last executing test programs: 9.223861812s ago: executing program 4 (id=67): socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0xffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x845, &(0x7f00000000c0)=ANY=[@ANYBLOB="e66c757368090000000000000073686f77657865002c8d7466383d322c00"], 0x0, 0x274, &(0x7f0000000780)="$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") mount$bind(&(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x1333404, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x1d}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010326bd6000000000002d9300000c0001800800"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r7, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) sendfile(r7, r6, 0x0, 0x7ffff000) 8.183433968s ago: executing program 4 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)='%+9llu \x00'}, 0x20) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) 8.070459509s ago: executing program 4 (id=76): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r4}, &(0x7f0000000140)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x28c1, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0xb7, 0x5, 0x10000, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @value=r1}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) signalfd(r2, &(0x7f0000000600)={[0x29]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r9, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}, [@map_fd={0x18, 0xb, 0x1, 0x0, r5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0xc3, 0x67, &(0x7f0000000280)=""/103, 0x41100, 0x70, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000380)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, r7, r2, r0, r0, r8, r1, r9, r0], 0x0, 0x10, 0x2, @void, @value}, 0x94) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r10, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 7.124567323s ago: executing program 4 (id=88): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000340)={[{@noacl}]}, 0xfc, 0x7bb, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, 0x0, &(0x7f0000000000), 0x6c, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x599ec2, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fdatasync(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x40}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x4, 0x5, 0x6, 0xefc1bb1}]}) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) socket(0x10, 0x3, 0x0) 5.497402128s ago: executing program 4 (id=96): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xc}}, 0x20) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000101010200000000000000000a0000000c001980080002000500000006001240000300003800028033000180140003"], 0x60}}, 0x0) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r6, 0x0, 0x0, 0x1001f0) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xc615, 0x101, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x10, 0x6, 0x10001) 4.885302877s ago: executing program 4 (id=104): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000080)=0x4, 0x4) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a) splice(r6, 0x0, r5, 0x0, 0x80000000000, 0x0) mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r6, 0xf0831000) getcwd(&(0x7f0000000140)=""/178, 0xb2) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x12, 0x0, 0x0) 2.150374058s ago: executing program 3 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}, 0x0}, {@nouid32}, {@noload}, {@debug}, {@mblk_io_submit}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0xa, 0x516, &(0x7f0000000f80)="$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") 2.093882818s ago: executing program 0 (id=139): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_open_dev$sg(0x0, 0x3, 0x7d1602) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 2.00299152s ago: executing program 1 (id=140): socket(0x2000000000000021, 0x2, 0x10000000000002) readv(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x238, 0x940c, 0x3002, 0x238, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1d0, 0x238, 0x0, {}, [@common=@frag={{0x30}, {[0x1ff, 0x2], 0x1, 0x1e, 0x3}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x5, 0x5, 0x4, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0xffffff00, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'veth1_to_batadv\x00', 'gretap0\x00', {0xff}, {0xff}, 0x33, 0x8, 0x1, 0x2a}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7ff, 0x0, 0x9, 0x6, 0x7, 0x2, 0x8000, 0x1]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 1.96603418s ago: executing program 3 (id=141): socket(0x2000000000000021, 0x2, 0x10000000000002) readv(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x238, 0x940c, 0x3002, 0x238, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1d0, 0x238, 0x0, {}, [@common=@frag={{0x30}, {[0x1ff, 0x2], 0x1, 0x1e, 0x3}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x5, 0x5, 0x4, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0xffffff00, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'veth1_to_batadv\x00', 'gretap0\x00', {0xff}, {0xff}, 0x33, 0x8, 0x1, 0x2a}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7ff, 0x0, 0x9, 0x6, 0x7, 0x2, 0x8000, 0x1]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 1.911874131s ago: executing program 3 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000"], 0xfc}}, 0x20000004) 1.910139571s ago: executing program 1 (id=143): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x78, r2, 0x701, 0x70bd25, 0x0, {0xb}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5c, 0xa8, @random="2915a32108d61f9e8ee0815857e793b5a3f483d36484d8d4bea8181ffcdb84cc39a07ced0af9699b625aaa253573c297eb92f65bb7122202f5e368afaa688dc5f28d9d0eb88a209843d96c2de0f2e10cef0321e47aeed606"}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, 0x0) 1.841408262s ago: executing program 1 (id=144): syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0xe878, 0x40, 0x3, 0x2d4}, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x6a6e81, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x0) dup3(r1, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {&(0x7f0000000540)}], 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffde) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000020e30000000000003b00000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000005c0)="580d7340495b15ab48a44a53d652250d0e85c684ddd327a7f111189a329698b9ff1f9a8b554ce1fb3b3222042f740fb5f17fe1568ad10660a64be761130a6f06bc60a22823bb00000000000000", 0x1f5097f3, r4, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 1.840280152s ago: executing program 3 (id=145): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) open(0x0, 0x145842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff0000000000000000001000"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000400000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) unshare(0x2c060000) unshare(0x2c020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r4, 0x2402}], 0x1, 0x83a4) fcntl$setpipe(r4, 0x407, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r5, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000600)={@void, @val={0x1, 0x3, 0xffff, 0x9, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x2c, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x7b8dd026, 0x1ff}}}}}, 0x36) mprotect(&(0x7f000052d000/0x2000)=nil, 0x2000, 0x1000000) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 1.437545368s ago: executing program 0 (id=146): socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "1388"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x30, 0xe, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0xa, 0x80, 0x1, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x10, 0x6, 0x5}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.213433192s ago: executing program 2 (id=150): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet6(0xa, 0x6, 0x0) r3 = syz_io_uring_setup(0x7d9b, &(0x7f0000000640)={0x0, 0x6cc1, 0x10100, 0xfffffffe, 0x17b}, &(0x7f0000000480), &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x105190, 0x5dd8, 0x0, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000500)=[{0x28, 0x102, 0xd, "3c12c51188b1e93a5a790505c98d6fd1a8"}], 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@nouid32}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd", 0xc}}, 0xee) close(r10) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r9, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1.065445954s ago: executing program 2 (id=151): r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x82000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setownex(r0, 0xf, 0x0) 1.035681264s ago: executing program 2 (id=152): socket(0x2000000000000021, 0x2, 0x10000000000002) readv(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x238, 0x940c, 0x3002, 0x238, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1d0, 0x238, 0x0, {}, [@common=@frag={{0x30}, {[0x1ff, 0x2], 0x1, 0x1e, 0x3}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x5, 0x5, 0x4, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0xffffff00, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'veth1_to_batadv\x00', 'gretap0\x00', {0xff}, {0xff}, 0x33, 0x8, 0x1, 0x2a}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7ff, 0x0, 0x9, 0x6, 0x7, 0x2, 0x8000, 0x1]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 1.027073844s ago: executing program 1 (id=153): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x28c1, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0xb7, 0x5, 0x10000, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @value=r1}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) signalfd(r2, &(0x7f0000000600)={[0x29]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x400000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}, [@map_fd={0x18, 0xb, 0x1, 0x0, r4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0xc3, 0x67, &(0x7f0000000280)=""/103, 0x41100, 0x70, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000380)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, r6, r2, r0, r0, r7, r1, r8, r0], 0x0, 0x10, 0x2, @void, @value}, 0x94) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1.002118405s ago: executing program 2 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2c020400) r2 = syz_io_uring_setup(0xe43, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x3, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00'}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 916.004836ms ago: executing program 3 (id=155): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000"], 0xfc}}, 0x20000004) 912.173006ms ago: executing program 1 (id=156): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_open_dev$sg(0x0, 0x3, 0x7d1602) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 887.149897ms ago: executing program 3 (id=157): sched_setscheduler(0x0, 0x6, &(0x7f00000001c0)=0xffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffc98}]) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x845, &(0x7f00000000c0)=ANY=[@ANYBLOB="e66c757368090000000000000073686f77657865002c8d7466383d322c00"], 0x0, 0x274, &(0x7f0000000780)="$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") mount$bind(&(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x1333404, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x1d}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r5, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) sendfile(r5, r4, 0x0, 0x7ffff000) 857.650787ms ago: executing program 2 (id=158): syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0xe878, 0x40, 0x3, 0x2d4}, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x6a6e81, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) unshare(0x22020400) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x0) r3 = dup3(r1, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {&(0x7f0000000540)}], 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffde) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000020e30000000000003b00000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000005c0)="580d7340495b15ab48a44a53d652250d0e85c684ddd327a7f111189a329698b9ff1f9a8b554ce1fb3b3222042f740fb5f17fe1568ad10660a64be761130a6f06bc60a22823bb00000000000000", 0x1f5097f3, r6, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x8080) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 558.585671ms ago: executing program 0 (id=159): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh]}}}}}}}, 0x0) 556.182951ms ago: executing program 0 (id=160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) 493.370462ms ago: executing program 0 (id=161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_io_uring_setup(0x7d9b, 0x0, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x105190, 0x5dd8, 0x0, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14a8}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000500)=[{0x28, 0x102, 0xd, "3c12c51188b1e93a5a790505c98d6fd1a8"}], 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r10, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@nouid32}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r14 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r14, &(0x7f0000000080)={0x1d, r13, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r14, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd", 0xc}}, 0xee) close(r14) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r13, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 96.133578ms ago: executing program 1 (id=162): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet6(0xa, 0x6, 0x0) r3 = syz_io_uring_setup(0x7d9b, &(0x7f0000000640)={0x0, 0x6cc1, 0x10100, 0xfffffffe, 0x17b}, &(0x7f0000000480), &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x105190, 0x5dd8, 0x0, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000500)=[{0x28, 0x102, 0xd, "3c12c51188b1e93a5a790505c98d6fd1a8"}], 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@nouid32}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2dd", 0xc}}, 0xee) close(r10) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r9, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 45.731739ms ago: executing program 0 (id=163): syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0xe878, 0x40, 0x3, 0x2d4}, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x6a6e81, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x0) dup3(r1, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {&(0x7f0000000540)}], 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffde) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000020e30000000000003b00000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000005c0)="580d7340495b15ab48a44a53d652250d0e85c684ddd327a7f111189a329698b9ff1f9a8b554ce1fb3b3222042f740fb5f17fe1568ad10660a64be761130a6f06bc60a22823bb00000000000000", 0x1f5097f3, r4, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 0s ago: executing program 2 (id=164): r0 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x1000}, 0x18) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x28, r4, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xa25e}}}}}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500009f998ffe55dbf314a212c00000020000000000000000000000bfa100000000000007019c303883ffffb702000008000020b70300000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9135}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x10) setuid(0xee01) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x2, 0x2, @vifc_lcl_addr=@empty, @multicast2}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts. [ 28.309964][ T29] audit: type=1400 audit(1747288083.577:65): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.311088][ T3304] cgroup: Unknown subsys name 'net' [ 28.332769][ T29] audit: type=1400 audit(1747288083.577:66): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.360208][ T29] audit: type=1400 audit(1747288083.607:67): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.516564][ T3304] cgroup: Unknown subsys name 'cpuset' [ 28.522899][ T3304] cgroup: Unknown subsys name 'rlimit' [ 28.653553][ T29] audit: type=1400 audit(1747288083.917:68): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.677467][ T29] audit: type=1400 audit(1747288083.917:69): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.698096][ T29] audit: type=1400 audit(1747288083.917:70): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.718518][ T29] audit: type=1400 audit(1747288083.917:71): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.738815][ T29] audit: type=1400 audit(1747288083.937:72): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.763749][ T29] audit: type=1400 audit(1747288083.937:73): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.772002][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.795780][ T29] audit: type=1400 audit(1747288084.067:74): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.888393][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.703503][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.753514][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.830994][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.838175][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.845530][ T3316] bridge_slave_0: entered allmulticast mode [ 30.851934][ T3316] bridge_slave_0: entered promiscuous mode [ 30.864033][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.871231][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.878434][ T3316] bridge_slave_1: entered allmulticast mode [ 30.884924][ T3316] bridge_slave_1: entered promiscuous mode [ 30.904893][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 30.939641][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 30.950072][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.977544][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.984637][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.991828][ T3314] bridge_slave_0: entered allmulticast mode [ 30.998228][ T3314] bridge_slave_0: entered promiscuous mode [ 31.004731][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.011839][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.019190][ T3314] bridge_slave_1: entered allmulticast mode [ 31.025757][ T3314] bridge_slave_1: entered promiscuous mode [ 31.033019][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.057575][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 31.078717][ T3316] team0: Port device team_slave_0 added [ 31.108686][ T3316] team0: Port device team_slave_1 added [ 31.127443][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.137859][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.175921][ T3314] team0: Port device team_slave_0 added [ 31.182500][ T3314] team0: Port device team_slave_1 added [ 31.200426][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.207566][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.214727][ T3315] bridge_slave_0: entered allmulticast mode [ 31.221382][ T3315] bridge_slave_0: entered promiscuous mode [ 31.233028][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.240040][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.266150][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.288792][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.296008][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.303214][ T3315] bridge_slave_1: entered allmulticast mode [ 31.309881][ T3315] bridge_slave_1: entered promiscuous mode [ 31.316114][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.323154][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.330429][ T3317] bridge_slave_0: entered allmulticast mode [ 31.336925][ T3317] bridge_slave_0: entered promiscuous mode [ 31.343557][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.350587][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.376595][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.392395][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.399403][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.425340][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.441354][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.448489][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.455766][ T3317] bridge_slave_1: entered allmulticast mode [ 31.462306][ T3317] bridge_slave_1: entered promiscuous mode [ 31.476629][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.483717][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.491095][ T3322] bridge_slave_0: entered allmulticast mode [ 31.497650][ T3322] bridge_slave_0: entered promiscuous mode [ 31.504315][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.511330][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.537356][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.554616][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.569868][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.579172][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.586374][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.593548][ T3322] bridge_slave_1: entered allmulticast mode [ 31.600100][ T3322] bridge_slave_1: entered promiscuous mode [ 31.614641][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.630340][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.666354][ T3317] team0: Port device team_slave_0 added [ 31.672786][ T3317] team0: Port device team_slave_1 added [ 31.685675][ T3316] hsr_slave_0: entered promiscuous mode [ 31.691743][ T3316] hsr_slave_1: entered promiscuous mode [ 31.703511][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.724842][ T3314] hsr_slave_0: entered promiscuous mode [ 31.731133][ T3314] hsr_slave_1: entered promiscuous mode [ 31.737059][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.744617][ T3314] Cannot create hsr debugfs directory [ 31.757370][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.772293][ T3315] team0: Port device team_slave_0 added [ 31.784451][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.791474][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.817557][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.830936][ T3315] team0: Port device team_slave_1 added [ 31.853697][ T3322] team0: Port device team_slave_0 added [ 31.859960][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.866988][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.893035][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.916137][ T3322] team0: Port device team_slave_1 added [ 31.937049][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.944108][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.970174][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.983643][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.990652][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.016703][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.049595][ T3317] hsr_slave_0: entered promiscuous mode [ 32.055714][ T3317] hsr_slave_1: entered promiscuous mode [ 32.061510][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.069108][ T3317] Cannot create hsr debugfs directory [ 32.082938][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.090047][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.116515][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.130521][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.137790][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.163761][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.210182][ T3315] hsr_slave_0: entered promiscuous mode [ 32.216459][ T3315] hsr_slave_1: entered promiscuous mode [ 32.222309][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.230082][ T3315] Cannot create hsr debugfs directory [ 32.272491][ T3322] hsr_slave_0: entered promiscuous mode [ 32.278852][ T3322] hsr_slave_1: entered promiscuous mode [ 32.284660][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.292262][ T3322] Cannot create hsr debugfs directory [ 32.377127][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.386257][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.420753][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.444149][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.487858][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.496383][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.511448][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.521160][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.545925][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.554983][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.572489][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.581703][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.618744][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.629727][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.646625][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.660733][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.676030][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.690528][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.697637][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.715149][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.722703][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.737656][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.744745][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.772398][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.781386][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.793618][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.803785][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.820437][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.833195][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.840307][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.856057][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.863267][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.918890][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.952861][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.967016][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.982265][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.991836][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.998981][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.028407][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.036454][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.043522][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.063120][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.070266][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.082952][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.090064][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.099998][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.123489][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.134108][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.149494][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.172891][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.180045][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.189188][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.196284][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.216388][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.255265][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.279712][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.361031][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.448625][ T3316] veth0_vlan: entered promiscuous mode [ 33.464149][ T3317] veth0_vlan: entered promiscuous mode [ 33.472515][ T3314] veth0_vlan: entered promiscuous mode [ 33.482835][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.500093][ T3314] veth1_vlan: entered promiscuous mode [ 33.507832][ T3317] veth1_vlan: entered promiscuous mode [ 33.515156][ T3316] veth1_vlan: entered promiscuous mode [ 33.537078][ T3322] veth0_vlan: entered promiscuous mode [ 33.566131][ T3322] veth1_vlan: entered promiscuous mode [ 33.578305][ T3314] veth0_macvtap: entered promiscuous mode [ 33.592710][ T3314] veth1_macvtap: entered promiscuous mode [ 33.614453][ T3316] veth0_macvtap: entered promiscuous mode [ 33.627916][ T3317] veth0_macvtap: entered promiscuous mode [ 33.635390][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.647783][ T3316] veth1_macvtap: entered promiscuous mode [ 33.658553][ T3317] veth1_macvtap: entered promiscuous mode [ 33.668645][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.679169][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.690276][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.700570][ T3322] veth0_macvtap: entered promiscuous mode [ 33.710056][ T3322] veth1_macvtap: entered promiscuous mode [ 33.717893][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.727975][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.736768][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.745628][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.754323][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.769829][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.780337][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.791692][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.811432][ T3315] veth0_vlan: entered promiscuous mode [ 33.817641][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.826465][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.835168][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.844033][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.854206][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.865398][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.875332][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.885810][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.896702][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.905124][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.915671][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.925557][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.936048][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.945913][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.956401][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.966879][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.976245][ T3315] veth1_vlan: entered promiscuous mode [ 33.989783][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.000531][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.010381][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.020832][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.032016][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.042678][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.053247][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.063134][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.073815][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.083677][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.094116][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.104780][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.117136][ T3317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.126043][ T3317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.134819][ T3317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.143585][ T3317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.157596][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 34.157608][ T29] audit: type=1400 audit(1747288089.427:84): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.jkMNTM/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.162015][ T3315] veth0_macvtap: entered promiscuous mode [ 34.168000][ T29] audit: type=1400 audit(1747288089.427:85): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.215726][ T29] audit: type=1400 audit(1747288089.427:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.jkMNTM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.240958][ T29] audit: type=1400 audit(1747288089.427:87): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.262827][ T29] audit: type=1400 audit(1747288089.427:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.jkMNTM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.289395][ T29] audit: type=1400 audit(1747288089.427:89): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.jkMNTM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.316755][ T29] audit: type=1400 audit(1747288089.427:90): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.338243][ T3322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.339179][ T29] audit: type=1400 audit(1747288089.497:91): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.347057][ T3322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.369709][ T29] audit: type=1400 audit(1747288089.497:92): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.400822][ T3322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.409906][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.421016][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.443363][ T3315] veth1_macvtap: entered promiscuous mode [ 34.457742][ T29] audit: type=1400 audit(1747288089.717:93): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.489838][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.500393][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.510375][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.520842][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.530744][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.541203][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.551055][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.561606][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.572982][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.587339][ T3454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.607741][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.618260][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.628238][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.638846][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.648712][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.659194][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.669409][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.679958][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.695049][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.713335][ T3454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.739023][ T3315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.747838][ T3315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.756711][ T3315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.765493][ T3315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.797776][ T3454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.842200][ T3466] wireguard0: entered promiscuous mode [ 34.847820][ T3466] wireguard0: entered allmulticast mode [ 34.868794][ T3463] wireguard0: entered promiscuous mode [ 34.874423][ T3463] wireguard0: entered allmulticast mode [ 34.889201][ T3454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.904659][ T3474] Cannot find add_set index 0 as target [ 34.917640][ T3475] loop2: detected capacity change from 0 to 512 [ 34.924663][ T3475] ======================================================= [ 34.924663][ T3475] WARNING: The mand mount option has been deprecated and [ 34.924663][ T3475] and is ignored by this kernel. Remove the mand [ 34.924663][ T3475] option from the mount to silence this warning. [ 34.924663][ T3475] ======================================================= [ 34.960414][ T3475] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.035594][ T3475] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 35.043589][ T3475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 35.083548][ T3475] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 35.093274][ T3475] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 35.096019][ T3463] syz.3.7 (3463) used greatest stack depth: 11000 bytes left [ 35.104701][ T3475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.248138][ T3481] loop3: detected capacity change from 0 to 512 [ 35.254859][ T3481] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.270872][ T3481] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 35.278889][ T3481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 35.288502][ T3481] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 35.298081][ T3481] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 35.307661][ T3481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.326553][ T3475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 35.374601][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 35.457396][ T3486] loop4: detected capacity change from 0 to 512 [ 35.464116][ T3486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.474458][ T3486] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 35.482625][ T3486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 35.491229][ T3486] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 35.500822][ T3486] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 35.510517][ T3486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.576902][ T3489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 35.848825][ T3491] loop1: detected capacity change from 0 to 512 [ 35.855777][ T3491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.864161][ T3491] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 35.872226][ T3491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 35.882232][ T3491] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 35.891771][ T3491] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 35.901381][ T3491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.954231][ T3454] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.966433][ T3454] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.978170][ T3493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 35.978429][ T3454] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.998873][ T3454] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.016387][ T3454] syz.0.1 (3454) used greatest stack depth: 10872 bytes left [ 36.041397][ T3495] loop0: detected capacity change from 0 to 512 [ 36.066732][ T3495] EXT4-fs (loop0): too many log groups per flexible block group [ 36.074563][ T3495] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 36.082961][ T3495] EXT4-fs (loop0): mount failed [ 36.151101][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.180491][ T3501] netlink: 'syz.4.14': attribute type 126 has an invalid length. [ 36.233345][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.243161][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.263128][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.285385][ T3503] wireguard0: entered promiscuous mode [ 36.290921][ T3503] wireguard0: entered allmulticast mode [ 36.314903][ T3507] bond1: entered promiscuous mode [ 36.320048][ T3507] bond1: entered allmulticast mode [ 36.325815][ T3507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.336965][ T3507] bond1 (unregistering): Released all slaves [ 36.378719][ T3511] Cannot find add_set index 0 as target [ 36.928576][ T3520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.140535][ T3528] SELinux: syz.4.23 (3528) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 37.158606][ T3528] netlink: 27 bytes leftover after parsing attributes in process `syz.4.23'. [ 37.230322][ T3530] loop4: detected capacity change from 0 to 1024 [ 37.238534][ T3530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.331406][ T3536] wireguard0: entered promiscuous mode [ 37.337027][ T3536] wireguard0: entered allmulticast mode [ 37.354314][ T3542] SELinux: syz.2.26 (3542) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 37.371076][ T3530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.373437][ T3542] netlink: 27 bytes leftover after parsing attributes in process `syz.2.26'. [ 37.383438][ T3523] xt_connbytes: Forcing CT accounting to be enabled [ 37.383470][ T3523] Cannot find set identified by id 0 to match [ 37.409004][ T3544] Cannot find add_set index 0 as target [ 37.448455][ T3528] syz.4.23 (3528) used greatest stack depth: 10808 bytes left [ 37.518862][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.620901][ T3555] loop2: detected capacity change from 0 to 512 [ 37.637538][ T3555] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 37.653901][ T3555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 37.667663][ T3555] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.674368][ T3555] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.31: bg 0: block 361: padding at end of block bitmap is not set [ 37.689776][ T3555] EXT4-fs (loop2): Remounting filesystem read-only [ 37.706858][ T3555] EXT4-fs (loop2): 1 truncate cleaned up [ 37.716019][ T3555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 37.762909][ T3536] syz.1.25 (3536) used greatest stack depth: 10672 bytes left [ 37.776384][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 37.842123][ T3562] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.942238][ T3560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 37.952046][ T3560] IPVS: Unknown mcast interface: vcan0 [ 38.034651][ T3567] SELinux: syz.1.35 (3567) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 38.050825][ T3567] netlink: 27 bytes leftover after parsing attributes in process `syz.1.35'. [ 38.106075][ T3568] loop1: detected capacity change from 0 to 1024 [ 38.113285][ T3568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.152201][ T3568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.202138][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.226873][ T3562] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.278559][ T3562] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.300201][ T3576] wireguard0: entered promiscuous mode [ 38.305838][ T3576] wireguard0: entered allmulticast mode [ 38.328799][ T3562] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.348101][ T3578] Cannot find add_set index 0 as target [ 38.393020][ T3562] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.404364][ T3562] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.416464][ T3562] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.428527][ T3562] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.488488][ T3580] netem: incorrect ge model size [ 38.493584][ T3580] netem: change failed [ 38.563017][ T3582] wireguard0: entered promiscuous mode [ 38.568696][ T3582] wireguard0: entered allmulticast mode [ 38.591854][ T3520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.648158][ T3589] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.768698][ T3520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.838694][ T3592] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET) [ 38.870320][ T3589] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.963920][ T3594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 38.973360][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.981038][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.992417][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.000121][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.029931][ T3520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.060975][ T3589] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.111154][ T3520] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.125880][ T3589] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.191481][ T3520] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.213645][ T3520] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.231623][ T3520] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.258170][ T3589] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.280869][ T3589] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.294369][ T3601] loop1: detected capacity change from 0 to 512 [ 39.312427][ T3589] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.323627][ T3601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.336525][ T3589] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.352142][ T3601] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 39.360177][ T3601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 39.368688][ T3601] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 39.378550][ T3601] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 39.419442][ T3601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.468824][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 39.468842][ T29] audit: type=1400 audit(1747288094.737:335): avc: denied { create } for pid=3598 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.477589][ T3599] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 39.494720][ T29] audit: type=1400 audit(1747288094.737:336): avc: denied { setopt } for pid=3598 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.500936][ T3599] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 39.501097][ T3599] vhci_hcd vhci_hcd.0: Device attached [ 39.668301][ T3601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 39.727218][ T3624] loop4: detected capacity change from 0 to 512 [ 39.734771][ T29] audit: type=1400 audit(1747288094.977:337): avc: denied { create } for pid=3621 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.754095][ T29] audit: type=1400 audit(1747288094.977:338): avc: denied { create } for pid=3621 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.756046][ T3623] bond1: entered promiscuous mode [ 39.778974][ T3623] bond1: entered allmulticast mode [ 39.784802][ T23] vhci_hcd: vhci_device speed not set [ 39.791541][ T3623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.808587][ T3624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.816437][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.840522][ T3623] bond1 (unregistering): Released all slaves [ 39.845358][ T23] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 39.895037][ T3624] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 39.903851][ T3624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 39.914983][ T3630] loop0: detected capacity change from 0 to 128 [ 39.945892][ T3630] vfat: Unknown parameter 'ælush ' [ 39.981597][ T3624] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 39.991231][ T3624] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 40.020778][ T3630] loop0: detected capacity change from 0 to 2048 [ 40.053454][ T3624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.110244][ T3643] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.202691][ T3630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.237402][ T29] audit: type=1400 audit(1747288095.507:339): avc: denied { read write open } for pid=3629 comm="syz.0.54" path="/9/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.263344][ T3643] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.283897][ C1] hrtimer: interrupt took 31505 ns [ 40.392295][ T3624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 40.458978][ T3643] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.527073][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.598939][ T3643] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.199965][ T3630] syz.0.54 (3630) used greatest stack depth: 10440 bytes left [ 41.237104][ T3609] vhci_hcd: connection reset by peer [ 41.245684][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.265774][ T3526] vhci_hcd: stop threads [ 41.270166][ T3526] vhci_hcd: release socket [ 41.274643][ T3526] vhci_hcd: disconnect device [ 41.320950][ T29] audit: type=1400 audit(1747288096.587:340): avc: denied { connect } for pid=3655 comm="syz.0.59" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.341368][ T29] audit: type=1400 audit(1747288096.587:341): avc: denied { write } for pid=3655 comm="syz.0.59" laddr=fe80::98ad:23ff:fe9d:8ef2 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.391490][ T29] audit: type=1400 audit(1747288096.657:342): avc: denied { read } for pid=3658 comm="syz.0.60" dev="nsfs" ino=4026532629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.414652][ T29] audit: type=1400 audit(1747288096.657:343): avc: denied { open } for pid=3658 comm="syz.0.60" path="net:[4026532629]" dev="nsfs" ino=4026532629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.447029][ T29] audit: type=1326 audit(1747288096.657:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433488e969 code=0x7ffc0000 [ 41.475816][ T3661] loop1: detected capacity change from 0 to 1024 [ 41.488461][ T3661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.526779][ T3661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.559757][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.620692][ T3669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 41.678029][ T3673] loop1: detected capacity change from 0 to 128 [ 41.687267][ T3673] vfat: Unknown parameter 'ælush ' [ 41.717443][ T3673] loop1: detected capacity change from 0 to 2048 [ 41.738243][ T3673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.758830][ T3671] FAULT_INJECTION: forcing a failure. [ 41.758830][ T3671] name failslab, interval 1, probability 0, space 0, times 1 [ 41.771712][ T3671] CPU: 0 UID: 0 PID: 3671 Comm: syz.4.64 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 41.771759][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 41.771775][ T3671] Call Trace: [ 41.771784][ T3671] [ 41.771793][ T3671] __dump_stack+0x1d/0x30 [ 41.771820][ T3671] dump_stack_lvl+0xe8/0x140 [ 41.771843][ T3671] dump_stack+0x15/0x1b [ 41.771863][ T3671] should_fail_ex+0x265/0x280 [ 41.771901][ T3671] should_failslab+0x8c/0xb0 [ 41.771932][ T3671] kmem_cache_alloc_noprof+0x50/0x310 [ 41.771955][ T3671] ? vm_area_dup+0x32/0x260 [ 41.771984][ T3671] vm_area_dup+0x32/0x260 [ 41.772007][ T3671] __split_vma+0xe9/0x610 [ 41.772028][ T3671] ? __walk_page_range+0x324/0x340 [ 41.772059][ T3671] vma_modify+0x107/0x210 [ 41.772096][ T3671] vma_modify_policy+0x101/0x130 [ 41.772134][ T3671] mbind_range+0x1b8/0x440 [ 41.772161][ T3671] ? mas_find+0x4ea/0x610 [ 41.772190][ T3671] __se_sys_mbind+0x648/0xac0 [ 41.772216][ T3671] __x64_sys_mbind+0x78/0x90 [ 41.772236][ T3671] x64_sys_call+0x14af/0x2fb0 [ 41.772256][ T3671] do_syscall_64+0xd0/0x1a0 [ 41.772285][ T3671] ? clear_bhb_loop+0x40/0x90 [ 41.772311][ T3671] ? clear_bhb_loop+0x40/0x90 [ 41.772337][ T3671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.772362][ T3671] RIP: 0033:0x7fc9076ce969 [ 41.772385][ T3671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.772402][ T3671] RSP: 002b:00007fc905d37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 41.772426][ T3671] RAX: ffffffffffffffda RBX: 00007fc9078f5fa0 RCX: 00007fc9076ce969 [ 41.772440][ T3671] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000001000 [ 41.772455][ T3671] RBP: 00007fc905d37090 R08: 0000000000000000 R09: 0000000000000002 [ 41.772476][ T3671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.772490][ T3671] R13: 0000000000000000 R14: 00007fc9078f5fa0 R15: 00007fffa3435738 [ 41.772513][ T3671] [ 42.079225][ T3681] loop4: detected capacity change from 0 to 128 [ 42.103085][ T3681] vfat: Unknown parameter 'ælush ' [ 42.123257][ T3681] loop4: detected capacity change from 0 to 2048 [ 42.149109][ T3681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.249195][ T3686] netem: incorrect ge model size [ 42.254227][ T3686] netem: change failed [ 42.365834][ T3679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 42.402127][ T3679] bond0: (slave bond_slave_0): Releasing backup interface [ 42.626963][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.765435][ T3696] FAULT_INJECTION: forcing a failure. [ 42.765435][ T3696] name failslab, interval 1, probability 0, space 0, times 0 [ 42.778827][ T3696] CPU: 1 UID: 0 PID: 3696 Comm: syz.0.72 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 42.778861][ T3696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 42.778893][ T3696] Call Trace: [ 42.778900][ T3696] [ 42.778908][ T3696] __dump_stack+0x1d/0x30 [ 42.778934][ T3696] dump_stack_lvl+0xe8/0x140 [ 42.778959][ T3696] dump_stack+0x15/0x1b [ 42.779031][ T3696] should_fail_ex+0x265/0x280 [ 42.779063][ T3696] should_failslab+0x8c/0xb0 [ 42.779092][ T3696] kmem_cache_alloc_noprof+0x50/0x310 [ 42.779136][ T3696] ? dst_alloc+0xbd/0x100 [ 42.779160][ T3696] dst_alloc+0xbd/0x100 [ 42.779183][ T3696] ip_route_input_rcu+0xd88/0x1d00 [ 42.779215][ T3696] ? ipt_do_table+0x176/0xab0 [ 42.779262][ T3696] ip_route_input_noref+0x5f/0x90 [ 42.779296][ T3696] ip_rcv_finish_core+0x315/0xb40 [ 42.779387][ T3696] ip_sublist_rcv+0x1f8/0x650 [ 42.779438][ T3696] ? __pfx_ip_rcv_finish+0x10/0x10 [ 42.779478][ T3696] ip_list_rcv+0x261/0x290 [ 42.779514][ T3696] ? __pfx_ip_list_rcv+0x10/0x10 [ 42.779603][ T3696] __netif_receive_skb_list_core+0x4dc/0x500 [ 42.779638][ T3696] netif_receive_skb_list_internal+0x487/0x600 [ 42.779752][ T3696] napi_complete_done+0x1a3/0x410 [ 42.779782][ T3696] ? tun_get_user+0x1c8c/0x24d0 [ 42.779814][ T3696] tun_get_user+0x1ca9/0x24d0 [ 42.779851][ T3696] ? ref_tracker_alloc+0x1f2/0x2f0 [ 42.779896][ T3696] ? avc_policy_seqno+0x15/0x30 [ 42.779921][ T3696] tun_chr_write_iter+0x15e/0x210 [ 42.780005][ T3696] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 42.780036][ T3696] vfs_write+0x49d/0x8d0 [ 42.780070][ T3696] ksys_write+0xda/0x1a0 [ 42.780104][ T3696] __x64_sys_write+0x40/0x50 [ 42.780141][ T3696] x64_sys_call+0x2cdd/0x2fb0 [ 42.780238][ T3696] do_syscall_64+0xd0/0x1a0 [ 42.780267][ T3696] ? clear_bhb_loop+0x40/0x90 [ 42.780308][ T3696] ? clear_bhb_loop+0x40/0x90 [ 42.780387][ T3696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.780421][ T3696] RIP: 0033:0x7f433488e969 [ 42.780446][ T3696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.780467][ T3696] RSP: 002b:00007f4332ef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.780491][ T3696] RAX: ffffffffffffffda RBX: 00007f4334ab5fa0 RCX: 00007f433488e969 [ 42.780507][ T3696] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000003 [ 42.780522][ T3696] RBP: 00007f4332ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.780537][ T3696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.780552][ T3696] R13: 0000000000000000 R14: 00007f4334ab5fa0 R15: 00007ffd2dc77278 [ 42.780575][ T3696] [ 43.113672][ T3700] netlink: 71 bytes leftover after parsing attributes in process `syz.0.74'. [ 43.145901][ T3701] loop1: detected capacity change from 0 to 512 [ 43.146832][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.152846][ T3701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.179798][ T3701] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 43.188025][ T3701] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 43.221853][ T3701] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 43.231556][ T3701] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 43.241869][ T3705] 9pnet: Could not find request transport: 0xffffffffffffffff [ 43.246236][ T3701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.291031][ T3708] loop4: detected capacity change from 0 to 2048 [ 43.292907][ T3698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 43.317234][ T3708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.381993][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.391367][ T3716] loop0: detected capacity change from 0 to 128 [ 43.410341][ T3716] vfat: Unknown parameter 'ælush ' [ 43.491129][ T3643] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.538748][ T3643] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.554064][ T3643] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.580787][ T3643] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.602671][ T3719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 43.678388][ T3719] bond0: (slave bond_slave_0): Releasing backup interface [ 43.993696][ T3728] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.061259][ T3732] loop1: detected capacity change from 0 to 2048 [ 44.110488][ T3732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.143443][ T3731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.84'. [ 44.180787][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.200378][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.253476][ T3741] loop1: detected capacity change from 0 to 128 [ 44.264413][ T3741] vfat: Unknown parameter 'ælush ' [ 44.284129][ T3743] loop4: detected capacity change from 0 to 2048 [ 44.290700][ T3741] loop1: detected capacity change from 0 to 2048 [ 44.305574][ T3743] ext4: Unknown parameter 'noacl' [ 44.320310][ T3741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.423873][ T3751] loop4: detected capacity change from 0 to 512 [ 44.434255][ T3751] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.440964][ T3751] EXT4-fs: Ignoring removed bh option [ 44.471061][ T3751] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.484328][ T3751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.494334][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 44.494347][ T29] audit: type=1326 audit(1747288099.737:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5f92a5927 code=0x7ffc0000 [ 44.524185][ T29] audit: type=1326 audit(1747288099.737:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5f924ab39 code=0x7ffc0000 [ 44.547403][ T29] audit: type=1326 audit(1747288099.737:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa5f92ae969 code=0x7ffc0000 [ 44.570593][ T29] audit: type=1326 audit(1747288099.757:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5f92a5927 code=0x7ffc0000 [ 44.593759][ T29] audit: type=1326 audit(1747288099.757:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5f924ab39 code=0x7ffc0000 [ 44.616890][ T29] audit: type=1326 audit(1747288099.757:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa5f92ae969 code=0x7ffc0000 [ 44.642795][ T29] audit: type=1326 audit(1747288099.767:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5f92a5927 code=0x7ffc0000 [ 44.666524][ T29] audit: type=1326 audit(1747288099.767:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5f924ab39 code=0x7ffc0000 [ 44.690767][ T29] audit: type=1326 audit(1747288099.767:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa5f92ae969 code=0x7ffc0000 [ 44.714763][ T29] audit: type=1326 audit(1747288099.767:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3738 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5f92a5927 code=0x7ffc0000 [ 44.754631][ T3751] EXT4-fs (loop4): 1 truncate cleaned up [ 44.760937][ T3751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.399661][ T3770] bond1: entered promiscuous mode [ 45.404907][ T3770] bond1: entered allmulticast mode [ 45.424987][ T3775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.94'. [ 45.446824][ T3770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.496454][ T3770] bond1 (unregistering): Released all slaves [ 45.775368][ T23] usb 7-1: enqueue for inactive port 0 [ 45.780964][ T23] usb 7-1: enqueue for inactive port 0 [ 45.838229][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.929531][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.970317][ T23] vhci_hcd: vhci_device speed not set [ 45.991392][ T3787] FAULT_INJECTION: forcing a failure. [ 45.991392][ T3787] name failslab, interval 1, probability 0, space 0, times 0 [ 46.004138][ T3787] CPU: 1 UID: 0 PID: 3787 Comm: syz.2.100 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 46.004179][ T3787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.004195][ T3787] Call Trace: [ 46.004202][ T3787] [ 46.004211][ T3787] __dump_stack+0x1d/0x30 [ 46.004238][ T3787] dump_stack_lvl+0xe8/0x140 [ 46.004256][ T3787] dump_stack+0x15/0x1b [ 46.004271][ T3787] should_fail_ex+0x265/0x280 [ 46.004375][ T3787] should_failslab+0x8c/0xb0 [ 46.004411][ T3787] kmem_cache_alloc_noprof+0x50/0x310 [ 46.004476][ T3787] ? skb_clone+0x151/0x1f0 [ 46.004618][ T3787] skb_clone+0x151/0x1f0 [ 46.004644][ T3787] __netlink_deliver_tap+0x2c9/0x500 [ 46.004675][ T3787] netlink_unicast+0x64c/0x670 [ 46.004705][ T3787] netlink_sendmsg+0x58b/0x6b0 [ 46.004754][ T3787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.004802][ T3787] __sock_sendmsg+0x142/0x180 [ 46.004916][ T3787] ____sys_sendmsg+0x31e/0x4e0 [ 46.004943][ T3787] ___sys_sendmsg+0x17b/0x1d0 [ 46.005045][ T3787] __x64_sys_sendmsg+0xd4/0x160 [ 46.005075][ T3787] x64_sys_call+0x2999/0x2fb0 [ 46.005102][ T3787] do_syscall_64+0xd0/0x1a0 [ 46.005144][ T3787] ? clear_bhb_loop+0x40/0x90 [ 46.005178][ T3787] ? clear_bhb_loop+0x40/0x90 [ 46.005210][ T3787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.005236][ T3787] RIP: 0033:0x7fa5f92ae969 [ 46.005255][ T3787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.005319][ T3787] RSP: 002b:00007fa5f7917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.005337][ T3787] RAX: ffffffffffffffda RBX: 00007fa5f94d5fa0 RCX: 00007fa5f92ae969 [ 46.005349][ T3787] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 46.005360][ T3787] RBP: 00007fa5f7917090 R08: 0000000000000000 R09: 0000000000000000 [ 46.005373][ T3787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.005387][ T3787] R13: 0000000000000000 R14: 00007fa5f94d5fa0 R15: 00007ffd0e03ce08 [ 46.005416][ T3787] [ 46.230707][ T3791] SELinux: syz.4.96 (3791) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.250907][ T3791] netlink: 27 bytes leftover after parsing attributes in process `syz.4.96'. [ 46.254376][ T3793] loop0: detected capacity change from 0 to 128 [ 46.260823][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 46.266749][ T3793] vfat: Unknown parameter 'ælush ' [ 46.410712][ T3796] SELinux: syz.1.99 (3796) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.495769][ T3802] netlink: 27 bytes leftover after parsing attributes in process `syz.1.99'. [ 46.711133][ T3796] loop1: detected capacity change from 0 to 1024 [ 46.740036][ T3796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.801657][ T3796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.843115][ T3799] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 46.849786][ T3799] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 46.857475][ T3799] vhci_hcd vhci_hcd.0: Device attached [ 46.990460][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.042415][ T3819] loop1: detected capacity change from 0 to 512 [ 47.052849][ T3817] netlink: 72 bytes leftover after parsing attributes in process `syz.3.107'. [ 47.061925][ T10] vhci_hcd: vhci_device speed not set [ 47.072242][ T3819] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 47.124109][ T3810] vhci_hcd: connection closed [ 47.124600][ T51] vhci_hcd: stop threads [ 47.133672][ T51] vhci_hcd: release socket [ 47.138175][ T51] vhci_hcd: disconnect device [ 47.143085][ T10] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 47.143409][ T3819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 47.155348][ T10] usb 5-1: enqueue for inactive port 0 [ 47.174179][ T10] usb 5-1: enqueue for inactive port 0 [ 47.180298][ T3819] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.180701][ T10] usb 5-1: enqueue for inactive port 0 [ 47.193156][ T3819] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.108: bg 0: block 361: padding at end of block bitmap is not set [ 47.209040][ T3819] EXT4-fs (loop1): Remounting filesystem read-only [ 47.216022][ T3819] EXT4-fs (loop1): 1 truncate cleaned up [ 47.222337][ T3819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 47.247311][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 47.248084][ T3822] gretap0: entered promiscuous mode [ 47.268620][ T3822] gretap0: left promiscuous mode [ 47.275522][ T10] vhci_hcd: vhci_device speed not set [ 47.285858][ T3824] loop1: detected capacity change from 0 to 128 [ 47.294248][ T3824] vfat: Unknown parameter 'ælush ' [ 47.316720][ T3828] netem: incorrect ge model size [ 47.321796][ T3828] netem: change failed [ 47.341579][ T3824] loop1: detected capacity change from 0 to 2048 [ 47.382422][ T3824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.564854][ T3839] SELinux: syz.0.115 (3839) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 47.580666][ T3839] netlink: 27 bytes leftover after parsing attributes in process `syz.0.115'. [ 47.769984][ T3842] FAULT_INJECTION: forcing a failure. [ 47.769984][ T3842] name failslab, interval 1, probability 0, space 0, times 0 [ 47.782829][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: syz.2.116 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 47.782914][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 47.782966][ T3842] Call Trace: [ 47.782972][ T3842] [ 47.782980][ T3842] __dump_stack+0x1d/0x30 [ 47.783042][ T3842] dump_stack_lvl+0xe8/0x140 [ 47.783065][ T3842] dump_stack+0x15/0x1b [ 47.783086][ T3842] should_fail_ex+0x265/0x280 [ 47.783124][ T3842] ? rtnl_newlink+0x5c/0x12d0 [ 47.783202][ T3842] should_failslab+0x8c/0xb0 [ 47.783237][ T3842] __kmalloc_cache_noprof+0x4c/0x320 [ 47.783297][ T3842] rtnl_newlink+0x5c/0x12d0 [ 47.783330][ T3842] ? xas_load+0x413/0x430 [ 47.783355][ T3842] ? xas_load+0x413/0x430 [ 47.783379][ T3842] ? cgroup_rstat_updated+0xa3/0x510 [ 47.783428][ T3842] ? __rcu_read_unlock+0x4f/0x70 [ 47.783499][ T3842] ? __kfree_skb+0x109/0x150 [ 47.783519][ T3842] ? __rcu_read_unlock+0x4f/0x70 [ 47.783543][ T3842] ? avc_has_perm_noaudit+0x1b1/0x200 [ 47.783568][ T3842] ? selinux_capable+0x1f9/0x270 [ 47.783597][ T3842] ? security_capable+0x83/0x90 [ 47.783709][ T3842] ? ns_capable+0x7d/0xb0 [ 47.783735][ T3842] ? __pfx_rtnl_newlink+0x10/0x10 [ 47.783765][ T3842] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 47.783870][ T3842] netlink_rcv_skb+0x120/0x220 [ 47.783908][ T3842] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.783942][ T3842] rtnetlink_rcv+0x1c/0x30 [ 47.784037][ T3842] netlink_unicast+0x5a1/0x670 [ 47.784074][ T3842] netlink_sendmsg+0x58b/0x6b0 [ 47.784099][ T3842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.784122][ T3842] __sock_sendmsg+0x142/0x180 [ 47.784270][ T3842] ____sys_sendmsg+0x31e/0x4e0 [ 47.784297][ T3842] ___sys_sendmsg+0x17b/0x1d0 [ 47.784334][ T3842] __x64_sys_sendmsg+0xd4/0x160 [ 47.784363][ T3842] x64_sys_call+0x2999/0x2fb0 [ 47.784386][ T3842] do_syscall_64+0xd0/0x1a0 [ 47.784499][ T3842] ? clear_bhb_loop+0x40/0x90 [ 47.784524][ T3842] ? clear_bhb_loop+0x40/0x90 [ 47.784548][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.784572][ T3842] RIP: 0033:0x7fa5f92ae969 [ 47.784589][ T3842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.784618][ T3842] RSP: 002b:00007fa5f7917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.784646][ T3842] RAX: ffffffffffffffda RBX: 00007fa5f94d5fa0 RCX: 00007fa5f92ae969 [ 47.784661][ T3842] RDX: 00000000040040c0 RSI: 0000200000000380 RDI: 0000000000000003 [ 47.784675][ T3842] RBP: 00007fa5f7917090 R08: 0000000000000000 R09: 0000000000000000 [ 47.784689][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.784702][ T3842] R13: 0000000000000000 R14: 00007fa5f94d5fa0 R15: 00007ffd0e03ce08 [ 47.784722][ T3842] [ 48.059740][ T3839] loop0: detected capacity change from 0 to 1024 [ 48.069468][ T3839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.098659][ T3839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.139324][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.171072][ T3850] netem: incorrect ge model size [ 48.176145][ T3850] netem: change failed [ 48.196925][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.270280][ T3857] loop0: detected capacity change from 0 to 512 [ 48.297961][ T3857] EXT4-fs (loop0): too many log groups per flexible block group [ 48.305904][ T3857] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 48.316088][ T3857] EXT4-fs (loop0): mount failed [ 48.397843][ T3866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.124'. [ 48.420492][ T3872] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 48.459498][ T3876] SELinux: syz.3.126 (3876) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.474226][ T3876] netlink: 27 bytes leftover after parsing attributes in process `syz.3.126'. [ 48.530390][ T3879] loop3: detected capacity change from 0 to 1024 [ 48.547776][ T3879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.594370][ T3879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.648952][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.658091][ T3883] loop1: detected capacity change from 0 to 512 [ 48.672099][ T3883] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.699350][ T3886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 48.710212][ T3883] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.731058][ T3883] EXT4-fs (loop1): 1 truncate cleaned up [ 48.745672][ T3883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.801781][ T3892] SELinux: syz.3.132 (3892) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 48.805171][ T3883] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 48.823062][ T3883] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 48.827684][ T3892] netlink: 27 bytes leftover after parsing attributes in process `syz.3.132'. [ 48.832763][ T3883] veth0_to_bridge: entered allmulticast mode [ 48.849659][ T3883] veth0_to_bridge: entered promiscuous mode [ 48.883522][ T3893] loop3: detected capacity change from 0 to 1024 [ 48.894267][ T3893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.928715][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.951584][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.024584][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.077027][ T3900] loop1: detected capacity change from 0 to 512 [ 49.093053][ T3900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.117913][ T3900] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 49.126051][ T3900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 49.134298][ T3900] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 49.145861][ T3900] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 49.158667][ T3900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.204655][ T3912] loop3: detected capacity change from 0 to 512 [ 49.236084][ T3912] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 49.252866][ T3912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 49.261311][ T3912] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.268413][ T3912] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.138: bg 0: block 361: padding at end of block bitmap is not set [ 49.285700][ T3912] EXT4-fs (loop3): Remounting filesystem read-only [ 49.293019][ T3912] EXT4-fs (loop3): 1 truncate cleaned up [ 49.299581][ T3912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 49.322280][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.368748][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 49.500833][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 49.500850][ T29] audit: type=1326 audit(1747288104.767:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5f92a5927 code=0x7ffc0000 [ 49.535311][ T29] audit: type=1326 audit(1747288104.777:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5f924ab39 code=0x7ffc0000 [ 49.558757][ T29] audit: type=1326 audit(1747288104.777:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa5f92ae969 code=0x7ffc0000 [ 49.582516][ T29] audit: type=1326 audit(1747288104.797:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5f92a5927 code=0x7ffc0000 [ 49.606443][ T29] audit: type=1326 audit(1747288104.797:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5f924ab39 code=0x7ffc0000 [ 49.630610][ T29] audit: type=1326 audit(1747288104.797:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa5f92ae969 code=0x7ffc0000 [ 49.654615][ T29] audit: type=1326 audit(1747288104.797:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5f92a5927 code=0x7ffc0000 [ 49.677985][ T29] audit: type=1326 audit(1747288104.797:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa5f924ab39 code=0x7ffc0000 [ 49.701416][ T29] audit: type=1326 audit(1747288104.797:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa5f92ae969 code=0x7ffc0000 [ 49.725487][ T29] audit: type=1326 audit(1747288104.817:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3902 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5f92a5927 code=0x7ffc0000 [ 49.754760][ T3929] loop3: detected capacity change from 0 to 1024 [ 49.796051][ T3929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.819004][ T3929] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.907609][ T3935] loop0: detected capacity change from 0 to 512 [ 49.926366][ T3935] EXT4-fs (loop0): too many log groups per flexible block group [ 49.934223][ T3935] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 49.941237][ T3935] EXT4-fs (loop0): mount failed [ 50.142471][ T3951] loop2: detected capacity change from 0 to 512 [ 50.149438][ T3951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.169409][ T3951] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 50.177424][ T3951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 50.187470][ T3951] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 50.197099][ T3951] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 50.207100][ T3951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.270012][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.388211][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.456484][ T3968] loop3: detected capacity change from 0 to 128 [ 50.463461][ T3968] vfat: Unknown parameter 'ælush ' [ 50.803727][ T3975] netem: incorrect ge model size [ 50.808939][ T3975] netem: change failed [ 50.943757][ T3978] loop0: detected capacity change from 0 to 512 [ 50.997326][ T3978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.035261][ T3978] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 51.043246][ T3978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 51.053087][ T3978] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 51.062826][ T3978] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 51.073539][ T3978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.206326][ T3978] __nla_validate_parse: 5 callbacks suppressed [ 51.206345][ T3978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 51.286654][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.319935][ T3982] loop1: detected capacity change from 0 to 512 [ 51.353499][ T3982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.361910][ T3006] ================================================================== [ 51.370040][ T3006] BUG: KCSAN: data-race in __dentry_kill / step_into [ 51.376837][ T3006] [ 51.379162][ T3006] read-write to 0xffff888106d7c240 of 4 bytes by task 3307 on cpu 0: [ 51.387233][ T3006] __dentry_kill+0x230/0x4b0 [ 51.391863][ T3006] dput+0x5e/0xd0 [ 51.395600][ T3006] do_unlinkat+0x299/0x4c0 [ 51.400026][ T3006] __x64_sys_unlink+0x2e/0x40 [ 51.404717][ T3006] x64_sys_call+0x22a6/0x2fb0 [ 51.409404][ T3006] do_syscall_64+0xd0/0x1a0 [ 51.413923][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.419832][ T3006] [ 51.422159][ T3006] read to 0xffff888106d7c240 of 4 bytes by task 3006 on cpu 1: [ 51.429788][ T3006] step_into+0xe3/0x820 [ 51.433970][ T3006] walk_component+0x162/0x220 [ 51.438675][ T3006] path_lookupat+0xfe/0x2a0 [ 51.443224][ T3006] filename_lookup+0x147/0x340 [ 51.447996][ T3006] do_readlinkat+0x7d/0x320 [ 51.452517][ T3006] __x64_sys_readlink+0x47/0x60 [ 51.457402][ T3006] x64_sys_call+0x2cf3/0x2fb0 [ 51.462093][ T3006] do_syscall_64+0xd0/0x1a0 [ 51.466695][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.472596][ T3006] [ 51.474921][ T3006] value changed: 0x00300008 -> 0x00004008 [ 51.480640][ T3006] [ 51.483052][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 51.489223][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) [ 51.501215][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.511282][ T3006] ================================================================== [ 51.525063][ T3982] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 51.533112][ T3982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 51.542142][ T3982] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 51.551846][ T3982] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 51.565959][ T3982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.601260][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 51.676081][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.