x2c0/0x2e0 [ 75.133098][ T6877] tty_ioctl+0x7db/0xb80 [ 75.138027][ T6877] __se_sys_ioctl+0xcb/0x140 [ 75.143225][ T6877] __x64_sys_ioctl+0x43/0x50 [ 75.148401][ T6877] x64_sys_call+0x19a8/0x2fb0 [ 75.153709][ T6877] do_syscall_64+0xd2/0x200 [ 75.158760][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.164964][ T6877] [ 75.167551][ T6877] read to 0xffff8881049509d5 of 1 bytes by task 6877 on cpu 0: [ 75.176482][ T6877] n_tty_poll+0x31f/0x450 [ 75.181440][ T6877] tty_poll+0x76/0xf0 [ 75.185537][ T6877] __io_arm_poll_handler+0x1eb/0xb70 [ 75.191464][ T6877] io_arm_poll_handler+0x427/0x590 [ 75.197685][ T6877] io_queue_async+0x60/0x3a0 [ 75.202548][ T6877] io_submit_sqes+0xa25/0xfd0 [ 75.207614][ T6877] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 75.213647][ T6877] __x64_sys_io_uring_enter+0x78/0x90 [ 75.226348][ T6877] x64_sys_call+0x28c8/0x2fb0 [ 75.236539][ T6877] do_syscall_64+0xd2/0x200 [ 75.243458][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.258283][ T6877] [ 75.263774][ T6877] value changed: 0x00 -> 0x01 [ 75.268886][ T6877] [ 75.271418][ T6877] Reported by Kernel Concurrency Sanitizer on: [ 75.281083][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.2.1396 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 75.303694][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.315317][ T6877] ================================================================== [ 75.357797][ T6878] netlink: 'syz.3.1397': attribute type 10 has an invalid length. [ 75.379518][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.391703][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.430369][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.438330][ T6878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.447364][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.455052][ T6878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.489394][ T6878] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 75.503467][ T6883] bridge_slave_1: left allmulticast mode [ 75.510109][ T6883] bridge_slave_1: left promiscuous mode [ 75.516503][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.525589][ T6883] bridge_slave_0: left allmulticast mode [ 75.531979][ T6883] bridge_slave_0: left promiscuous mode [ 75.540481][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.552773][ T6883] bond0: (slave bridge0): Releasing backup interface