last executing test programs: 1.436746656s ago: executing program 1 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x1000) 1.380704746s ago: executing program 1 (id=282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x7, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 1.307898598s ago: executing program 1 (id=284): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000b00)={0x1, 0x0, 0xa, 0x11, 0x26, 0x0}) 1.299439408s ago: executing program 1 (id=286): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x5, 0x7f, 0x9}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x400}, 0x100200, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x5, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000dc0)=""/4106, 0x100a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000100)=[{0x0, 0x4c}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$netlink(r3, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r7], 0x38}, 0x1, 0x0, 0x0, 0x88840}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_capability(r8, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0) fchown(r8, 0x0, 0x0) 938.493477ms ago: executing program 3 (id=303): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000001780)={&(0x7f0000000780)=""/4096, 0x1000}) 889.786658ms ago: executing program 3 (id=307): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 798.411851ms ago: executing program 3 (id=313): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 671.646294ms ago: executing program 0 (id=315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc9, 0x0, @perf_config_ext={0xe, 0x5}, 0x100a82, 0x400000, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) dup2(r0, r0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0xc6f40, 0x1fb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000007000000000000000000000000000000000000000000000000ffffe0000002000103944e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ff020000000000000000000000000001000004d43c000000ac14141c000000000000000000000000000000000000000009000000000000000700000000000000ffff00000000000010000000000000000200000000000000f8ffffffffffffffa90e000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff140000002abd7000040000000a0001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350002000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="380100001000010027bd700000010000fe880000000000000000000000000001ac14143d000000000000000000000000000107144e230405000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000fbffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000959cb89f1934912f0fcb58419c42f98e27da2b882d52b2170d4bb546eae7"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)="313030203180", 0x6) write(r5, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8}}, './sys/bus/netdevsim/new_device\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) pidfd_send_signal(r10, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r10, 0x0, 0x40000004, 0x0) unshare(0xe060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, &(0x7f0000000000)={0x1f, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000009a71ef5db7007d00000000000000840a000000000000d368fcff0000000003528bbc09000000183700000200"/60, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r9}, 0xc) 663.093524ms ago: executing program 4 (id=316): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8}) shutdown(r1, 0x0) 603.892196ms ago: executing program 4 (id=317): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 603.734385ms ago: executing program 4 (id=318): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x90, &(0x7f0000000740), 0x1, 0x7b2, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) 557.784077ms ago: executing program 2 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) 518.678107ms ago: executing program 0 (id=321): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x4}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10) 455.983189ms ago: executing program 2 (id=322): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 455.836819ms ago: executing program 4 (id=323): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x2, @perf_bp={0x0, 0x9}, 0x106414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 450.956809ms ago: executing program 2 (id=324): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") syz_read_part_table(0x5d9, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) 435.570349ms ago: executing program 1 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 370.858841ms ago: executing program 0 (id=326): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001e00)=""/4089, 0xff9}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/134, 0x86}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f0000000500)=""/135, 0x87}], 0x5}}], 0x1, 0x10020, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 360.229271ms ago: executing program 3 (id=327): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a53826254632080045"], 0x0) sendto$packet(r0, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7}, 0x14) 360.059701ms ago: executing program 4 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 356.900351ms ago: executing program 0 (id=329): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x4) 317.103372ms ago: executing program 0 (id=330): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="318329bd7040a9dd7b1c20"], 0x14}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) 308.757462ms ago: executing program 2 (id=331): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) kexec_load(0x100, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}], 0x320000) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002500)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@remote, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@remote, {0x0, 0x1, 0x6, 0x0, 0x4000000, 0x0, 0xffffffffffffffff}, {0x3, 0x2}, {0x0, 0xfffffffc}, 0x0, 0x3506, 0xa}, 0x5, 0x5}, [@extra_flags={0x8, 0x18, 0x401}, @iptfs_dont_frag={0x4}]}, 0x104}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r5) accept4(r4, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000600)="c9f7b986000000000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) 257.824824ms ago: executing program 4 (id=332): syz_read_part_table(0x626, &(0x7f0000000000)="$eJzs272LHGUcB/Df7Mvs7plw+BcYbHKmSWDRJiQgx7GIYAKiSSHRNJJmqyusVlddkRSXWPgCadYiIJ4HaazkEAIh3AUhEEEUwSoRORQEC/FER+Zlz9vjbI61CHw+xTy/Z57fzHeWebac4KFWi0/fiXpeZa29a8WJRlFm+SEpi2F1YUS8sHpu6cW3zj5drhW2/3gvIppZvZxO7nqoHDqTtu56o7+y2oonI+LzI3/+8kgRlMawuG+kcefahWhH1NJ9HztpVGM5FI9U36/xqcNV8U07/rOJA1tYPnYzGd6LcTk9Odc/fymNJ2prd7fz+d/l62/svexIPD+b/Bunbs+3q132bW9wv/dT7bdfexHj4+nViGTrRNE19dbnJrsmmUF+/69z6WfXby2OHnS6G+3q5GCpGeW+vXxxOyvt+ncdmkEuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/j4XlYzcfS+49+kUnPt48vXlyrn/+0trRxTfW7p5tRsQnSdV3vFWOyb+XvjmL/Bunbs+/PcqymM9ng/u9nyOJ3nMfjU+nVztxdOtE1fdKcVz57tXXynm22Y50Bvn9TkRcv7U4etDpbjx75sz7zfggBvHl6PVGRKSXL0anbEzyuFoaX3/4chbRmkE0AAAAAAAAAAAAAAAAAAAA7FhqRWNSv5RGxPiZ7/M6a8WVnaY04vGq/KGVL0Z01xv9ldXeu1cWqoXqi/hh7XAMI+LHO9cu7IrZaBfDep71VXmqiP09y7LpBxpOiuX69MLU1/5J3tg++M+m8k8AAAD//2C3eO4=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) 230.987254ms ago: executing program 3 (id=333): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)) 226.671924ms ago: executing program 0 (id=334): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x4f8) 183.063366ms ago: executing program 1 (id=335): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x5, 0x7f, 0x9}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x400}, 0x100200, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x5, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000dc0)=""/4106, 0x100a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000100)=[{0x0, 0x4c}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$netlink(r3, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r7], 0x38}, 0x1, 0x0, 0x0, 0x88840}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_capability(r8, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0) fchown(r8, 0x0, 0x0) 117.409057ms ago: executing program 2 (id=336): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x48120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x7, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) 55.906399ms ago: executing program 2 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) read(r0, 0x0, 0x0) 0s ago: executing program 3 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close_range(r0, r0, 0x0) kernel console output (not intermixed with test programs): T28] audit: type=1400 audit(1787165852.159:111): avc: denied { noatsecure } for pid=3254 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.816692][ T28] audit: type=1400 audit(1787165852.159:112): avc: denied { write } for pid=3254 comm="sh" path="pipe:[2547]" dev="pipefs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.1.0' (ED25519) to the list of known hosts. [ 28.364454][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 28.364468][ T28] audit: type=1400 audit(1787165859.749:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.393617][ T28] audit: type=1400 audit(1787165859.779:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.394383][ T3286] cgroup: Unknown subsys name 'net' [ 28.421356][ T28] audit: type=1400 audit(1787165859.809:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.539665][ T3286] cgroup: Unknown subsys name 'cpuset' [ 28.545775][ T3286] cgroup: Unknown subsys name 'rlimit' [ 28.694735][ T28] audit: type=1400 audit(1787165860.079:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.718112][ T28] audit: type=1400 audit(1787165860.079:130): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.731548][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.740545][ T28] audit: type=1400 audit(1787165860.079:131): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.767618][ T28] audit: type=1400 audit(1787165860.079:132): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.787960][ T28] audit: type=1400 audit(1787165860.139:133): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.800618][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.808925][ T28] audit: type=1400 audit(1787165860.139:134): avc: denied { relabelto } for pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.843207][ T28] audit: type=1400 audit(1787165860.139:135): avc: denied { write } for pid=3288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.404788][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.411913][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.419011][ T3296] bridge_slave_0: entered allmulticast mode [ 30.425572][ T3296] bridge_slave_0: entered promiscuous mode [ 30.436236][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.443390][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.450538][ T3301] bridge_slave_0: entered allmulticast mode [ 30.456779][ T3301] bridge_slave_0: entered promiscuous mode [ 30.471103][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.478151][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.485402][ T3296] bridge_slave_1: entered allmulticast mode [ 30.491853][ T3296] bridge_slave_1: entered promiscuous mode [ 30.502877][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.509996][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.517158][ T3301] bridge_slave_1: entered allmulticast mode [ 30.523551][ T3301] bridge_slave_1: entered promiscuous mode [ 30.563197][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.572379][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.579659][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.586759][ T3303] bridge_slave_0: entered allmulticast mode [ 30.593144][ T3303] bridge_slave_0: entered promiscuous mode [ 30.608828][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.622260][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.629421][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.636550][ T3303] bridge_slave_1: entered allmulticast mode [ 30.642998][ T3303] bridge_slave_1: entered promiscuous mode [ 30.650648][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.677361][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.694522][ T3296] team0: Port device team_slave_0 added [ 30.708234][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.715422][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.722573][ T3300] bridge_slave_0: entered allmulticast mode [ 30.728913][ T3300] bridge_slave_0: entered promiscuous mode [ 30.740418][ T3296] team0: Port device team_slave_1 added [ 30.747097][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.760378][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.767427][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.774601][ T3300] bridge_slave_1: entered allmulticast mode [ 30.780954][ T3300] bridge_slave_1: entered promiscuous mode [ 30.787368][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.794507][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.801781][ T3295] bridge_slave_0: entered allmulticast mode [ 30.808216][ T3295] bridge_slave_0: entered promiscuous mode [ 30.819834][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.834460][ T3301] team0: Port device team_slave_0 added [ 30.844132][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.851328][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.858460][ T3295] bridge_slave_1: entered allmulticast mode [ 30.864844][ T3295] bridge_slave_1: entered promiscuous mode [ 30.880279][ T3301] team0: Port device team_slave_1 added [ 30.894173][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.901241][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.927142][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.938761][ T3303] team0: Port device team_slave_0 added [ 30.949917][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.963573][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.970681][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.996585][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.007897][ T3303] team0: Port device team_slave_1 added [ 31.018410][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.028593][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.044953][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.051955][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.077886][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.093655][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.115263][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.122241][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.148222][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.167422][ T3295] team0: Port device team_slave_0 added [ 31.173200][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.180166][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.206181][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.220705][ T3300] team0: Port device team_slave_0 added [ 31.231289][ T3295] team0: Port device team_slave_1 added [ 31.237266][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.244234][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.270204][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.286548][ T3300] team0: Port device team_slave_1 added [ 31.294080][ T3296] hsr_slave_0: entered promiscuous mode [ 31.300210][ T3296] hsr_slave_1: entered promiscuous mode [ 31.325732][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.332725][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.358714][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.379915][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.386875][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.412767][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.427710][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.434722][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.460616][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.478127][ T3301] hsr_slave_0: entered promiscuous mode [ 31.484185][ T3301] hsr_slave_1: entered promiscuous mode [ 31.489985][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 31.495741][ T3301] Cannot create hsr debugfs directory [ 31.501482][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.508443][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.534423][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.560367][ T3303] hsr_slave_0: entered promiscuous mode [ 31.566394][ T3303] hsr_slave_1: entered promiscuous mode [ 31.572232][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.577942][ T3303] Cannot create hsr debugfs directory [ 31.623711][ T3295] hsr_slave_0: entered promiscuous mode [ 31.629937][ T3295] hsr_slave_1: entered promiscuous mode [ 31.635728][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 31.641535][ T3295] Cannot create hsr debugfs directory [ 31.678193][ T3300] hsr_slave_0: entered promiscuous mode [ 31.684288][ T3300] hsr_slave_1: entered promiscuous mode [ 31.690132][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 31.695834][ T3300] Cannot create hsr debugfs directory [ 31.830958][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.839525][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.847113][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.855424][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.867480][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.876402][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.886085][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.894955][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.917311][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.925857][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.933439][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.942031][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.952753][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.961241][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.973006][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.981437][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.005043][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.013543][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.021155][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.029768][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.037876][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.046345][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.054171][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.062697][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.097126][ T3295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.106089][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.114140][ T3295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.122960][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.130445][ T3295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.138909][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.146915][ T3295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.155680][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.186542][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.195215][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.202917][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.211487][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.219913][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.228455][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.237572][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.246012][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.277052][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.310877][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.326460][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.333553][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.341854][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.348987][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.359457][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.381682][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.390616][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.400923][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.417998][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.425080][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.437426][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.444554][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.453574][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.468108][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.475267][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.483898][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.491034][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.500533][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.510645][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.524193][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.531284][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.546097][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.553277][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.571166][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.596731][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.603835][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.627999][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.635108][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.657752][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.668293][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.692420][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.871729][ T3301] veth0_vlan: entered promiscuous mode [ 32.886869][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.905541][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.915771][ T3301] veth1_vlan: entered promiscuous mode [ 32.928294][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.944659][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.969323][ T3301] veth0_macvtap: entered promiscuous mode [ 32.987194][ T3301] veth1_macvtap: entered promiscuous mode [ 33.020941][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.031537][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.082869][ T3296] veth0_vlan: entered promiscuous mode [ 33.102956][ T3300] veth0_vlan: entered promiscuous mode [ 33.122889][ T3296] veth1_vlan: entered promiscuous mode [ 33.135659][ T3300] veth1_vlan: entered promiscuous mode [ 33.145772][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.160382][ T360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.186363][ T3296] veth0_macvtap: entered promiscuous mode [ 33.201553][ T3295] veth0_vlan: entered promiscuous mode [ 33.212610][ T3300] veth0_macvtap: entered promiscuous mode [ 33.226970][ T3296] veth1_macvtap: entered promiscuous mode [ 33.235830][ T3300] veth1_macvtap: entered promiscuous mode [ 33.251215][ T3295] veth1_vlan: entered promiscuous mode [ 33.269980][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.289639][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.300246][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.317429][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.327413][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.346049][ T3303] veth0_vlan: entered promiscuous mode [ 33.357990][ T3295] veth0_macvtap: entered promiscuous mode [ 33.370156][ T3509] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003 [ 33.374595][ T3295] veth1_macvtap: entered promiscuous mode [ 33.389162][ T2116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.400476][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 33.400490][ T28] audit: type=1400 audit(1787165864.789:161): avc: denied { create } for pid=3510 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.407510][ T3303] veth1_vlan: entered promiscuous mode [ 33.445252][ T28] audit: type=1400 audit(1787165864.819:162): avc: denied { setopt } for pid=3510 comm="syz.2.11" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.467922][ T28] audit: type=1400 audit(1787165864.819:163): avc: denied { connect } for pid=3510 comm="syz.2.11" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.488205][ T28] audit: type=1400 audit(1787165864.829:164): avc: denied { open } for pid=3512 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.507593][ T28] audit: type=1400 audit(1787165864.829:165): avc: denied { perfmon } for pid=3512 comm="syz.2.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.508285][ T3513] process 'syz.2.12' launched '/dev/fd/5' with NULL argv: empty string added [ 33.529178][ T28] audit: type=1400 audit(1787165864.829:166): avc: denied { kernel } for pid=3512 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.559322][ T28] audit: type=1400 audit(1787165864.899:167): avc: denied { execute } for pid=3512 comm="syz.2.12" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.580163][ T28] audit: type=1400 audit(1787165864.919:168): avc: denied { execute_no_trans } for pid=3512 comm="syz.2.12" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.610706][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.638003][ T3303] veth0_macvtap: entered promiscuous mode [ 33.652031][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.675352][ T3303] veth1_macvtap: entered promiscuous mode [ 33.698935][ T28] audit: type=1400 audit(1787165865.079:169): avc: denied { prog_load } for pid=3521 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.756618][ T28] audit: type=1400 audit(1787165865.079:170): avc: denied { bpf } for pid=3521 comm="syz.3.14" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.757955][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.798366][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.843985][ T2116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.865584][ T2116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.889999][ T3537] sd 0:0:1:0: device reset [ 33.949805][ T3542] loop1: detected capacity change from 0 to 128 [ 33.956137][ T360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.974183][ T3542] vfat: Unknown parameter '' [ 33.980626][ T360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.005618][ T3544] loop0: detected capacity change from 0 to 512 [ 34.020225][ T360] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.030207][ T360] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.059442][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.072574][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.090326][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.097661][ T3537] loop2: detected capacity change from 0 to 512 [ 34.117752][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.141046][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.149970][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.168076][ T3544] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.183790][ T3537] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #14: comm syz.2.19: invalid orphan symlink nlink 1 [ 34.199866][ T3537] loop2: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 34.209099][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 34.224707][ C1] EXT4-fs (loop2): initial error at time 1787165865: ext4_orphan_get:1399: inode 14 [ 34.234147][ C1] EXT4-fs (loop2): last error at time 1787165865: ext4_orphan_get:1399: inode 14 [ 34.256550][ T2116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.270782][ T3537] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.19: couldn't read orphan inode 14 (err -117) [ 34.281683][ T2116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.290538][ T3537] loop2: lost filesystem error report for type 5 error -117 [ 34.295973][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.299596][ T3537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.341195][ T3537] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.359245][ T2116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.398380][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.401343][ T2116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.509239][ T2116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.520288][ T2116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.613156][ T3583] loop4: detected capacity change from 0 to 164 [ 34.636771][ T3586] loop1: detected capacity change from 0 to 512 [ 34.698325][ T3586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.722559][ T3586] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.782298][ T3594] xt_hashlimit: size too large, truncated to 1048576 [ 34.796994][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.936212][ T3606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.45'. [ 35.035740][ T3612] netlink: 1 bytes leftover after parsing attributes in process `syz.3.49'. [ 35.120345][ T3612] syz.3.49 (3612) used greatest stack depth: 10688 bytes left [ 35.452095][ T3640] loop3: detected capacity change from 0 to 512 [ 35.470482][ T3643] sg_write: data in/out 204864/132 bytes for SCSI command 0xff-- guessing data in; [ 35.470482][ T3643] program syz.0.72 not setting count and/or reply_len properly [ 35.500688][ T3640] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.61: inode has both inline data and extents flags [ 35.520821][ T3640] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.521930][ T3640] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.61: couldn't read orphan inode 15 (err -117) [ 35.539040][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 35.549193][ C0] EXT4-fs (loop3): last error at time 1787165866: ext4_orphan_get:1399: inode 15 [ 35.561714][ T3640] loop3: lost filesystem error report for type 5 error -117 [ 35.565130][ T3640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.586053][ T3572] syz.2.31 (3572) used greatest stack depth: 10296 bytes left [ 35.664788][ T3660] netlink: 84 bytes leftover after parsing attributes in process `syz.4.70'. [ 35.678160][ T3658] netlink: 72 bytes leftover after parsing attributes in process `syz.2.69'. [ 35.727625][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.736884][ T360] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.755485][ T3662] xt_hashlimit: size too large, truncated to 1048576 [ 35.960724][ T3689] program syz.0.83 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.012712][ T3692] netlink: 1 bytes leftover after parsing attributes in process `syz.4.84'. [ 36.096902][ T3706] loop4: detected capacity change from 0 to 1024 [ 36.103791][ T3706] EXT4-fs: Ignoring removed oldalloc option [ 36.120776][ T3706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.122495][ T3682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.135496][ T3706] EXT4-fs (loop4): shut down requested (2) [ 36.142448][ T3682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.156810][ T3706] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 36.166033][ T3706] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 36.191326][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.216438][ T3712] program syz.4.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.260827][ T3718] bond0: invalid ARP target specified [ 36.264858][ T3719] loop4: detected capacity change from 0 to 1024 [ 36.274826][ T3719] EXT4-fs: Ignoring removed bh option [ 36.293874][ T3721] Zero length message leads to an empty skb [ 36.303363][ T3719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.325099][ T3719] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.350613][ T3727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 36.360890][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.397275][ T3731] vcan0: tx drop: invalid da for name 0x00000000000000c8 [ 36.411789][ T3734] loop0: detected capacity change from 0 to 512 [ 36.429503][ T3734] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.454899][ T3734] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.489843][ T3734] EXT4-fs (loop0): 1 truncate cleaned up [ 36.500964][ T3734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.513833][ T3744] loop2: detected capacity change from 0 to 512 [ 36.527164][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.537615][ T3744] EXT4-fs: Ignoring removed oldalloc option [ 36.544259][ T3744] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 36.563107][ T3744] EXT4-fs (loop2): 1 truncate cleaned up [ 36.578347][ T3744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.630391][ T3757] capability: warning: `syz.0.110' uses 32-bit capabilities (legacy support in use) [ 36.647908][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.692131][ T3759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.708244][ T3759] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.723931][ T3761] netlink: 84 bytes leftover after parsing attributes in process `syz.2.111'. [ 36.747480][ T3759] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 36.755699][ T3759] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 36.776352][ T3759] EXT4-fs (loop4): 1 truncate cleaned up [ 36.782557][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.805678][ T3759] EXT4-fs error (device loop4): ext4_map_blocks:793: inode #2: block 4: comm syz.4.112: lblock 0 mapped to illegal pblock 4 (length 1) [ 36.814689][ T3769] program syz.2.116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.830546][ T3759] EXT4-fs (loop4): Remounting filesystem read-only [ 36.903496][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.924244][ T3780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 37.058096][ T3794] netlink: 72 bytes leftover after parsing attributes in process `syz.2.127'. [ 37.087291][ T3800] vhci_hcd vhci_hcd.0: remove, state 4 [ 37.106401][ T3800] usb usb2: USB disconnect, device number 1 [ 37.127230][ T3802] ======================================================= [ 37.127230][ T3802] WARNING: The mand mount option has been deprecated and [ 37.127230][ T3802] and is ignored by this kernel. Remove the mand [ 37.127230][ T3802] option from the mount to silence this warning. [ 37.127230][ T3802] ======================================================= [ 37.182009][ T360] vhci_hcd vhci_hcd.0: stop threads [ 37.191886][ T3802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.206226][ T360] vhci_hcd vhci_hcd.0: release socket [ 37.213282][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 37.222556][ T360] vhci_hcd vhci_hcd.0: stop threads [ 37.227916][ T3802] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.230210][ T360] vhci_hcd vhci_hcd.0: release socket [ 37.247313][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 37.248027][ T3802] EXT4-fs error (device loop4): ext4_map_blocks:835: inode #15: comm syz.4.132: lblock 0 mapped to illegal pblock 0 (length 6) [ 37.258164][ T360] vhci_hcd vhci_hcd.0: stop threads [ 37.276641][ T360] vhci_hcd vhci_hcd.0: release socket [ 37.302195][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 37.313156][ T30] vhci_hcd vhci_hcd.0: stop threads [ 37.323765][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.335106][ T30] vhci_hcd vhci_hcd.0: release socket [ 37.354662][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 37.371912][ T30] vhci_hcd vhci_hcd.0: stop threads [ 37.387478][ T30] vhci_hcd vhci_hcd.0: release socket [ 37.403451][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 37.416139][ T30] vhci_hcd vhci_hcd.0: stop threads [ 37.421793][ T30] vhci_hcd vhci_hcd.0: release socket [ 37.424621][ T3824] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.427261][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 37.445163][ T30] vhci_hcd vhci_hcd.0: stop threads [ 37.450621][ T30] vhci_hcd vhci_hcd.0: release socket [ 37.456209][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 37.470800][ T30] vhci_hcd vhci_hcd.0: stop threads [ 37.479096][ T30] vhci_hcd vhci_hcd.0: release socket [ 37.485066][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 37.491331][ T3800] vhci_hcd vhci_hcd.0: USB bus 2 deregistered [ 37.497881][ T3824] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.499858][ T3800] vhci_hcd vhci_hcd.0: remove, state 4 [ 37.532241][ T3800] usb usb1: USB disconnect, device number 1 [ 37.542804][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.555241][ T12] vhci_hcd vhci_hcd.0: stop threads [ 37.564956][ T12] vhci_hcd vhci_hcd.0: release socket [ 37.575953][ T3830] netlink: 84 bytes leftover after parsing attributes in process `syz.4.143'. [ 37.585213][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 37.591869][ T12] vhci_hcd vhci_hcd.0: stop threads [ 37.629355][ T12] vhci_hcd vhci_hcd.0: release socket [ 37.639245][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 37.646896][ T12] vhci_hcd vhci_hcd.0: stop threads [ 37.657074][ T12] vhci_hcd vhci_hcd.0: release socket [ 37.666045][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 37.675286][ T12] vhci_hcd vhci_hcd.0: stop threads [ 37.684681][ T12] vhci_hcd vhci_hcd.0: release socket [ 37.695828][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 37.717973][ T12] vhci_hcd vhci_hcd.0: stop threads [ 37.724366][ T12] vhci_hcd vhci_hcd.0: release socket [ 37.730717][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 37.740053][ T360] vhci_hcd vhci_hcd.0: stop threads [ 37.746782][ T360] vhci_hcd vhci_hcd.0: release socket [ 37.760426][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 37.783216][ T3847] syz.4.151: attempt to access beyond end of device [ 37.783216][ T3847] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 37.788718][ T360] vhci_hcd vhci_hcd.0: stop threads [ 37.808430][ T360] vhci_hcd vhci_hcd.0: release socket [ 37.814176][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 37.843157][ T360] vhci_hcd vhci_hcd.0: stop threads [ 37.854078][ T360] vhci_hcd vhci_hcd.0: release socket [ 37.870251][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 37.877975][ T3800] vhci_hcd vhci_hcd.0: USB bus 1 deregistered [ 38.029754][ T3869] vhci_hcd vhci_hcd.3: invalid port number 236 [ 38.042230][ T3873] capability: warning: `syz.0.163' uses deprecated v2 capabilities in a way that may be insecure [ 38.058216][ T3875] program syz.4.165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.071339][ T3854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.090477][ T3854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.148384][ T3877] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 38.148384][ T3877] Please contact the netfilter-devel mailing list or update your nftables rules. [ 38.238159][ T3891] gretap0: entered promiscuous mode [ 38.332149][ T3904] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.342839][ T3902] EXT4-fs: Ignoring removed oldalloc option [ 38.350858][ T3904] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 38.366049][ T3904] EXT4-fs (loop0): 1 truncate cleaned up [ 38.369188][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 38.378330][ C1] EXT4-fs (loop0): initial error at time 1787165869: ext4_mb_generate_buddy:1317 [ 38.379174][ T3904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.387698][ C1] EXT4-fs (loop0): last error at time 1787165869: ext4_mb_generate_buddy:1317 [ 38.409939][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 38.409952][ T28] audit: type=1400 audit(1787165869.789:296): avc: denied { write } for pid=3903 comm="syz.0.178" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.439086][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.451067][ T3902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.468879][ T28] audit: type=1400 audit(1787165869.789:297): avc: denied { remove_name } for pid=3903 comm="syz.0.178" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.499688][ T28] audit: type=1400 audit(1787165869.789:298): avc: denied { unlink } for pid=3903 comm="syz.0.178" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.522039][ T28] audit: type=1400 audit(1787165869.879:299): avc: denied { create } for pid=3911 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.541427][ T28] audit: type=1400 audit(1787165869.889:300): avc: denied { write } for pid=3911 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.542092][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.560857][ T28] audit: type=1400 audit(1787165869.889:301): avc: denied { write } for pid=3901 comm="syz.4.177" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.560949][ T28] audit: type=1400 audit(1787165869.889:302): avc: denied { ioctl } for pid=3901 comm="syz.4.177" path="/42/file1/file1" dev="loop4" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.628036][ T3915] vcan0: tx drop: invalid da for name 0x00000000000000c8 [ 38.704434][ T28] audit: type=1400 audit(1787165870.089:303): avc: denied { create } for pid=3923 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.748217][ T28] audit: type=1400 audit(1787165870.109:304): avc: denied { bind } for pid=3923 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.776034][ T28] audit: type=1400 audit(1787165870.109:305): avc: denied { ioctl } for pid=3923 comm="syz.4.184" path="socket:[6656]" dev="sockfs" ino=6656 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.358475][ T4009] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 40.407178][ T4016] set_capacity_and_notify: 8 callbacks suppressed [ 40.407196][ T4016] loop4: detected capacity change from 0 to 2048 [ 40.471802][ T4016] loop4: p3 < > p4 < > [ 40.476022][ T4016] loop4: partition table partially beyond EOD, truncated [ 40.542260][ T4024] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 40.562006][ T4016] loop4: p3 start 4284289 is beyond EOD, truncated [ 40.567279][ T3389] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 40.578528][ T3389] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 40.608202][ T3741] udevd[3741]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 40.609279][ T3389] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 40.627705][ T4026] dvmrp1: entered allmulticast mode [ 40.643420][ T3389] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 40.662590][ T4029] __nla_validate_parse: 7 callbacks suppressed [ 40.662632][ T4029] netlink: 72 bytes leftover after parsing attributes in process `syz.0.232'. [ 40.680051][ T3389] rtc rtc0: __rtc_set_alarm: err=-22 [ 40.701017][ T23] kernel write not supported for file /snd/seq (pid: 23 comm: kworker/1:0) [ 40.917034][ T4061] netlink: 'syz.4.247': attribute type 1 has an invalid length. [ 40.948660][ T4066] loop4: detected capacity change from 0 to 164 [ 40.959172][ C1] Illegal XDP return value 16128 on prog (id 34) dev lo, expect packet loss! [ 40.970749][ T4070] netlink: 72 bytes leftover after parsing attributes in process `syz.0.251'. [ 41.005350][ T4066] rock: directory entry would overflow storage [ 41.021683][ T4066] rock: sig=0x5252, size=5, remaining=3 [ 41.185882][ T4086] loop0: detected capacity change from 0 to 512 [ 41.220111][ T4086] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.243121][ T4086] EXT4-fs (loop0): 1 truncate cleaned up [ 41.249722][ T4086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.269840][ T4090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4090 comm=syz.3.260 [ 41.289596][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.397568][ T4105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4105 comm=syz.3.267 [ 41.427109][ T4105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4105 comm=syz.3.267 [ 41.517377][ T4113] loop3: detected capacity change from 0 to 512 [ 41.559236][ T4113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.573325][ T4113] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.626956][ T4113] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.676896][ T4132] netlink: 84 bytes leftover after parsing attributes in process `syz.0.277'. [ 41.698424][ T4136] loop3: detected capacity change from 0 to 1024 [ 41.734203][ T4136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.748707][ T4140] loop0: detected capacity change from 0 to 1764 [ 41.776893][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.842129][ T4149] loop3: detected capacity change from 0 to 512 [ 41.868811][ T4149] EXT4-fs error (device loop3): ext4_iget_extra_inode:5152: inode #15: comm syz.3.285: corrupted in-inode xattr: invalid ea_ino [ 41.882756][ T4149] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.882965][ T4149] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.285: couldn't read orphan inode 15 (err -117) [ 41.892193][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 41.892215][ C1] EXT4-fs (loop3): initial error at time 1787165873: ext4_iget_extra_inode:5152: inode 15 [ 41.892261][ C1] EXT4-fs (loop3): last error at time 1787165873: ext4_iget_extra_inode:5152: inode 15 [ 41.930757][ T4149] loop3: lost filesystem error report for type 5 error -117 [ 41.936061][ T4149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.003316][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.029745][ T4168] netlink: 192 bytes leftover after parsing attributes in process `syz.3.295'. [ 42.041351][ T4168] netlink: 80 bytes leftover after parsing attributes in process `syz.3.295'. [ 42.048497][ T4171] option changes via remount are deprecated (pid=4170 comm=syz.0.294) [ 42.063986][ T4171] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 "" [ 42.078623][ T4174] ip_tables: iptables: counters copy to user failed while replacing table [ 42.171973][ T4185] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 42.226838][ T4192] xt_hashlimit: size too large, truncated to 1048576 [ 42.313327][ T4210] loop0: detected capacity change from 0 to 128 [ 42.320363][ T4209] loop3: detected capacity change from 0 to 512 [ 42.338235][ T4209] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.313: iget: bad i_size value: 38620345925642 [ 42.351657][ T4209] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.351964][ T4209] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.313: couldn't read orphan inode 15 (err -117) [ 42.361141][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 42.361160][ C1] EXT4-fs (loop3): initial error at time 1787165873: ext4_orphan_get:1399: inode 15 [ 42.361200][ C1] EXT4-fs (loop3): last error at time 1787165873: ext4_orphan_get:1399: inode 15 [ 42.398689][ T4202] xt_hashlimit: size too large, truncated to 1048576 [ 42.399687][ T4209] loop3: lost filesystem error report for type 5 error -117 [ 42.406128][ T4209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.485382][ T4221] loop4: detected capacity change from 0 to 2048 [ 42.515475][ T4225] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.313: bg 0: block 5: invalid block bitmap [ 42.518037][ T4221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.550837][ T4225] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 784 with error 28 [ 42.557420][ T4221] EXT4-fs (loop4): shut down requested (1) [ 42.564280][ T4225] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.564280][ T4225] [ 42.579294][ T4225] EXT4-fs (loop3): Total free blocks count 0 [ 42.601611][ T4225] EXT4-fs (loop3): Free/Dirty block details [ 42.603879][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.607681][ T4225] EXT4-fs (loop3): free_blocks=0 [ 42.621904][ T4225] EXT4-fs (loop3): dirty_blocks=792 [ 42.627277][ T4225] EXT4-fs (loop3): Block reservation details [ 42.634176][ T4225] EXT4-fs (loop3): i_reserved_data_blocks=792 [ 42.691681][ T4239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4239 comm=syz.0.326 [ 42.718193][ T4240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.325'. [ 42.740782][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 784 with max blocks 8 with error 28 [ 42.767317][ T4240] bond0: entered promiscuous mode [ 42.768873][ T3296] EXT4-fs warning (device loop3): ext4_evict_inode:197: inode #18: comm syz-executor: data will be lost [ 42.783234][ T4240] bond_slave_0: entered promiscuous mode [ 42.813601][ T4240] bond_slave_1: entered promiscuous mode [ 42.834970][ T4240] gretap0: entered promiscuous mode [ 42.852061][ T4240] hsr1: entered promiscuous mode [ 42.901125][ T4250] loop4: p1 p2 p3 [ 42.917996][ T4250] loop4: p2 size 458752 extends beyond EOD, truncated [ 42.935762][ T4250] loop4: p3 start 65280 is beyond EOD, truncated [ 42.963057][ T2981] loop4: p1 p2 p3 [ 42.979369][ T2981] loop4: p2 size 458752 extends beyond EOD, truncated [ 42.993376][ T4255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.012415][ T2981] loop4: p3 start 65280 is beyond EOD, truncated [ 43.043863][ T4264] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 43.098610][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.145690][ T3296] ================================================================== [ 43.153798][ T3296] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 43.161364][ T3296] [ 43.163698][ T3296] read-write to 0xffff888237c26528 of 1 bytes by task 4250 on cpu 0: [ 43.171770][ T3296] folio_add_lru+0xa5/0x250 [ 43.176289][ T3296] shmem_get_folio_gfp+0x7cc/0xd90 [ 43.181416][ T3296] shmem_fault+0xf6/0x250 [ 43.185765][ T3296] handle_mm_fault+0x167a/0x2da0 [ 43.190716][ T3296] __get_user_pages+0x129c/0x1f10 [ 43.195739][ T3296] __mm_populate+0x242/0x390 [ 43.200317][ T3296] vm_mmap_pgoff+0x23b/0x2d0 [ 43.204910][ T3296] ksys_mmap_pgoff+0xc1/0x310 [ 43.209600][ T3296] x64_sys_call+0x23b3/0x2550 [ 43.214282][ T3296] do_syscall_64+0x112/0x360 [ 43.218868][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.224748][ T3296] [ 43.227058][ T3296] read to 0xffff888237c26528 of 1 bytes by task 3296 on cpu 1: [ 43.234584][ T3296] __lru_add_drain_all+0x180/0x450 [ 43.239688][ T3296] lru_add_drain_all+0x10/0x20 [ 43.244443][ T3296] invalidate_bdev+0x47/0x70 [ 43.249030][ T3296] ext4_put_super+0x614/0x7c0 [ 43.253699][ T3296] generic_shutdown_super+0xee/0x220 [ 43.258973][ T3296] kill_block_super+0x2d/0xb0 [ 43.263645][ T3296] ext4_kill_sb+0x42/0x80 [ 43.267961][ T3296] deactivate_locked_super+0x75/0x200 [ 43.273321][ T3296] deactivate_super+0x9a/0xb0 [ 43.277985][ T3296] cleanup_mnt+0x2c3/0x340 [ 43.282396][ T3296] __cleanup_mnt+0x19/0x20 [ 43.286803][ T3296] task_work_run+0x130/0x1a0 [ 43.291383][ T3296] exit_to_user_mode_loop+0x1e4/0x8c0 [ 43.296750][ T3296] do_syscall_64+0x212/0x360 [ 43.301328][ T3296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.307209][ T3296] [ 43.309520][ T3296] value changed: 0x0b -> 0x0c [ 43.314180][ T3296] [ 43.316492][ T3296] Reported by Kernel Concurrency Sanitizer on: [ 43.322641][ T3296] CPU: 1 UID: 0 PID: 3296 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 43.332087][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.342126][ T3296] ==================================================================