last executing test programs: 3m7.77733699s ago: executing program 4 (id=16): request_key(0x0, 0x0, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x400083, 0x51) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) close_range(r5, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x3) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000ffff181b71c98af27bf16eeb65ffff"]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000200)={0x23, 0x1, 0x2}, 0x10) prctl$PR_GET_SECCOMP(0x15) 3m7.18190334s ago: executing program 4 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) 3m6.274222885s ago: executing program 4 (id=34): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000040)=0x60, r0, &(0x7f0000000080)=0x78, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) clock_getres(0x2, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 3m6.221244545s ago: executing program 4 (id=36): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 3m6.206130715s ago: executing program 4 (id=37): r0 = socket$inet6(0xa, 0x2, 0x0) open(0x0, 0x10080, 0xa8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x7f, 0x1, 0x7f, 0x6, 0x8, 0x96}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) r2 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x3, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) syz_clone3(&(0x7f0000000400)={0x40000000, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x11}, &(0x7f0000000140)=""/242, 0xf2, &(0x7f0000000240)=""/251, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) sched_setscheduler(r4, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 3m2.14703913s ago: executing program 4 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) listen(r1, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000180)={0x101, 0x7fff}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 3m2.146781289s ago: executing program 32 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) listen(r1, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000180)={0x101, 0x7fff}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 4.267293622s ago: executing program 1 (id=3444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r3, &(0x7f0000000200), 0x4) 4.106375635s ago: executing program 1 (id=3447): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) get_mempolicy(0x0, 0xfffffffffffffffe, 0x64e, &(0x7f000010e000/0x3000)=nil, 0x2) 4.006845146s ago: executing program 1 (id=3448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec9894f", 0xe}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x286, &(0x7f0000000a80)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$eJzs3c9vU8kdAPDve/lJCCS0HNqqLZTS0gphJwYixIleWlUIqSrqqQdIExNFseModihJOYT/oVKRemr/hB4q9VCJU++97d72wh5WYnfRrshKe/DqPTshQBwChHgVfz7SxG/eOP7OxHozzjexJ4CedToi1iNiMCJuR8RY+3zSLnGtVbL7PXt6f2bj6f2ZJJrNm58leXt2LrZ9T+Zo+zGHI+L3v4n4U/Jq3Prq2sJ0pVJebteLjepSsb66dmG+Oj1XnisvlkpTk1MTVy5eLu3bWE9V//Xk1/PX//Df//zo8f/Xf/mXrFuj7bbt49hPraEPbMXJ9EfE9fcRrAv62uMZ7HZHeCtpRHwnIs7k1/9Y9OXPJgBwmDWbY9Ec214HAA67NM+BJWmhnQsYjTQtFFo5vJMxklZq9cb5O7WVxdlWrmw8BtI785XyRDtXOB4DSVafzI+f10sv1S9GxImI+OvQkbxemKlVZrv5wgcAetjRl9b/L4da6z8AcMgNd7sDAMCBs/4DQO+x/gNA77H+A0Dvsf4DQO95g/XfSwUAOCQs6gDQU35340ZWmhvtz7+evbu6slC7e2G2XF8oVFdmCjO15aXCXK02l39mT/V1j1ep1ZYmL8XKvWKjXG8U66trt6q1lcXGrfxzvW+VBw5kVADAbk6cevRhEhHrV4/kJbbt5WCthsMt7XYHgK7p63YHgK6x2xf0Lr/jAzts0fuCjv8i9HD/+wIcjHPfl/+HXiX/D71L/h96l/w/9K5mM7HnPwD0GDl+wN//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M2N5iVJC+29wEcjTQuFiGMRMR4DyZ35SnkiIo5HxAdDA0NZfbLbnQYA3lH6SdLe/+vc2NnR5+eH8q+DyVf5wWBE/PnvN/92b7rRWJ7Mzn++db7xsH2+1K0xAAC72VynN9fxTc+e3p/ZLAfZnye/am0umsXdaJdWS3/057fDMRARI18k7XpL9nqlbx/irz+IiO/tNP4kz42Mt3c+fTl+FvvYgcZPX4if5m2t2+xn8d196Av0mkfZ/HNtp+svjdP57c7X/3A+Q727zflv45X5L92a//o6zH+n9xrj0v9+27HtQcQP+neKn2zFTzrEP7vH+B/98MdnOrU1/xFxLnaOvz1WsVFdKtZX1y7MV6fnynPlxVJpanJq4srFy6VinqMubmaqX/Xp1fPHdxv/SIf4w68Z/8/2OP5/fn37jz/ZJf4vfrrz839yl/jZmvjzPcafHvl3x+27s/izHcb/uuf//B7jP/54bXaPdwUADkB9dW1hulIpLztwcDAHG82W3e7TjIhvQVd7+aDbMxPwvj2/6LvdEwAAAAAAAAAAAAAAoJM3fGPQYLzF24m6PUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr28CAAD//xlX3DU=") r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r8, 0xa, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r9, 0x0, r11, 0x0, 0x1000, 0x0) write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0x20) ioctl$BTRFS_IOC_RM_DEV_V2(r10, 0x5000943a, &(0x7f0000001e80)={{r11}, 0x0, 0x4, @unused=[0xf1b5, 0xe, 0x83], @devid}) 3.674041331s ago: executing program 1 (id=3453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, 0x0, 0x0) 3.597776333s ago: executing program 1 (id=3455): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = syz_usb_connect(0x6, 0x3b5, &(0x7f0000003140)={{0x12, 0x1, 0x300, 0x56, 0x47, 0x2b, 0xff, 0x12d1, 0x23c8, 0x5254, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a3, 0x2, 0x34, 0x80, 0x0, 0x0, [{{0x9, 0x4, 0x91, 0x9, 0x0, 0xff, 0xff, 0xff, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "51d223"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x4, 0x7fff}, {0x6, 0x24, 0x1a, 0x7, 0x22}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "90d02c"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xb3, 0x3, 0x9, 0x20}, {0x6, 0x24, 0x1a, 0x7, 0x20}, [@obex={0x5, 0x24, 0x15, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}]}]}}, {{0x9, 0x4, 0x8b, 0x8, 0x8, 0xc9, 0x90, 0xf3, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "477f734941aa"}, {0x5, 0x24, 0x0, 0xc9}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x8, 0x1, 0x3}, {0x6, 0x24, 0x1a, 0x8001, 0x20}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0x1, 0x20}, @mbim_extended={0x8, 0x24, 0x1c, 0x7ff, 0x8, 0xfffa}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x2, [0xf728, 0x40]}]}], [{{0x9, 0x5, 0x0, 0x10, 0x20, 0x3, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x5, 0x81}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x4, 0xd8, 0x6, [@generic={0x80, 0x10, "e7e8a12ec4017e6e6b0b2018308a45e6933393e67bd5fdd3f18ce1e82f8bd5b31fd9e88d0c02c1452be5e06cde8b56ef32d7a85091da5f435367cb641f9ed272494b3f184993e4ed3a47af4af1e5905b01e0f7f39de440ddd2868f4e1245de218921f77a4c986f8261a57c54cbcf9da5e701fab43aa85bf6e896970eb5f2"}, @generic={0x37, 0x21, "a24d690108239b9c6132b868d422d39d21a9117e48a00d929e35c34bc1046fc6a0505d82b0e3160cf9cd80f994d157ef083269db20"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x6, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x716}, @generic={0x71, 0x4, "65c1e739ad8b351d4b06da62ba4d8142f0ab88f2bfe12214b220fe3dfa46916f5f24317127c608b94861838c42427f1d369fd63169629f13feb27bd75f9b18ad9f13a7477a40cb23238228ce402a404e4e55318b3c19f129ab3590f71a12a36ade6d42197a7300e8f7a54650fac1b7"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x1, 0xff, 0x6, [@generic={0x95, 0xb, "d52c7e67eed5489555d368493d87ff406438a11d3e0d00209435a8010ba470712665ad3c15c4b52ea9ffcd18b12f9c6280da516bb1d8d53ea001c6376b526602fb02da7da4f583207321a3d682d2fcd20acf8251e1e4b18323b5f6189c1869514fb4898d1fdbfaeb0c09d2d00d76412574f0b79a7df3dce1d97cfa8afbd03b3b65426fda6110e615308f6a491a5ec2f9a40bc5"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x1e, 0xf, 0x2e, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x3}]}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x2, 0xa, 0x14, [@generic={0x2, 0x24}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0xc, 0x0, 0xcb, [@generic={0xca, 0x21, "a84de1a5328671e9cb78c1aea49dfaacc875100cd2775773b0a179a58bd3aa53076516b3aaba5f841adb6db91f30b1655540dc63d8e57fc9b74e7f0c7413875cf98fe45bbbcd1d11d03abcba82e0f00a022baffe51c4c55c56a8466867cf8f54de9312664d88f84c574c9de8c7d334aa84688a02c72da9d11ebb29f5ff831d43d04d762ade132e02e8c527e93b866e24470d64efa873666bd4e6ff97aafcb793986b65658b736e853fdaea93b89796ad5a04538377ab4be21f9c216dfd4611064b56a427ab26d319"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x4, 0x4f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x43}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xd}]}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801007461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf0f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d424dbcfd56f1373669caaa2f1906006996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09000000"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="c03cba2d1f1f78de2c3ba843600c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000040), 0x3a, 0x527, &(0x7f0000000100)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000b0e600000000240012800e00010069703665727370616e000000100002800400120006000e0003"], 0x44}}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0xa1, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0xc) r5 = socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, 0x0, 0x20000000, {0x0, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$kcm(r5, &(0x7f0000002e00)={&(0x7f00000006c0)=@ll={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @remote}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000740)="02f851add57242", 0x7}, {&(0x7f0000000780)="0dc20a5956c231f769099c010f5cbc1d4ba4dcda8c8780a7ff42c88b3cc4f102bd71e3c54888ae1ebb03c9dc311068595590b1f71f749bf9fcb5710bb5569192215b580001ae36cc269b1a9b30f4b7c78f8b93622521ff85c3d5cfa3e8975302c7bce3387f6d11cba520fd02fc60d8a486625680684508219750cfaeced61d5d59254e6bef7f2da7abd2de66596d38599fee86841ad3bad75c76be5519eac5e8f9d04afa559b2a9acd2636f2b6014a7799258d89c7951e1bacddb9dcc14afc4c", 0xc0}, {&(0x7f0000000840)="889578d22f5d7432c74dc9e1b157e6e6f5280c5ec34549aa186b46eae6ba739f1593c8f5c1be942a47f7e171154d86e29d2bbba52dc2bb371432615b97e8dbf7b189ab4a8d9240eeb0941a0110c998b71e2eb38107a7ab5e4da484d29da0d65646f2d4f18d136b1956fdcf7109bbd87fe38780e92498", 0x76}, {&(0x7f00000008c0)="952b301e2855a3a9bb1d2c7879367360ff11ba8e985ba6d51a0da5cac0f3befb503cc5cac880a9b80867ba05ab469d786099bc2d5b544d4cac50097f306651c461bb9e6f5c25dba244dd15a2f156079f8c1c3877e5faae16879b84e7301caea7aaa2b242f8cde03ca3a00195bfc0e5f7e7ef56509420c89815110358e41b0c071553df0f9973c8015959230a80465041cccae93fb004828f58c4556ec66fe471f4f7a35a200253102b", 0xa9}, {&(0x7f0000000980)="f01f7312e1135990c9e7f503dbbda02a495c88b661d28a06163cf2f68f9ce4a49b252105bad52389d4d4818f4a5abd4aa2c4ebfc238814b3cc1c3dbe45989f4ce849e06c72cd05e991b0c2e35b636e408ba4803efeaa53655ad7206bbf04ca900d7b2e87605f7f7f3084a768b1bd167d264fa9b52931d2c750a3b5fd984b050ed35df5ce580c5a116ea55b353f890fb94773d1d93c529b799e3e1995d45a6fc582fa4283d4ca14f4000d1dfa16e0d712586261bdf51dae5ad23efbafc4bd68aa834bb7df9c616942cd8b30055ea325c56b8e63cd8f3af11d0d7759470527dca979e11e0968edf7", 0xe7}, {&(0x7f0000000a80)="f43146627bba5a4ff41f17ea274364ff70720e866c0040a4d53ede2d514248a6876ee4e5a97f5eae748dfca7fc536014e14b9f06576d50804e3fb7ac4a242ba3c6b98caeb891815402e34fb6226b054a5d17071c8a1bbed48b38c6053a6b99b31166caa45be59593614cb35db3bf5c31c656ab51252dd5b5ec772070bfa0eb3c744b2664318c4c449061e8bcf7675b27363113fb4ba8be14ff3dd02a419b5f08c2e4b01952adb932aa9a532aa9fae7c5eb4d093116232561cacea9ae5b57511d22a015bd7f08faa7a3d8af05e83c49a4b7d81842595048cbc361ceafac47b5781315bd6a88299e4247081b622b32c3", 0xef}], 0x6, &(0x7f0000000c00)=[{0x60, 0x102, 0x7a, "715bc305980ea60d0fcba580c4065d538a4c91390e5b046c1062ee813c4f620c3e1215f80e936d9d1def4c80e09170491028e32a0ee67b693f43a65b7c52f8907428acf65ca25f3b895d886392"}, {0x1010, 0x3a, 0x8, "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"}, {0xd0, 0x88, 0x0, "f6e069d1da0cf5fa1bd40f93cbe0c68adb4183bf581d5f7f9b0008f5bc5ee3c206cbef21f077a50dd125c06146aef168ec71d7f68d179ba6d62e964bb1e38917c8c5c006b396914a42e9742d33478de8292c39f3acc6f03659c51f22f95b1f2ebe9c3a1b5cd10131880e41f2e1000c765d70f33f28e501417824b8e5ab7a383370f17267565e705f8c5688276e45c01cd3523455e9ff97f3c75e692ce41f74d7baeaa082921c0102fd69def2ddb7af08c0c15db839be6fef3c"}, {0x40, 0x112, 0x8, "492e24b1311de311a9366e1a043bb5646973107d70cf86fdb89c49332eabe012c140812e7d66eadcc4b4641e"}, {0x28, 0x108, 0x0, "fa202cb57cae31f80c5f96e5f69e4e61fd60c754ff478a"}, {0x28, 0x84, 0xc0c6, "8de344ecec22e3e918c3258c830372806b"}, {0x1010, 0x10c, 0xffffb6a4, "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"}], 0x21e0}, 0x0) r7 = open_tree(r4, &(0x7f0000002e40)='./file2/file0\x00', 0x88800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ec0), r5) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000003000)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000003040)={0xf8, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x79}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x24040841}, 0x80) 1.696635643s ago: executing program 3 (id=3488): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x18, 0x140d, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4010004) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000c80)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) close_range(r0, r1, 0x0) 1.656610814s ago: executing program 3 (id=3489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a3000000000040008"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) lseek(r7, 0xa, 0x4) write$binfmt_script(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x7, 0x4) sendto$inet(r5, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x3}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e, 0x2e, 0x0, 0x61, 0x2e]}}, &(0x7f0000001280)=""/3, 0x3a, 0x3, 0x1, 0x0, 0x0, @void, @value}, 0x28) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="090d2000000000f0ff0007"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 1.323009359s ago: executing program 3 (id=3492): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@exit, @tail_call, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, @generic={0x5, 0x5, 0x4, 0xffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) 1.203496411s ago: executing program 5 (id=3494): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="0100000001000000"], 0x3c}}, 0x0) 1.148793521s ago: executing program 3 (id=3495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = getpid() setreuid(0xee00, 0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r8, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) setns(r6, 0x24020000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r13}, 0x10) 1.070354142s ago: executing program 5 (id=3496): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x18, 0x140d, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4010004) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, r11}) bind$tipc(r6, &(0x7f0000000c80)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r12, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) close_range(r5, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r3}, 0x18) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@empty, @in6=@private1}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 982.345834ms ago: executing program 2 (id=3497): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x178}, 0x18) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r3 = syz_io_uring_setup(0x7b58, &(0x7f0000000c40)={0x0, 0x2000040, 0x0, 0x2}, &(0x7f0000000600)=0x0, &(0x7f0000000080)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='task_rename\x00', r7}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000190100001000000010"], 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000e80)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="20002f800c0002000203aaaaaa0300000004000380", @ANYRES16=r10, @ANYBLOB="010025bd7000fbdbdf251e00000008000300"], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000002080)={'wpan0\x00', 0x0}) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r15}, 0x10) r16 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r16, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r16, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) fspick(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r12, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000fedbdf250800000008000300", @ANYRES32=r14], 0x20}, 0x1, 0x0, 0x0, 0x200c00b1}, 0x8004) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="78010000", @ANYRES16=r10, @ANYBLOB="00012abd7000fedbdf25be01000008000300", @ANYRES32, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r17, 0x0, 0xfffffffffffffffc}, 0x18) 957.028914ms ago: executing program 5 (id=3498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="b92ec209bdef06217c13eb0deb519fd5365c9805", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000017987d6a2471e8b6e80efccb16e86c766c56c176f1da6d0aa2c97f4028e0e85df2b558a4709484877849b3ba3df73beb967ca929e42ab1df3b0aa24de2da9367d8d987bdc3156b204fd0da0b700050e5"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xb, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='8'], 0x6a) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) 720.722818ms ago: executing program 2 (id=3501): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000001800038014000380100001800400030008000100400000002000018008000300020000001400020076657468315f766972745f77696669"], 0x4c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20) 693.002899ms ago: executing program 5 (id=3502): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000001800038014000380100001800400030008000100400000002000018008000300020000001400020076657468315f766972745f77696669"], 0x4c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000680)={{}, {0x6}, 0x1, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="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", 0x18e, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000018000000010000000c0a00000092d87b735cf18f10652c010000006858000000b70f640fb7aa6bd249516976067d3bb25269d0b8b7a8e02cf8416d5c188b7daff42b2a4f77d5f116caca62b83c9bdc73caa093476b27f5bf73cae44500ed732a173149aa0be286042edc953fcda75aecbb30ac984233c36b"], 0x7c}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) 640.536289ms ago: executing program 2 (id=3503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) 640.14751ms ago: executing program 2 (id=3504): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r0, &(0x7f0000000000)="d13d610d8fdd35802e37a896beb71246768be4ac5319a9", 0x17, 0x200000d0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0xcc18ad2d6873367b) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fff}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@debug}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$inet(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x20, [0x5, 0x4, 0x2, 0x0, 0x8, 0xffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3efb]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1000}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @alu={0x7, 0x0, 0x9, 0x6, 0x4, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @alu={0x910b789db30def2b, 0x1, 0x3, 0x7, 0xa, 0x80, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x24, &(0x7f00000006c0)=""/36, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0xd, 0x9, 0x80000000}, 0x10, 0xc9a5, r4, 0x5, &(0x7f0000000740)=[r4, r0], &(0x7f0000000940)=[{0x2, 0x5, 0x3, 0x3}, {0x3, 0x4, 0xf, 0x4}, {0x4, 0x3, 0x1, 0x2}, {0x5, 0x4, 0x4, 0xc}, {0x2, 0x2, 0xd, 0x8}], 0x10, 0x2, @void, @value}, 0x94) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r5, &(0x7f0000000340)='./file1\x00', 0x162) 639.63205ms ago: executing program 5 (id=3505): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @loopback, 0x8}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000007c0)}}, 0x18) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1001000, 0x27, 0x7ff, 0xf83, 0x9}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) epoll_create(0xa60c) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x3, 0x2, @scatter={0x0, 0x40000, &(0x7f0000000700)}, &(0x7f0000000080)='\x00\x00P', 0x0, 0x800004, 0x10030, 0x0, 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b4}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f00000002c0)={0x1, 0x27, 0x1, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, "9ad703df390a6d6d"}}, 0x48}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x72) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 566.512751ms ago: executing program 1 (id=3506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r4, 0x4}}]}, 0x144}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) getpid() r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) 500.088432ms ago: executing program 5 (id=3507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r4, 0x4}}]}, 0x144}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) getpid() r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) 465.107592ms ago: executing program 2 (id=3508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000008000000000000000000000850000002200000019010000202069250000ffdf002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000d4448d4985000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x806, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000200000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000ddffffff00ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x44053}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x9}, 0x1c) listen(r1, 0x3) unshare(0x22000400) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x20001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x7) r10 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000000000000e81551f600d3cac317161658c76c442597da69cff652a4e07ff65cee80b16445b963564947e04591a32c330415c95c87e8a8daff40b6951e30d0bc34a2aa6f3c8b7c597dcd0a92bca6dd2466b45826b6d7746baa338a9e4fa7592615c1df3db3bc3aef7e30fe4c029bacb08796b6458b6f"], 0x8) 390.977263ms ago: executing program 2 (id=3510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@exit, @tail_call, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, @generic={0x5, 0x5, 0x4, 0xffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x0, 0x1}, 0x10, 0x0, r5, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5, @void, @value}, 0x94) r6 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) 284.652215ms ago: executing program 3 (id=3512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a3000000000040008"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) lseek(r5, 0xa, 0x4) write$binfmt_script(r5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x3}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e, 0x2e, 0x0, 0x61, 0x2e]}}, &(0x7f0000001280)=""/3, 0x3a, 0x3, 0x1, 0x0, 0x0, @void, @value}, 0x28) 247.001916ms ago: executing program 0 (id=3514): bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) 180.549957ms ago: executing program 0 (id=3515): socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x56) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x14635, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file2\x00', 0x46) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x1100a8, &(0x7f0000000240)={[{@nogrpid}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@auto_da_alloc}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x441, &(0x7f0000000580)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x835, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r3 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x1000000000008, 0xffffffffffffffff, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0xf4}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x10) fcntl$setlease(r5, 0x400, 0x1) setregid(0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0xff69) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0xcb70, 0x4) 140.955797ms ago: executing program 0 (id=3516): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@exit, @tail_call, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, @generic={0x5, 0x5, 0x4, 0xffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) 110.961358ms ago: executing program 0 (id=3517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) 84.957979ms ago: executing program 0 (id=3518): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x18, 0x140d, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4010004) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0xb}, 0x0, r8}) bind$tipc(r3, &(0x7f0000000c80)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) close_range(r2, r3, 0x0) 44.401239ms ago: executing program 0 (id=3519): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r0, &(0x7f0000000000)="d13d610d8fdd35802e37a896beb71246768be4ac5319a9", 0x17, 0x200000d0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0xcc18ad2d6873367b) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fff}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@debug}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$inet(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x20, [0x5, 0x4, 0x2, 0x0, 0x8, 0xffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3efb]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_ext={0x1c, 0x2c, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1000}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}, @alu={0x7, 0x0, 0x9, 0x6, 0x4, 0xc, 0xfffffffffffffffc}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @alu={0x910b789db30def2b, 0x1, 0x3, 0x7, 0xa, 0x80, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x24, &(0x7f00000006c0)=""/36, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0xd, 0x9, 0x80000000}, 0x10, 0xc9a5, r4, 0x5, &(0x7f0000000740)=[r4, r0], &(0x7f0000000940)=[{0x2, 0x5, 0x3, 0x3}, {0x3, 0x4, 0xf, 0x4}, {0x4, 0x3, 0x1, 0x2}, {0x5, 0x4, 0x4, 0xc}, {0x2, 0x2, 0xd, 0x8}], 0x10, 0x2, @void, @value}, 0x94) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r5, &(0x7f0000000340)='./file1\x00', 0x162) 0s ago: executing program 3 (id=3520): r0 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x4c810}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="8000000000000008b70800000000396f7b8af8ff00000000bfa2000000000000078a8e96b06370e52703000008000000b70400000000000085000000240000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x70ffb53cc4dd4bc0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000006c0)='\x88\x00\xe9\xaf\x02\xa8*\x86e\x00\x00C\x83\xdc\xfb\xaf\xab\xc4\x1f\xcf\xe8 jb\x00._\"\x84\xc9\xc4&\xbeBk\xc7{\xbel\r\x7f9\xc8\xc7\t\xfb\x89\xab\x12\xa1\xb5\xd0\xa7;\xf5\xc9\xf3H\x80\xfb\x1c\x997') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000007c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@noinit_itable}, {@dioread_lock}, {@block_validity}, {@resgid}, {@data_err_ignore}, {@nodiscard}, {@nobh}, {@bh}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x577, &(0x7f0000001440)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000100)=ANY=[], 0x835, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x1320, 0x80, 0x6, 0x5, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r4, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fff"], 0x0, 0x46, 0x0, 0x9, 0x0, 0x0, @void, @value}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f00000006c0)=ANY=[], 0x835, 0x0) kernel console output (not intermixed with test programs): T29] audit: type=1400 audit(1743146812.395:7455): avc: denied { prog_run } for pid=11295 comm="syz.3.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.137626][ T29] audit: type=1400 audit(1743146812.425:7456): avc: denied { create } for pid=11300 comm="syz.0.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.157549][ T29] audit: type=1400 audit(1743146812.425:7457): avc: denied { setopt } for pid=11300 comm="syz.0.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.177352][ T29] audit: type=1400 audit(1743146812.425:7458): avc: denied { write } for pid=11300 comm="syz.0.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.210960][T11296] netlink: zone id is out of range [ 179.216215][T11296] netlink: zone id is out of range [ 179.225420][T11296] netlink: set zone limit has 8 unknown bytes [ 179.241126][T11296] loop3: detected capacity change from 0 to 164 [ 179.331238][T11315] loop0: detected capacity change from 0 to 1024 [ 179.338243][T11315] EXT4-fs: Ignoring removed orlov option [ 179.343977][T11315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.375978][T11319] loop5: detected capacity change from 0 to 1024 [ 179.390635][T11319] EXT4-fs: Ignoring removed nobh option [ 179.391260][T11315] EXT4-fs (loop0): shut down requested (2) [ 179.396270][T11319] EXT4-fs: Ignoring removed bh option [ 179.620170][T11346] netlink: zone id is out of range [ 179.625372][T11346] netlink: zone id is out of range [ 179.633790][T11346] netlink: set zone limit has 8 unknown bytes [ 179.643598][T11346] loop1: detected capacity change from 0 to 164 [ 179.797489][T11358] loop2: detected capacity change from 0 to 1024 [ 179.812196][T11358] EXT4-fs: Ignoring removed orlov option [ 179.817988][T11358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.867229][T11358] EXT4-fs (loop2): shut down requested (2) [ 179.881429][T11358] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 179.893259][T11358] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 180.108510][T11380] netlink: zone id is out of range [ 180.120353][T11380] loop1: detected capacity change from 0 to 164 [ 180.407012][T11388] loop3: detected capacity change from 0 to 1024 [ 180.414012][T11388] EXT4-fs: Ignoring removed nobh option [ 180.419854][T11388] EXT4-fs: Ignoring removed bh option [ 180.582339][T11396] loop0: detected capacity change from 0 to 512 [ 180.616229][T11396] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.927670][T11418] __nla_validate_parse: 24 callbacks suppressed [ 180.927689][T11418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2781'. [ 180.947400][T11418] IPv6: Can't replace route, no match found [ 181.053455][T11425] loop5: detected capacity change from 0 to 512 [ 181.070294][T11415] lo speed is unknown, defaulting to 1000 [ 181.076793][T11415] lo speed is unknown, defaulting to 1000 [ 181.098221][T11425] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.147907][T11420] lo speed is unknown, defaulting to 1000 [ 181.154184][T11420] lo speed is unknown, defaulting to 1000 [ 181.218330][T11433] loop2: detected capacity change from 0 to 1024 [ 181.225582][T11433] EXT4-fs: Ignoring removed nobh option [ 181.231166][T11433] EXT4-fs: Ignoring removed bh option [ 181.267095][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2788'. [ 181.353644][T11446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2790'. [ 181.405648][T11440] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2788'. [ 181.424364][T11448] ip6erspan0: entered promiscuous mode [ 181.468848][T11453] netlink: 'syz.5.2792': attribute type 21 has an invalid length. [ 181.476888][T11453] netlink: 'syz.5.2792': attribute type 20 has an invalid length. [ 181.529635][T11457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2794'. [ 181.546015][T11457] IPv6: Can't replace route, no match found [ 181.554076][T11459] loop5: detected capacity change from 0 to 128 [ 181.576957][T11459] ext4 filesystem being mounted at /504/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.630218][T11464] loop3: detected capacity change from 0 to 512 [ 181.669890][T11464] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.670876][T11473] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 181.821950][T11486] netlink: 'syz.3.2804': attribute type 21 has an invalid length. [ 181.830006][T11486] netlink: 'syz.3.2804': attribute type 20 has an invalid length. [ 181.837934][T11486] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.528331][T11515] loop1: detected capacity change from 0 to 1024 [ 182.536406][T11515] EXT4-fs: Ignoring removed orlov option [ 182.542101][T11515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.923630][T11541] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 182.987232][T11548] loop3: detected capacity change from 0 to 1024 [ 182.997464][T11548] EXT4-fs: Ignoring removed orlov option [ 183.003280][T11548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.011741][T11550] netlink: 'syz.0.2831': attribute type 21 has an invalid length. [ 183.019814][T11550] netlink: 'syz.0.2831': attribute type 20 has an invalid length. [ 183.260990][T11572] 8021q: adding VLAN 0 to HW filter on device bond11 [ 183.289215][T11572] 8021q: adding VLAN 0 to HW filter on device bond11 [ 183.304009][T11572] bond11: (slave vxcan15): The slave device specified does not support setting the MAC address [ 183.318691][T11572] bond11: (slave vxcan15): Error -95 calling set_mac_address [ 183.352081][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2837'. [ 183.363347][T11576] 8021q: adding VLAN 0 to HW filter on device bond11 [ 183.390210][T11557] lo speed is unknown, defaulting to 1000 [ 183.403120][T11557] lo speed is unknown, defaulting to 1000 [ 183.509396][T11557] chnl_net:caif_netlink_parms(): no params data found [ 183.589112][T11597] loop5: detected capacity change from 0 to 128 [ 183.590200][T11557] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.602569][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.610157][T11557] bridge_slave_0: entered allmulticast mode [ 183.617700][T11588] loop2: detected capacity change from 0 to 164 [ 183.618540][T11597] ext4 filesystem being mounted at /513/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.638703][T11557] bridge_slave_0: entered promiscuous mode [ 183.645909][T11557] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.653063][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.660757][T11557] bridge_slave_1: entered allmulticast mode [ 183.676644][T11557] bridge_slave_1: entered promiscuous mode [ 183.719511][T11557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.730859][T11604] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2847'. [ 183.740279][T11604] IPv6: Can't replace route, no match found [ 183.747632][T11557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.808748][T11609] 8021q: adding VLAN 0 to HW filter on device bond9 [ 183.831426][T11609] 8021q: adding VLAN 0 to HW filter on device bond9 [ 183.839030][T11609] bond9: (slave vxcan9): The slave device specified does not support setting the MAC address [ 183.851367][T11609] bond9: (slave vxcan9): Error -95 calling set_mac_address [ 183.884794][T11557] team0: Port device team_slave_0 added [ 183.896707][T11557] team0: Port device team_slave_1 added [ 183.903538][T11614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2849'. [ 183.926348][T11557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.933442][T11557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.959595][T11557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.971927][T11614] 8021q: adding VLAN 0 to HW filter on device bond9 [ 183.979897][T11557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.987013][T11557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.012979][T11557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.047558][T11557] hsr_slave_0: entered promiscuous mode [ 184.053988][T11557] hsr_slave_1: entered promiscuous mode [ 184.059986][T11557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.067649][T11557] Cannot create hsr debugfs directory [ 184.076035][T11620] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.2853'. [ 184.087258][T11620] net_ratelimit: 2 callbacks suppressed [ 184.087273][T11620] netlink: zone id is out of range [ 184.098126][T11620] netlink: zone id is out of range [ 184.108157][T11620] netlink: set zone limit has 8 unknown bytes [ 184.125256][T11620] loop1: detected capacity change from 0 to 164 [ 184.161061][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 184.161078][ T29] audit: type=1400 audit(1743146817.455:7962): avc: denied { setopt } for pid=11624 comm="syz.1.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.215353][ T29] audit: type=1400 audit(1743146817.505:7963): avc: denied { read write } for pid=11628 comm="syz.3.2857" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.238793][ T29] audit: type=1400 audit(1743146817.505:7964): avc: denied { open } for pid=11628 comm="syz.3.2857" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.263652][ T29] audit: type=1400 audit(1743146817.555:7965): avc: denied { write } for pid=11624 comm="syz.1.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.347215][T11557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.367510][T11634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2858'. [ 184.377957][T11634] IPv6: Can't replace route, no match found [ 184.417089][T11557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.455636][T11557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.557025][T11557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.687668][T11655] loop5: detected capacity change from 0 to 164 [ 184.699152][T11657] loop1: detected capacity change from 0 to 1024 [ 184.715358][T11657] EXT4-fs: Ignoring removed orlov option [ 184.721081][T11657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.729940][T11557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.738978][T11557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.748513][T11557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.757642][T11557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.874856][T11557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.895891][T11671] IPv6: Can't replace route, no match found [ 184.916993][T11557] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.966095][ T7619] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.973211][ T7619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.002378][ T7619] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.009504][ T7619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.208217][T11667] lo speed is unknown, defaulting to 1000 [ 185.238608][T11667] lo speed is unknown, defaulting to 1000 [ 185.281874][T11557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.523926][T11557] veth0_vlan: entered promiscuous mode [ 185.532629][T11557] veth1_vlan: entered promiscuous mode [ 185.563063][T11557] veth0_macvtap: entered promiscuous mode [ 185.582182][T11557] veth1_macvtap: entered promiscuous mode [ 185.593037][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.603770][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.613640][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.624163][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.634052][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.644595][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.654495][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.665037][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.674941][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.685527][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.698386][T11557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.741667][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.752255][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.762193][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.772854][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.782896][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.793504][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.803514][T11557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.803686][ T29] audit: type=1400 audit(1743146819.095:7966): avc: denied { write } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.813965][T11557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.835463][ T29] audit: type=1400 audit(1743146819.095:7967): avc: denied { remove_name } for pid=2984 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.867897][ T29] audit: type=1400 audit(1743146819.095:7968): avc: denied { rename } for pid=2984 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.871995][T11557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.890485][ T29] audit: type=1400 audit(1743146819.095:7969): avc: denied { add_name } for pid=2984 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.890594][ T29] audit: type=1400 audit(1743146819.095:7970): avc: denied { unlink } for pid=2984 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.943077][ T29] audit: type=1400 audit(1743146819.095:7971): avc: denied { create } for pid=2984 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.955010][T11557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.972544][T11557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.981364][T11557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.990128][T11557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.005137][T11712] loop5: detected capacity change from 0 to 164 [ 186.107266][T11713] netlink: 'syz.3.2885': attribute type 21 has an invalid length. [ 186.115270][T11713] netlink: 'syz.3.2885': attribute type 20 has an invalid length. [ 186.162117][T11716] loop5: detected capacity change from 0 to 512 [ 186.196119][T11724] loop3: detected capacity change from 0 to 128 [ 186.213514][T11716] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.241161][T11724] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.268695][T11728] loop1: detected capacity change from 0 to 1024 [ 186.296175][T11728] EXT4-fs: Ignoring removed nobh option [ 186.364396][ T41] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 186.543675][T11728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 186.557044][T11728] System zones: 1-12 [ 186.736149][T11753] __nla_validate_parse: 1 callbacks suppressed [ 186.736165][T11753] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2898'. [ 186.754528][T11753] netlink: zone id is out of range [ 186.759703][T11753] netlink: zone id is out of range [ 186.813790][T11753] netlink: set zone limit has 8 unknown bytes [ 186.827242][T11754] loop2: detected capacity change from 0 to 164 [ 187.280556][T11762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2902'. [ 187.310210][T11762] IPv6: Can't replace route, no match found [ 187.318724][T11765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2903'. [ 187.327822][T11765] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.339643][T11766] loop1: detected capacity change from 0 to 128 [ 187.346576][T11765] IPv6: Can't replace route, no match found [ 187.363470][T11769] loop3: detected capacity change from 0 to 1024 [ 187.371250][T11769] EXT4-fs: Ignoring removed orlov option [ 187.377082][T11769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.393474][T11770] loop5: detected capacity change from 0 to 1024 [ 187.404957][T11770] EXT4-fs: Ignoring removed nobh option [ 187.410566][T11770] EXT4-fs: Ignoring removed bh option [ 187.413836][T11766] ext4 filesystem being mounted at /567/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.467181][T11777] loop0: detected capacity change from 0 to 164 [ 187.625020][T11793] netlink: 'syz.3.2911': attribute type 1 has an invalid length. [ 187.649240][T11791] loop1: detected capacity change from 0 to 512 [ 187.678205][T11793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.712598][T11791] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.768840][T11793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.796087][T11793] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 187.810459][T11793] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 187.836115][T11806] loop5: detected capacity change from 0 to 256 [ 187.853764][T11806] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.875876][T11808] loop0: detected capacity change from 0 to 1024 [ 187.882965][T11808] EXT4-fs: Ignoring removed nobh option [ 187.906937][T11808] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 187.927470][T11804] ip6erspan0: entered promiscuous mode [ 187.934180][T11808] System zones: 1-12 [ 188.137594][T11817] loop1: detected capacity change from 0 to 1024 [ 188.184919][T11817] EXT4-fs: Ignoring removed orlov option [ 188.190810][T11817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.321133][T11826] loop3: detected capacity change from 0 to 128 [ 188.369992][T11826] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.511290][T11832] loop5: detected capacity change from 0 to 1024 [ 188.523509][T11832] EXT4-fs: Ignoring removed nobh option [ 188.583311][T11835] loop1: detected capacity change from 0 to 1024 [ 188.601982][T11832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 188.619244][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2925'. [ 188.632954][T11832] System zones: 1-12 [ 188.638566][T11840] IPv6: Can't replace route, no match found [ 188.648889][T11835] EXT4-fs: Ignoring removed nobh option [ 188.654677][T11835] EXT4-fs: Ignoring removed bh option [ 189.134068][T11872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2939'. [ 189.162158][T11872] IPv6: Can't replace route, no match found [ 189.208886][T11880] loop1: detected capacity change from 0 to 512 [ 189.250149][T11880] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.562167][T11904] loop1: detected capacity change from 0 to 128 [ 189.586833][T11907] loop2: detected capacity change from 0 to 1024 [ 189.605624][T11907] EXT4-fs: Ignoring removed orlov option [ 189.611319][T11907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.626914][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 189.626982][ T29] audit: type=1400 audit(1743146822.925:8212): avc: denied { create } for pid=11909 comm="syz.0.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.652702][ T29] audit: type=1400 audit(1743146822.925:8213): avc: denied { setopt } for pid=11909 comm="syz.0.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.658539][T11904] ext4 filesystem being mounted at /575/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.685141][T11908] loop3: detected capacity change from 0 to 1024 [ 189.687974][T11910] loop0: detected capacity change from 0 to 164 [ 189.696380][T11908] EXT4-fs: Ignoring removed nobh option [ 189.703434][T11908] EXT4-fs: Ignoring removed bh option [ 189.713669][ T29] audit: type=1400 audit(1743146823.005:8214): avc: denied { mount } for pid=11909 comm="syz.0.2954" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 189.767043][T11918] loop1: detected capacity change from 0 to 256 [ 189.773783][ T29] audit: type=1400 audit(1743146823.065:8215): avc: denied { unmount } for pid=11557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 189.811773][T11918] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.063047][T11940] loop5: detected capacity change from 0 to 512 [ 190.098890][T11940] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.149282][T11946] loop2: detected capacity change from 0 to 128 [ 190.198331][T11946] ext4 filesystem being mounted at /562/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.222168][T11948] loop0: detected capacity change from 0 to 1024 [ 190.239455][T11950] loop3: detected capacity change from 0 to 1024 [ 190.299462][T11948] EXT4-fs: Ignoring removed orlov option [ 190.305304][T11948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.351077][T11950] EXT4-fs: Ignoring removed nobh option [ 190.369506][T11957] loop2: detected capacity change from 0 to 1024 [ 190.376169][T11953] loop1: detected capacity change from 0 to 164 [ 190.395977][T11957] EXT4-fs: Ignoring removed orlov option [ 190.397882][T11948] EXT4-fs (loop0): shut down requested (2) [ 190.401680][T11957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.424817][T11950] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 190.433296][T11950] System zones: 1-12 [ 190.459904][T11948] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 190.468955][T11948] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 190.478205][ T29] audit: type=1400 audit(1743146823.775:8216): avc: denied { setattr } for pid=11947 comm="syz.0.2967" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.709869][ T29] audit: type=1400 audit(1743146824.005:8217): avc: denied { ioctl } for pid=11975 comm="syz.1.2978" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.767097][T11977] loop1: detected capacity change from 0 to 512 [ 190.790855][ T29] audit: type=1400 audit(1743146824.045:8218): avc: denied { map_create } for pid=11979 comm="syz.0.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.810238][ T29] audit: type=1400 audit(1743146824.045:8219): avc: denied { bpf } for pid=11979 comm="syz.0.2976" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.830893][ T29] audit: type=1400 audit(1743146824.045:8220): avc: denied { map_read map_write } for pid=11979 comm="syz.0.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.850889][ T29] audit: type=1400 audit(1743146824.045:8221): avc: denied { prog_load } for pid=11979 comm="syz.0.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.892662][T11977] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 190.901631][T11983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2979'. [ 190.945397][T11977] EXT4-fs (loop1): orphan cleanup on readonly fs [ 190.957560][T11977] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 191.014983][T11977] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 191.048093][T11993] loop2: detected capacity change from 0 to 1024 [ 191.054823][T11977] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #16: comm syz.1.2978: iget: immutable or append flags not allowed on symlinks [ 191.070496][T11992] loop0: detected capacity change from 0 to 512 [ 191.077578][T11993] EXT4-fs: Ignoring removed nobh option [ 191.088428][T11977] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.2978: couldn't read orphan inode 16 (err -117) [ 191.122404][T11993] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 191.133818][T11992] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.153982][T11993] System zones: 1-12 [ 191.243923][T12001] loop0: detected capacity change from 0 to 128 [ 191.263936][T12001] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.365700][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2986'. [ 191.388515][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 191.408026][T12012] loop0: detected capacity change from 0 to 1024 [ 191.415670][T12012] EXT4-fs: Ignoring removed orlov option [ 191.421413][T12012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.434912][T12007] loop3: detected capacity change from 0 to 128 [ 191.458434][T12007] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.734867][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2994'. [ 191.743995][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 191.925351][T12033] loop5: detected capacity change from 0 to 512 [ 191.948878][T12033] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.121343][T12037] loop5: detected capacity change from 0 to 128 [ 192.158108][T12037] ext4 filesystem being mounted at /536/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.242197][T12040] loop2: detected capacity change from 0 to 1024 [ 192.243822][T12044] netlink: 'syz.5.2999': attribute type 1 has an invalid length. [ 192.257221][T12040] EXT4-fs: Ignoring removed nobh option [ 192.262898][T12040] EXT4-fs: Ignoring removed bh option [ 192.314958][T12044] 8021q: adding VLAN 0 to HW filter on device bond12 [ 192.400528][T12049] 8021q: adding VLAN 0 to HW filter on device bond12 [ 192.418534][T12049] bond12: (slave vxcan15): The slave device specified does not support setting the MAC address [ 192.442277][T12049] bond12: (slave vxcan15): Error -95 calling set_mac_address [ 192.474529][T12053] netlink: 'syz.0.3000': attribute type 1 has an invalid length. [ 192.538170][T12054] ip6erspan0: entered promiscuous mode [ 192.587932][T12053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3000'. [ 192.644910][T12062] loop0: detected capacity change from 0 to 1024 [ 192.657666][T12063] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.3003'. [ 192.667369][T12063] netlink: zone id is out of range [ 192.672518][T12063] netlink: zone id is out of range [ 192.675256][T12062] EXT4-fs: Ignoring removed orlov option [ 192.683343][T12062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.686355][T12063] netlink: set zone limit has 8 unknown bytes [ 192.729476][T12063] loop3: detected capacity change from 0 to 164 [ 192.961997][T12086] loop3: detected capacity change from 0 to 164 [ 192.979873][T12090] netlink: 'syz.2.3014': attribute type 1 has an invalid length. [ 193.023171][T12090] 8021q: adding VLAN 0 to HW filter on device bond13 [ 193.043205][T12090] 8021q: adding VLAN 0 to HW filter on device bond13 [ 193.051152][T12090] bond13: (slave vxcan9): The slave device specified does not support setting the MAC address [ 193.064765][T12090] bond13: (slave vxcan9): Error -95 calling set_mac_address [ 193.072894][T12097] loop3: detected capacity change from 0 to 1024 [ 193.081875][T12097] EXT4-fs: Ignoring removed orlov option [ 193.087618][T12097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.097980][T12098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3014'. [ 193.107330][T12098] 8021q: adding VLAN 0 to HW filter on device bond13 [ 193.120263][T12097] EXT4-fs (loop3): shut down requested (2) [ 193.127487][T12097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 193.136358][T12097] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 193.157067][T11004] EXT4-fs unmount: 100 callbacks suppressed [ 193.157106][T11004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.206943][T12104] loop2: detected capacity change from 0 to 1024 [ 193.213766][T12104] EXT4-fs: Ignoring removed nobh option [ 193.219454][T12104] EXT4-fs: Ignoring removed bh option [ 193.235548][T12104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.532097][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.568620][T12124] loop5: detected capacity change from 0 to 164 [ 193.683260][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3030'. [ 193.694063][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3030'. [ 193.721290][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.851418][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3033'. [ 193.868635][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3033'. [ 193.896566][T12141] loop0: detected capacity change from 0 to 128 [ 193.928901][T12141] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.976075][T12141] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.066604][T11557] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.217018][T12154] loop1: detected capacity change from 0 to 1024 [ 194.223869][T12154] EXT4-fs: Ignoring removed nobh option [ 194.305590][T12154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 194.341145][T12154] System zones: 1-12 [ 194.358183][T12153] lo speed is unknown, defaulting to 1000 [ 194.364601][T12153] lo speed is unknown, defaulting to 1000 [ 194.383899][T12154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.518116][T12154] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.636872][T12166] loop3: detected capacity change from 0 to 164 [ 194.690267][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 194.690280][ T29] audit: type=1400 audit(1743146827.985:8456): avc: denied { ioctl } for pid=12167 comm="syz.0.3042" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.764508][T12168] loop0: detected capacity change from 0 to 512 [ 194.795182][T12168] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 194.808156][T12168] EXT4-fs (loop0): orphan cleanup on readonly fs [ 194.828981][T12168] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 194.859270][T12172] loop2: detected capacity change from 0 to 1024 [ 194.871030][T12172] EXT4-fs: Ignoring removed orlov option [ 194.876873][T12172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.901871][T12168] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 194.914096][T12179] loop3: detected capacity change from 0 to 512 [ 194.921053][T12168] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #16: comm syz.0.3042: iget: immutable or append flags not allowed on symlinks [ 194.940455][T12172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.973472][T12168] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.3042: couldn't read orphan inode 16 (err -117) [ 194.985355][ T29] audit: type=1400 audit(1743146828.105:8457): avc: denied { append } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.985394][ T29] audit: type=1400 audit(1743146828.125:8458): avc: denied { read write } for pid=11004 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.985444][ T29] audit: type=1400 audit(1743146828.145:8459): avc: denied { open } for pid=11004 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.985475][ T29] audit: type=1400 audit(1743146828.145:8460): avc: denied { ioctl } for pid=11004 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.985506][ T29] audit: type=1400 audit(1743146828.145:8461): avc: denied { create } for pid=12171 comm="syz.2.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.985563][ T29] audit: type=1400 audit(1743146828.165:8462): avc: denied { mounton } for pid=12171 comm="syz.2.3043" path="/577/file1" dev="tmpfs" ino=3116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 194.985592][ T29] audit: type=1400 audit(1743146828.185:8463): avc: denied { prog_load } for pid=12173 comm="syz.5.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.080455][T12168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.082393][ T29] audit: type=1400 audit(1743146828.185:8464): avc: denied { bpf } for pid=12173 comm="syz.5.3044" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.170733][T12179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 195.176884][ T29] audit: type=1400 audit(1743146828.185:8465): avc: denied { perfmon } for pid=12173 comm="syz.5.3044" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.189566][T12179] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.222007][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.242854][T12187] netlink: 'syz.1.3046': attribute type 1 has an invalid length. [ 195.262887][T12187] 8021q: adding VLAN 0 to HW filter on device bond10 [ 195.280820][T12187] 8021q: adding VLAN 0 to HW filter on device bond10 [ 195.295315][T12187] bond10: (slave vxcan9): The slave device specified does not support setting the MAC address [ 195.309008][T12187] bond10: (slave vxcan9): Error -95 calling set_mac_address [ 195.309250][T11004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 195.429989][T12200] loop1: detected capacity change from 0 to 164 [ 195.550693][T12204] lo speed is unknown, defaulting to 1000 [ 195.558804][T12204] lo speed is unknown, defaulting to 1000 [ 195.650333][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3056'. [ 195.659486][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3056'. [ 195.753427][T12219] loop2: detected capacity change from 0 to 1024 [ 195.763895][T12219] EXT4-fs: Ignoring removed orlov option [ 195.769676][T12219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.794134][T12219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.821075][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.671040][T12249] loop2: detected capacity change from 0 to 1024 [ 196.687634][T12249] EXT4-fs: Ignoring removed orlov option [ 196.693397][T12249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.737809][T12249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.794238][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.092688][T12273] loop2: detected capacity change from 0 to 164 [ 197.250757][T12279] loop3: detected capacity change from 0 to 1024 [ 197.276486][T12279] EXT4-fs: Ignoring removed orlov option [ 197.282251][T12279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.316735][T12279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.349136][T12279] EXT4-fs (loop3): shut down requested (2) [ 197.377182][T12279] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 197.409194][T12279] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 197.470906][T11004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.530276][T12293] loop2: detected capacity change from 0 to 128 [ 197.536678][T12291] loop5: detected capacity change from 0 to 1024 [ 197.543573][T12291] EXT4-fs: Ignoring removed orlov option [ 197.549312][T12291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.568628][T12293] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.590723][T12293] ext4 filesystem being mounted at /598/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.590858][T12291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.628142][T12291] EXT4-fs (loop5): shut down requested (2) [ 197.646473][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.670308][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.710963][T11557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.898825][T12311] loop3: detected capacity change from 0 to 1024 [ 197.930557][T12311] EXT4-fs: Ignoring removed orlov option [ 197.936313][T12311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.121075][T12311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.269043][T12336] loop0: detected capacity change from 0 to 512 [ 198.275078][T11004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.301450][T12336] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 198.316439][T12336] EXT4-fs (loop0): orphan cleanup on readonly fs [ 198.323128][T12336] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 198.339996][T12336] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 198.352151][T12336] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #16: comm syz.0.3101: iget: immutable or append flags not allowed on symlinks [ 198.363050][T12312] lo speed is unknown, defaulting to 1000 [ 198.374100][T12336] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.3101: couldn't read orphan inode 16 (err -117) [ 198.396678][T12336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.417000][T12312] lo speed is unknown, defaulting to 1000 [ 198.619467][T12312] chnl_net:caif_netlink_parms(): no params data found [ 198.765570][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.772698][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.853043][T12312] bridge_slave_0: entered allmulticast mode [ 198.874630][T12312] bridge_slave_0: entered promiscuous mode [ 198.890354][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.897651][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.905396][T12312] bridge_slave_1: entered allmulticast mode [ 198.916570][T12312] bridge_slave_1: entered promiscuous mode [ 198.951971][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.975776][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.028135][T12312] team0: Port device team_slave_0 added [ 199.040630][T12312] team0: Port device team_slave_1 added [ 199.109865][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.114701][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3113'. [ 199.116862][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.145179][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'. [ 199.151728][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.189146][T12374] loop5: detected capacity change from 0 to 1024 [ 199.198932][T12374] EXT4-fs: Ignoring removed nobh option [ 199.210648][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.217722][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.243681][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.263346][T12374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 199.295476][T12374] System zones: 1-12 [ 199.300979][T12374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.316221][T12312] hsr_slave_0: entered promiscuous mode [ 199.322411][T12312] hsr_slave_1: entered promiscuous mode [ 199.328587][T12312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.336613][T12312] Cannot create hsr debugfs directory [ 199.339443][T12374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.508376][T12312] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.632856][T12312] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.709854][T12312] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.753042][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 199.753057][ T29] audit: type=1400 audit(1743146833.045:8712): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 199.781337][ T29] audit: type=1400 audit(1743146833.045:8713): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.803118][ T29] audit: type=1400 audit(1743146833.045:8714): avc: denied { open } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.825776][ T29] audit: type=1400 audit(1743146833.045:8715): avc: denied { getattr } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.855522][T12312] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.929070][T12384] loop1: detected capacity change from 0 to 512 [ 199.944648][ T29] audit: type=1400 audit(1743146833.225:8716): avc: denied { write } for pid=12383 comm="syz.1.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 199.983404][T12384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 199.987534][ T29] audit: type=1400 audit(1743146833.265:8717): avc: denied { mounton } for pid=12383 comm="syz.1.3115" path="/594/file0" dev="tmpfs" ino=3188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 200.032544][T12384] ext4 filesystem being mounted at /594/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.088365][T12312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.096355][ T29] audit: type=1400 audit(1743146833.375:8718): avc: denied { write } for pid=12383 comm="syz.1.3115" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.118265][ T29] audit: type=1400 audit(1743146833.375:8719): avc: denied { add_name } for pid=12383 comm="syz.1.3115" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.138931][ T29] audit: type=1400 audit(1743146833.375:8720): avc: denied { create } for pid=12383 comm="syz.1.3115" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 200.159193][ T29] audit: type=1400 audit(1743146833.375:8721): avc: denied { write open } for pid=12383 comm="syz.1.3115" path="/594/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 200.185468][T12312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.197966][T12312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.207256][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 200.209112][T12312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 200.261636][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.299454][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.330312][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.337498][ T7580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.410088][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.417254][ T7578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.433770][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3120'. [ 200.513245][T12410] loop1: detected capacity change from 0 to 1024 [ 200.522297][T12410] EXT4-fs: Ignoring removed orlov option [ 200.528096][T12410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.547243][T12410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.574510][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.591981][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.656400][T12422] loop1: detected capacity change from 0 to 1024 [ 200.664962][T12422] EXT4-fs: Ignoring removed orlov option [ 200.670786][T12422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.686917][T12312] veth0_vlan: entered promiscuous mode [ 200.695804][T12312] veth1_vlan: entered promiscuous mode [ 200.711901][T12312] veth0_macvtap: entered promiscuous mode [ 200.719777][T12312] veth1_macvtap: entered promiscuous mode [ 200.721147][T12422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.730268][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.748613][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.758546][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.769055][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.778961][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.781538][T12422] EXT4-fs (loop1): shut down requested (2) [ 200.789515][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.789536][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.815718][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.825684][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.836296][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.846142][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.856605][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.867994][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.870604][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.894723][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.905201][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.915068][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.925575][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.935500][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.946029][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.955930][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.966373][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.976290][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.986743][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.997447][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.007408][T12312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.016203][T12312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.025003][T12312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.033774][T12312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.062686][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3128'. [ 201.075565][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3128'. [ 201.181389][T12441] loop2: detected capacity change from 0 to 164 [ 201.297813][T11557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.388231][T12448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3132'. [ 201.482272][T12464] loop0: detected capacity change from 0 to 1024 [ 201.509792][T12464] EXT4-fs: Ignoring removed orlov option [ 201.515607][T12464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.529963][T12468] loop2: detected capacity change from 0 to 1024 [ 201.540359][T12467] loop3: detected capacity change from 0 to 1024 [ 201.556860][T12467] EXT4-fs: Ignoring removed orlov option [ 201.562614][T12467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.592750][T12464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.608374][T12467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.631819][T12468] EXT4-fs: Ignoring removed nobh option [ 201.673091][T12464] EXT4-fs (loop0): shut down requested (2) [ 201.735697][T11004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.755973][T11557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.768633][T12468] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 201.782858][T12468] System zones: 1-12 [ 201.793297][T12468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.807309][T12468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.488092][T12496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3148'. [ 202.609487][T12507] Option ' ' to dns_resolver key: bad/missing value [ 202.743308][T12497] lo speed is unknown, defaulting to 1000 [ 202.752259][T12511] loop0: detected capacity change from 0 to 512 [ 202.758659][T12497] lo speed is unknown, defaulting to 1000 [ 202.760322][T12513] loop5: detected capacity change from 0 to 1024 [ 202.785012][T12513] EXT4-fs: Ignoring removed orlov option [ 202.790750][T12513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.814808][T12515] loop2: detected capacity change from 0 to 1024 [ 202.824865][T12515] EXT4-fs: Ignoring removed nobh option [ 202.830472][T12515] EXT4-fs: Ignoring removed bh option [ 202.844808][T12513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.846613][T12511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 202.905377][T12511] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.906096][T12515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.979290][T12497] chnl_net:caif_netlink_parms(): no params data found [ 203.030922][T11557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 203.052793][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.178659][T12497] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.185891][T12497] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.189692][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3160'. [ 203.203470][T12497] bridge_slave_0: entered allmulticast mode [ 203.215004][T12497] bridge_slave_0: entered promiscuous mode [ 203.238002][T12497] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.245111][T12497] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.257272][T12497] bridge_slave_1: entered allmulticast mode [ 203.290137][T12544] loop3: detected capacity change from 0 to 1024 [ 203.297280][T12544] EXT4-fs: Ignoring removed nobh option [ 203.307425][T12497] bridge_slave_1: entered promiscuous mode [ 203.328303][T12312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.349809][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3160'. [ 203.370956][T12544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 203.402764][T12497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.433253][T12544] System zones: 1-12 [ 203.444931][T12497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.561503][T12544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.627413][T12497] team0: Port device team_slave_0 added [ 203.633862][T12544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.646695][T12497] team0: Port device team_slave_1 added [ 203.668172][T12565] loop0: detected capacity change from 0 to 1024 [ 203.695398][T12497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.697170][T12565] EXT4-fs: Ignoring removed nobh option [ 203.702363][T12497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.733982][T12497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.782683][T12497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.785773][T12565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 203.789781][T12497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.810241][T12565] System zones: [ 203.823781][T12497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.838093][T12565] 1-12 [ 203.846383][T12565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.866307][T12565] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.882502][T12497] hsr_slave_0: entered promiscuous mode [ 203.899706][T12497] hsr_slave_1: entered promiscuous mode [ 203.919786][T12497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.936343][T12497] Cannot create hsr debugfs directory [ 204.064805][T12497] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.138543][T12497] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.188728][T12579] loop3: detected capacity change from 0 to 512 [ 204.207325][T12579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 204.226420][T12497] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.238137][T12579] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.266890][T12586] loop2: detected capacity change from 0 to 512 [ 204.308922][T12586] 9pnet: Could not find request transport: f [ 204.338316][T12497] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.340581][T12590] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3174'. [ 204.364684][T12591] loop2: detected capacity change from 0 to 128 [ 204.390286][T12591] EXT4-fs: Ignoring removed nobh option [ 204.413611][T12591] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.426475][T12591] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.456663][T12590] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3174'. [ 204.479229][T12497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.497887][T11004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 204.523367][T12312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.525720][T12497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.558467][T12596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12596 comm=syz.3.3175 [ 204.573377][T12497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 204.605105][T12599] loop2: detected capacity change from 0 to 128 [ 204.619526][T12599] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 204.642323][T12497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.656764][T12599] netlink: 'syz.2.3177': attribute type 4 has an invalid length. [ 204.767701][T12605] loop3: detected capacity change from 0 to 1024 [ 204.777782][T12497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.791892][T12605] EXT4-fs: Ignoring removed nobh option [ 204.799672][T12497] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.843214][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.850408][ T7592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.871834][T12605] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 204.891810][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.897927][T12605] System zones: 1-12 [ 204.898987][ T7592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.903564][T12605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.925168][T12605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.945251][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 204.945267][ T29] audit: type=1400 audit(1743146838.245:8871): avc: denied { setopt } for pid=12598 comm="syz.2.3177" lport=45505 faddr=::ffff:172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.956776][T12497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.986002][T12497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.999369][T12611] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 205.046540][ T29] audit: type=1400 audit(1743146838.335:8872): avc: denied { sys_module } for pid=12497 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 205.134937][T12620] loop5: detected capacity change from 0 to 512 [ 205.141283][ T29] audit: type=1400 audit(1743146838.425:8873): avc: denied { read } for pid=12619 comm="syz.5.3182" dev="nsfs" ino=4026533053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.162568][ T29] audit: type=1400 audit(1743146838.425:8874): avc: denied { open } for pid=12619 comm="syz.5.3182" path="net:[4026533053]" dev="nsfs" ino=4026533053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.167304][T12497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.240393][T12620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.243917][T12627] loop2: detected capacity change from 0 to 512 [ 205.271919][T12620] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.273078][T12627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 205.295380][T12627] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.311314][ T29] audit: type=1400 audit(1743146838.605:8875): avc: denied { read write } for pid=12619 comm="syz.5.3182" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.312518][T12620] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, [ 205.334091][ T29] audit: type=1400 audit(1743146838.605:8876): avc: denied { open } for pid=12619 comm="syz.5.3182" path="/573/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.334133][ T29] audit: type=1400 audit(1743146838.605:8877): avc: denied { setattr } for pid=12619 comm="syz.5.3182" path="/573/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.389412][T12620] block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 205.403492][T12620] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 205.415926][T12620] EXT4-fs (loop5): This should not happen!! Data will be lost [ 205.415926][T12620] [ 205.425818][T12620] EXT4-fs (loop5): Total free blocks count 0 [ 205.431837][T12620] EXT4-fs (loop5): Free/Dirty block details [ 205.438053][T12620] EXT4-fs (loop5): free_blocks=65280 [ 205.443373][T12620] EXT4-fs (loop5): dirty_blocks=31 [ 205.443424][T12620] EXT4-fs (loop5): Block reservation details [ 205.443434][T12620] EXT4-fs (loop5): i_reserved_data_blocks=31 [ 205.448328][T12497] veth0_vlan: entered promiscuous mode [ 205.450413][T12497] veth1_vlan: entered promiscuous mode [ 205.473029][T12497] veth0_macvtap: entered promiscuous mode [ 205.477377][T12497] veth1_macvtap: entered promiscuous mode [ 205.488896][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.488920][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.488990][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.489008][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.489039][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.489052][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.489070][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.489082][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.489102][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.489131][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.489142][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.489155][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.489165][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.489177][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.489969][T12497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.493937][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.493954][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.493964][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.493980][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.493994][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.494009][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.494073][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.494086][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.494097][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.494134][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.494147][T12497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.494164][T12497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.507112][T12497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.507978][T12312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 205.511787][T12497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.511907][T12497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.511971][T12497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.512018][T12497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.536325][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3185'. [ 205.582046][ T29] audit: type=1400 audit(1743146838.875:8878): avc: denied { mounton } for pid=12497 comm="syz-executor" path="/root/syzkaller.kVFinz/syz-tmp" dev="sda1" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 205.653051][T12638] ip6erspan0: entered promiscuous mode [ 205.662789][ T29] audit: type=1400 audit(1743146838.875:8879): avc: denied { mount } for pid=12497 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 205.694557][T12641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3185'. [ 205.703776][ T29] audit: type=1400 audit(1743146838.875:8880): avc: denied { mount } for pid=12497 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 205.758133][T12642] loop3: detected capacity change from 0 to 512 [ 206.018904][T12642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 206.036343][T12650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12650 comm=syz.0.3187 [ 206.050620][T12642] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.070381][ T3776] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.123556][T12652] loop0: detected capacity change from 0 to 1024 [ 206.133132][T12656] loop2: detected capacity change from 0 to 1024 [ 206.144939][T12652] EXT4-fs: Ignoring removed orlov option [ 206.149166][T11004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 206.150650][T12652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.172399][T12656] EXT4-fs: Ignoring removed orlov option [ 206.178155][T12656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.266940][T12672] loop3: detected capacity change from 0 to 1024 [ 206.273698][T12672] EXT4-fs: Ignoring removed nobh option [ 206.309846][T12672] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 206.347047][T12672] System zones: 1-12 [ 206.358367][T12679] loop1: detected capacity change from 0 to 1024 [ 206.375078][T12679] EXT4-fs: Ignoring removed nobh option [ 206.384208][T12678] loop0: detected capacity change from 0 to 164 [ 206.420092][T12679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 206.437047][T12679] System zones: 1-12 [ 206.478857][T12689] FAULT_INJECTION: forcing a failure. [ 206.478857][T12689] name failslab, interval 1, probability 0, space 0, times 0 [ 206.491647][T12689] CPU: 0 UID: 0 PID: 12689 Comm: syz.0.3200 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) [ 206.491745][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.491761][T12689] Call Trace: [ 206.491769][T12689] [ 206.491778][T12689] dump_stack_lvl+0xf6/0x150 [ 206.491803][T12689] dump_stack+0x15/0x1a [ 206.491822][T12689] should_fail_ex+0x261/0x270 [ 206.491851][T12689] should_failslab+0x8f/0xb0 [ 206.491948][T12689] kmem_cache_alloc_noprof+0x59/0x340 [ 206.492028][T12689] ? io_submit_one+0xb9/0x1230 [ 206.492060][T12689] io_submit_one+0xb9/0x1230 [ 206.492133][T12689] ? __rcu_read_unlock+0x4e/0x70 [ 206.492161][T12689] __se_sys_io_submit+0xf7/0x280 [ 206.492185][T12689] __x64_sys_io_submit+0x43/0x50 [ 206.492206][T12689] x64_sys_call+0xa8b/0x2e10 [ 206.492231][T12689] do_syscall_64+0xc9/0x1c0 [ 206.492262][T12689] ? clear_bhb_loop+0x25/0x80 [ 206.492417][T12689] ? clear_bhb_loop+0x25/0x80 [ 206.492443][T12689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.492468][T12689] RIP: 0033:0x7f08b851d169 [ 206.492482][T12689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.492505][T12689] RSP: 002b:00007f08b6b7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 206.492524][T12689] RAX: ffffffffffffffda RBX: 00007f08b8735fa0 RCX: 00007f08b851d169 [ 206.492539][T12689] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f08b9271000 [ 206.492553][T12689] RBP: 00007f08b6b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.492567][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.492650][T12689] R13: 0000000000000000 R14: 00007f08b8735fa0 R15: 00007ffc28605518 [ 206.492671][T12689] [ 206.705567][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'. [ 206.786033][T12693] ip6erspan0: entered promiscuous mode [ 206.870021][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'. [ 206.939439][T12696] SELinux: syz.0.3202 (12696) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 207.160171][T12704] loop0: detected capacity change from 0 to 1024 [ 207.195885][T12704] EXT4-fs: Ignoring removed orlov option [ 207.201682][T12704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.252572][T12710] loop2: detected capacity change from 0 to 1024 [ 207.284882][T12710] EXT4-fs: Ignoring removed orlov option [ 207.290742][T12710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.457253][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3213'. [ 207.521319][T12725] ip6erspan0: entered promiscuous mode [ 207.570107][T12731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3213'. [ 207.699328][T12739] loop3: detected capacity change from 0 to 512 [ 207.718449][T12739] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.853400][T12744] loop3: detected capacity change from 0 to 1024 [ 207.860482][T12744] EXT4-fs: Ignoring removed orlov option [ 207.866333][T12744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.248168][T12750] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.3221'. [ 208.276186][T12750] netlink: zone id is out of range [ 208.281357][T12750] netlink: zone id is out of range [ 208.303656][T12757] loop0: detected capacity change from 0 to 164 [ 208.319606][T12750] netlink: set zone limit has 8 unknown bytes [ 208.524840][T12765] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.559564][T12769] loop1: detected capacity change from 0 to 512 [ 208.606380][T12769] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.619211][T12771] loop0: detected capacity change from 0 to 1024 [ 208.632260][T12771] EXT4-fs: Ignoring removed orlov option [ 208.638061][T12771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.796026][T12791] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.3236'. [ 208.813657][T12791] netlink: zone id is out of range [ 208.818889][T12791] netlink: zone id is out of range [ 208.829728][T12791] netlink: set zone limit has 8 unknown bytes [ 208.849903][T12791] loop0: detected capacity change from 0 to 164 [ 208.886521][T12801] loop1: detected capacity change from 0 to 1024 [ 208.912009][T12801] EXT4-fs: Ignoring removed orlov option [ 208.917896][T12801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.296427][T12826] loop1: detected capacity change from 0 to 512 [ 209.306365][T12826] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.480995][T12832] syzkaller0: entered promiscuous mode [ 209.486573][T12832] syzkaller0: entered allmulticast mode [ 209.575399][T12832] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 209.582872][T12832] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 209.620771][T12836] loop1: detected capacity change from 0 to 512 [ 209.621188][T12834] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.658656][T12836] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.693033][T12845] loop2: detected capacity change from 0 to 1024 [ 209.699911][T12845] EXT4-fs: Ignoring removed orlov option [ 209.705698][T12845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.782571][T12855] loop1: detected capacity change from 0 to 1024 [ 209.794054][T12855] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 209.805139][T12855] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 209.819975][T12855] JBD2: no valid journal superblock found [ 209.825901][T12855] EXT4-fs (loop1): Could not load journal inode [ 209.845580][T12855] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.3258'. [ 209.950386][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 210.013297][T12871] ip6erspan0: entered promiscuous mode [ 210.063194][T12868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3265'. [ 210.099932][T12876] loop0: detected capacity change from 0 to 1024 [ 210.107655][T12876] EXT4-fs: Ignoring removed orlov option [ 210.113376][T12876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.121603][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 210.121619][ T29] audit: type=1400 audit(1743146843.415:9022): avc: denied { tracepoint } for pid=12877 comm="syz.2.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 210.162266][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3268'. [ 210.185045][ T29] audit: type=1400 audit(1743146843.485:9023): avc: denied { module_request } for pid=12881 comm="syz.0.3269" kmod="nfnetlink-subsys-177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 210.197753][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3269'. [ 210.217185][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 210.248721][T12885] loop2: detected capacity change from 0 to 512 [ 210.267563][T12885] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.368222][T12890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3271'. [ 210.377494][T12890] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.427575][T12894] FAULT_INJECTION: forcing a failure. [ 210.427575][T12894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.440831][T12894] CPU: 0 UID: 0 PID: 12894 Comm: syz.3.3273 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) [ 210.440861][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.440876][T12894] Call Trace: [ 210.440884][T12894] [ 210.440892][T12894] dump_stack_lvl+0xf6/0x150 [ 210.440981][T12894] dump_stack+0x15/0x1a [ 210.440999][T12894] should_fail_ex+0x261/0x270 [ 210.441030][T12894] should_fail+0xb/0x10 [ 210.441053][T12894] should_fail_usercopy+0x1a/0x20 [ 210.441092][T12894] _copy_to_user+0x20/0xa0 [ 210.441127][T12894] simple_read_from_buffer+0xb2/0x130 [ 210.441206][T12894] proc_fail_nth_read+0x103/0x140 [ 210.441235][T12894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.441338][T12894] vfs_read+0x1b2/0x710 [ 210.441371][T12894] ? __rcu_read_unlock+0x4e/0x70 [ 210.441401][T12894] ? __fget_files+0x186/0x1c0 [ 210.441426][T12894] ksys_read+0xeb/0x1b0 [ 210.441502][T12894] __x64_sys_read+0x42/0x50 [ 210.441607][T12894] x64_sys_call+0x2a3b/0x2e10 [ 210.441632][T12894] do_syscall_64+0xc9/0x1c0 [ 210.441658][T12894] ? clear_bhb_loop+0x25/0x80 [ 210.441678][T12894] ? clear_bhb_loop+0x25/0x80 [ 210.441751][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.441777][T12894] RIP: 0033:0x7fc33f94bb7c [ 210.441794][T12894] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 210.441817][T12894] RSP: 002b:00007fc33dfaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.441837][T12894] RAX: ffffffffffffffda RBX: 00007fc33fb65fa0 RCX: 00007fc33f94bb7c [ 210.441882][T12894] RDX: 000000000000000f RSI: 00007fc33dfaf0a0 RDI: 0000000000000004 [ 210.441956][T12894] RBP: 00007fc33dfaf090 R08: 0000000000000000 R09: 0000000000000000 [ 210.441967][T12894] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 210.441981][T12894] R13: 0000000000000000 R14: 00007fc33fb65fa0 R15: 00007ffd9f1c7ca8 [ 210.442003][T12894] [ 210.696397][ T29] audit: type=1400 audit(1743146843.975:9024): avc: denied { execute } for pid=12895 comm="syz.2.3274" name="file0" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 211.081759][ T29] audit: type=1400 audit(1743146844.275:9025): avc: denied { setopt } for pid=12911 comm="syz.5.3281" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.103391][ T29] audit: type=1400 audit(1743146844.305:9026): avc: denied { bind } for pid=12911 comm="syz.5.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 211.122861][ T29] audit: type=1400 audit(1743146844.315:9027): avc: denied { listen } for pid=12911 comm="syz.5.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 211.142685][ T29] audit: type=1400 audit(1743146844.325:9028): avc: denied { create } for pid=12911 comm="syz.5.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.162388][ T29] audit: type=1400 audit(1743146844.335:9029): avc: denied { bind } for pid=12911 comm="syz.5.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.181871][ T29] audit: type=1400 audit(1743146844.355:9030): avc: denied { connect } for pid=12911 comm="syz.5.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 211.201753][ T29] audit: type=1400 audit(1743146844.355:9031): avc: denied { name_connect } for pid=12911 comm="syz.5.3281" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 211.246915][T12922] loop2: detected capacity change from 0 to 512 [ 211.279057][T12922] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.293284][T12924] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.3284'. [ 211.308314][T12924] netlink: zone id is out of range [ 211.313627][T12924] netlink: zone id is out of range [ 211.322691][T12921] loop5: detected capacity change from 0 to 128 [ 211.342084][T12924] netlink: set zone limit has 8 unknown bytes [ 211.353042][T12929] loop1: detected capacity change from 0 to 1024 [ 211.358012][T12921] bridge0: entered promiscuous mode [ 211.367033][T12924] loop0: detected capacity change from 0 to 164 [ 211.368554][T12921] bridge0: port 3(macsec1) entered blocking state [ 211.379951][T12921] bridge0: port 3(macsec1) entered disabled state [ 211.386679][T12929] EXT4-fs: Ignoring removed nobh option [ 211.389406][T12921] macsec1: entered allmulticast mode [ 211.397581][T12921] bridge0: entered allmulticast mode [ 211.412562][T12921] macsec1: left allmulticast mode [ 211.417777][T12921] bridge0: left allmulticast mode [ 211.424532][T12921] bridge0: left promiscuous mode [ 211.444131][T12929] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 211.459613][T12929] System zones: 1-12 [ 211.552241][T12938] lo speed is unknown, defaulting to 1000 [ 211.560863][T12938] lo speed is unknown, defaulting to 1000 [ 211.763927][T12952] loop5: detected capacity change from 0 to 1024 [ 211.784430][T12952] EXT4-fs: Ignoring removed orlov option [ 211.790168][T12952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.797555][T12955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3294'. [ 211.867437][T12960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3294'. [ 212.230036][T12972] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 212.256209][T12969] netlink: zone id is out of range [ 212.269196][T12969] loop3: detected capacity change from 0 to 164 [ 212.322601][T12977] loop2: detected capacity change from 0 to 1024 [ 212.338182][T12977] EXT4-fs: Ignoring removed nobh option [ 212.343794][T12977] EXT4-fs: Ignoring removed bh option [ 212.894119][T13010] loop3: detected capacity change from 0 to 1024 [ 212.951271][T13010] EXT4-fs: Ignoring removed nobh option [ 213.033606][T13010] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 213.096010][T13010] System zones: 1-12 [ 213.520052][T13039] net_ratelimit: 2 callbacks suppressed [ 213.520161][T13039] netlink: zone id is out of range [ 213.530924][T13039] netlink: zone id is out of range [ 213.564654][T13039] netlink: set zone limit has 8 unknown bytes [ 213.593297][T13039] loop0: detected capacity change from 0 to 164 [ 213.919340][T13051] loop3: detected capacity change from 0 to 512 [ 213.950239][T13051] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.178708][T13081] loop5: detected capacity change from 0 to 1024 [ 214.188128][T13081] EXT4-fs: Ignoring removed nobh option [ 214.207864][T13081] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 214.218899][T13081] System zones: 1-12 [ 215.165538][T13100] loop2: detected capacity change from 0 to 512 [ 215.208735][T13100] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.244126][T13104] FAULT_INJECTION: forcing a failure. [ 215.244126][T13104] name failslab, interval 1, probability 0, space 0, times 0 [ 215.256831][T13104] CPU: 1 UID: 0 PID: 13104 Comm: syz.1.3345 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) [ 215.256859][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.256873][T13104] Call Trace: [ 215.256880][T13104] [ 215.256888][T13104] dump_stack_lvl+0xf6/0x150 [ 215.256910][T13104] dump_stack+0x15/0x1a [ 215.256926][T13104] should_fail_ex+0x261/0x270 [ 215.256953][T13104] should_failslab+0x8f/0xb0 [ 215.256974][T13104] kmem_cache_alloc_noprof+0x59/0x340 [ 215.257009][T13104] ? vm_area_dup+0x98/0x130 [ 215.257034][T13104] vm_area_dup+0x98/0x130 [ 215.257053][T13104] __split_vma+0xfd/0x6a0 [ 215.257080][T13104] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 215.257113][T13104] mmap_region+0x46f/0x1630 [ 215.257144][T13104] ? mntput+0x49/0x70 [ 215.257175][T13104] ? terminate_walk+0x271/0x290 [ 215.257212][T13104] do_mmap+0x9ef/0xc80 [ 215.257232][T13104] vm_mmap_pgoff+0x16d/0x2d0 [ 215.257257][T13104] ksys_mmap_pgoff+0x28a/0x340 [ 215.257281][T13104] x64_sys_call+0x1945/0x2e10 [ 215.257305][T13104] do_syscall_64+0xc9/0x1c0 [ 215.257333][T13104] ? clear_bhb_loop+0x25/0x80 [ 215.257353][T13104] ? clear_bhb_loop+0x25/0x80 [ 215.257373][T13104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.257397][T13104] RIP: 0033:0x7effe472d169 [ 215.257415][T13104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.257436][T13104] RSP: 002b:00007effe2d8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 215.257454][T13104] RAX: ffffffffffffffda RBX: 00007effe4945fa0 RCX: 00007effe472d169 [ 215.257465][T13104] RDX: 000000000100000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 215.257476][T13104] RBP: 00007effe2d8f090 R08: 0000000000000003 R09: 0000000000000000 [ 215.257486][T13104] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 215.257496][T13104] R13: 0000000000000000 R14: 00007effe4945fa0 R15: 00007ffd1f402d18 [ 215.257512][T13104] [ 216.040927][T13133] loop3: detected capacity change from 0 to 2048 [ 216.089242][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 216.089258][ T29] audit: type=1400 audit(1743146849.385:9050): avc: denied { read write } for pid=13132 comm="syz.3.3356" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 216.167982][ T1427] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 216.191214][ T29] audit: type=1400 audit(1743146849.415:9051): avc: denied { open } for pid=13132 comm="syz.3.3356" path="/177/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 216.245332][T13137] syzkaller0: entered promiscuous mode [ 216.250907][T13137] syzkaller0: entered allmulticast mode [ 216.258852][ T1427] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 216.271103][ T1427] EXT4-fs (loop3): This should not happen!! Data will be lost [ 216.271103][ T1427] [ 216.280779][ T1427] EXT4-fs (loop3): Total free blocks count 0 [ 216.286794][ T1427] EXT4-fs (loop3): Free/Dirty block details [ 216.292702][ T1427] EXT4-fs (loop3): free_blocks=66060288 [ 216.298294][ T1427] EXT4-fs (loop3): dirty_blocks=32 [ 216.303446][ T1427] EXT4-fs (loop3): Block reservation details [ 216.309494][ T1427] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 216.316771][ T1427] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 216.329272][ T1427] EXT4-fs (loop3): This should not happen!! Data will be lost [ 216.329272][ T1427] [ 216.398514][T13138] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 216.406168][T13138] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 216.477297][T13144] loop3: detected capacity change from 0 to 512 [ 216.533647][T13144] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.592319][ T29] audit: type=1400 audit(1743146849.885:9052): avc: denied { read write } for pid=13158 comm="syz.0.3365" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 216.616261][ T29] audit: type=1400 audit(1743146849.885:9053): avc: denied { open } for pid=13158 comm="syz.0.3365" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 216.781435][T13170] loop2: detected capacity change from 0 to 128 [ 216.793510][ T29] audit: type=1400 audit(1743146850.035:9054): avc: denied { mounton } for pid=13171 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 216.815254][ T29] audit: type=1400 audit(1743146850.045:9055): avc: denied { write } for pid=13173 comm="syz.0.3371" name="attr" dev="proc" ino=37788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 216.837034][ T29] audit: type=1400 audit(1743146850.045:9056): avc: denied { add_name } for pid=13173 comm="syz.0.3371" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 216.858414][ T29] audit: type=1400 audit(1743146850.045:9057): avc: denied { create } for pid=13173 comm="syz.0.3371" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 216.879810][ T29] audit: type=1400 audit(1743146850.045:9058): avc: denied { associate } for pid=13173 comm="syz.0.3371" name="cgroup.controllers" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 216.911086][T13170] bridge0: entered promiscuous mode [ 216.927996][T13170] bridge0: port 3(macsec1) entered blocking state [ 216.934634][T13170] bridge0: port 3(macsec1) entered disabled state [ 216.955094][T13170] macsec1: entered allmulticast mode [ 216.960476][T13170] bridge0: entered allmulticast mode [ 216.989985][T13170] macsec1: left allmulticast mode [ 216.995091][T13170] bridge0: left allmulticast mode [ 217.008953][T13170] bridge0: left promiscuous mode [ 217.018394][T13171] lo speed is unknown, defaulting to 1000 [ 217.025195][T13171] lo speed is unknown, defaulting to 1000 [ 217.146126][T13171] chnl_net:caif_netlink_parms(): no params data found [ 217.218874][T13171] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.226098][T13171] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.228878][T13196] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 217.234963][T13171] bridge_slave_0: entered allmulticast mode [ 217.242597][T13196] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 217.247157][T13171] bridge_slave_0: entered promiscuous mode [ 217.260283][T13171] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.268097][T13171] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.275809][T13171] bridge_slave_1: entered allmulticast mode [ 217.286188][T13171] bridge_slave_1: entered promiscuous mode [ 217.306833][T13171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.321481][T13171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.344809][T13171] team0: Port device team_slave_0 added [ 217.352186][T13171] team0: Port device team_slave_1 added [ 217.375017][T13201] __nla_validate_parse: 6 callbacks suppressed [ 217.375031][T13201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3376'. [ 217.391004][T13171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.391346][T13201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=13201 comm=syz.3.3376 [ 217.398153][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.417304][ T29] audit: type=1400 audit(1743146850.715:9059): avc: denied { bind } for pid=13200 comm="syz.3.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.436612][T13171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.437705][T13171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.473831][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.499945][T13171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.518279][T13201] loop3: detected capacity change from 0 to 512 [ 217.536733][T13171] hsr_slave_0: entered promiscuous mode [ 217.543045][T13171] hsr_slave_1: entered promiscuous mode [ 217.547823][T13201] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 217.549298][T13171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.571425][T13201] EXT4-fs (loop3): mount failed [ 217.573607][T13171] Cannot create hsr debugfs directory [ 217.676382][T13210] loop3: detected capacity change from 0 to 164 [ 217.682900][T13210] iso9660: Unknown parameter '' [ 217.712573][T13217] FAULT_INJECTION: forcing a failure. [ 217.712573][T13217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.725754][T13217] CPU: 1 UID: 0 PID: 13217 Comm: syz.0.3382 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) [ 217.725863][T13217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.725874][T13217] Call Trace: [ 217.725879][T13217] [ 217.725885][T13217] dump_stack_lvl+0xf6/0x150 [ 217.725906][T13217] dump_stack+0x15/0x1a [ 217.725924][T13217] should_fail_ex+0x261/0x270 [ 217.725981][T13217] should_fail+0xb/0x10 [ 217.726008][T13217] should_fail_usercopy+0x1a/0x20 [ 217.726039][T13217] _copy_from_user+0x1c/0xa0 [ 217.726090][T13217] do_tcp_setsockopt+0x20a/0x1710 [ 217.726115][T13217] ? selinux_socket_setsockopt+0x1d9/0x210 [ 217.726143][T13217] tcp_setsockopt+0x50/0xb0 [ 217.726166][T13217] sock_common_setsockopt+0x64/0x80 [ 217.726204][T13217] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 217.726308][T13217] __sys_setsockopt+0x187/0x200 [ 217.726336][T13217] __x64_sys_setsockopt+0x66/0x80 [ 217.726365][T13217] x64_sys_call+0x2a09/0x2e10 [ 217.726385][T13217] do_syscall_64+0xc9/0x1c0 [ 217.726439][T13217] ? clear_bhb_loop+0x25/0x80 [ 217.726460][T13217] ? clear_bhb_loop+0x25/0x80 [ 217.726479][T13217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.726498][T13217] RIP: 0033:0x7f08b851d169 [ 217.726550][T13217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.726572][T13217] RSP: 002b:00007f08b6b7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.726596][T13217] RAX: ffffffffffffffda RBX: 00007f08b8735fa0 RCX: 00007f08b851d169 [ 217.726610][T13217] RDX: 0000000000000016 RSI: 0000000000000006 RDI: 0000000000000006 [ 217.726664][T13217] RBP: 00007f08b6b7f090 R08: 00000000000021a5 R09: 0000000000000000 [ 217.726707][T13217] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.726721][T13217] R13: 0000000000000000 R14: 00007f08b8735fa0 R15: 00007ffc28605518 [ 217.726742][T13217] [ 217.969017][T13171] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.003598][T13227] loop3: detected capacity change from 0 to 1024 [ 218.010744][T13227] EXT4-fs: Ignoring removed nobh option [ 218.016381][T13227] EXT4-fs: Ignoring removed bh option [ 218.028425][T13171] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.077433][T13171] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.126391][T13171] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.151220][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3389'. [ 218.214048][T13171] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.223130][T13171] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.232681][T13171] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.245458][T13171] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.289193][T13171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.302897][T13171] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.318058][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.325258][ T7621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.348590][T13171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.359284][T13171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.389499][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.396650][ T7621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.454877][T13240] loop3: detected capacity change from 0 to 128 [ 218.476191][T13240] bridge0: entered promiscuous mode [ 218.496509][T13240] bridge0: port 3(macsec1) entered blocking state [ 218.503043][T13240] bridge0: port 3(macsec1) entered disabled state [ 218.524470][T13240] macsec1: entered allmulticast mode [ 218.529826][T13240] bridge0: entered allmulticast mode [ 218.585011][T13240] macsec1: left allmulticast mode [ 218.590150][T13240] bridge0: left allmulticast mode [ 218.617090][T13240] bridge0: left promiscuous mode [ 218.645771][T13171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.866205][T13171] veth0_vlan: entered promiscuous mode [ 218.886297][T13171] veth1_vlan: entered promiscuous mode [ 218.913151][T13171] veth0_macvtap: entered promiscuous mode [ 218.940199][T13171] veth1_macvtap: entered promiscuous mode [ 218.960591][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.971281][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.981381][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.991846][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.001778][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.012246][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.022085][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.032864][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.042802][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.053324][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.063171][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.073724][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.083645][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.094124][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.103982][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.114508][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.126003][T13171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.140872][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.151421][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.161293][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.171752][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.181702][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.192374][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.202488][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.212952][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.222812][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.233316][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.243221][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.253731][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.263581][T13171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.274072][T13171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.285834][T13171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.325446][T13171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.334192][T13171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.343042][T13171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.351838][T13171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.526156][T13262] FAULT_INJECTION: forcing a failure. [ 219.526156][T13262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.541665][T13262] CPU: 1 UID: 0 PID: 13262 Comm: syz.1.3395 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) [ 219.541700][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.541716][T13262] Call Trace: [ 219.541723][T13262] [ 219.541731][T13262] dump_stack_lvl+0xf6/0x150 [ 219.541759][T13262] dump_stack+0x15/0x1a [ 219.541779][T13262] should_fail_ex+0x261/0x270 [ 219.541808][T13262] should_fail_alloc_page+0xfd/0x110 [ 219.541872][T13262] __alloc_frozen_pages_noprof+0x11e/0x340 [ 219.541916][T13262] alloc_pages_mpol+0xb6/0x260 [ 219.542013][T13262] folio_alloc_mpol_noprof+0x36/0x80 [ 219.542099][T13262] shmem_get_folio_gfp+0x3c1/0xd30 [ 219.542134][T13262] shmem_write_begin+0xa7/0x190 [ 219.542161][T13262] generic_perform_write+0x189/0x4b0 [ 219.542198][T13262] shmem_file_write_iter+0xc2/0xe0 [ 219.542278][T13262] vfs_write+0x79b/0x950 [ 219.542315][T13262] ? clockevents_program_event+0x196/0x1f0 [ 219.542422][T13262] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 219.542518][T13262] __x64_sys_pwrite64+0xfb/0x150 [ 219.542544][T13262] x64_sys_call+0xab9/0x2e10 [ 219.542570][T13262] do_syscall_64+0xc9/0x1c0 [ 219.542627][T13262] ? clear_bhb_loop+0x25/0x80 [ 219.542657][T13262] ? clear_bhb_loop+0x25/0x80 [ 219.542683][T13262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.542708][T13262] RIP: 0033:0x7effe472d169 [ 219.542726][T13262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.542797][T13262] RSP: 002b:00007effe2d8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 219.542818][T13262] RAX: ffffffffffffffda RBX: 00007effe4945fa0 RCX: 00007effe472d169 [ 219.542830][T13262] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000008 [ 219.542841][T13262] RBP: 00007effe2d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.542851][T13262] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 219.542917][T13262] R13: 0000000000000000 R14: 00007effe4945fa0 R15: 00007ffd1f402d18 [ 219.542939][T13262] [ 220.070872][T13285] lo speed is unknown, defaulting to 1000 [ 220.077212][T13285] lo speed is unknown, defaulting to 1000 [ 220.480484][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3403'. [ 220.518991][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3403'. [ 220.568049][T13297] loop3: detected capacity change from 0 to 1024 [ 220.587315][T13297] EXT4-fs: Ignoring removed nobh option [ 220.592964][T13297] EXT4-fs: Ignoring removed bh option [ 220.920286][T13305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3406'. [ 220.947242][T13305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=13305 comm=syz.1.3406 [ 221.001701][T13305] loop1: detected capacity change from 0 to 512 [ 221.031194][T13305] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 221.048983][T13305] EXT4-fs (loop1): mount failed [ 221.152339][T13311] loop1: detected capacity change from 0 to 1024 [ 221.175040][T13311] EXT4-fs: Ignoring removed nobh option [ 221.197170][T13311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 221.214221][T13311] System zones: 1-12 [ 221.377063][T13329] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 221.434399][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 221.434484][ T29] audit: type=1400 audit(1743146854.685:9150): avc: denied { shutdown } for pid=13324 comm="syz.5.3412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.460614][ T29] audit: type=1400 audit(1743146854.685:9151): avc: denied { setopt } for pid=13324 comm="syz.5.3412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.480234][ T29] audit: type=1400 audit(1743146854.685:9152): avc: denied { connect } for pid=13324 comm="syz.5.3412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.500047][ T29] audit: type=1400 audit(1743146854.685:9153): avc: denied { name_connect } for pid=13324 comm="syz.5.3412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 221.514915][T13329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.546257][T13326] block device autoloading is deprecated and will be removed. [ 221.577714][T13326] bio_check_eod: 7 callbacks suppressed [ 221.577732][T13326] syz.5.3412: attempt to access beyond end of device [ 221.577732][T13326] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 221.625422][T13329] ip6erspan0: entered promiscuous mode [ 221.637728][T13329] bond1: (slave ip6erspan0): making interface the new active one [ 221.647065][T13329] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 221.658803][T13330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3413'. [ 221.693054][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 221.743976][T13342] loop1: detected capacity change from 0 to 1024 [ 221.751914][T13342] EXT4-fs: Ignoring removed nobh option [ 221.763641][ T29] audit: type=1400 audit(1743146855.055:9154): avc: denied { bind } for pid=13343 comm="syz.5.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.783346][ T29] audit: type=1400 audit(1743146855.055:9155): avc: denied { node_bind } for pid=13343 comm="syz.5.3418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 221.817845][T13344] loop5: detected capacity change from 0 to 512 [ 221.827644][T13342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 221.828087][ T29] audit: type=1400 audit(1743146855.085:9156): avc: denied { connect } for pid=13343 comm="syz.5.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.854585][T13342] System zones: 1-12 [ 221.855620][ T29] audit: type=1400 audit(1743146855.085:9157): avc: denied { write } for pid=13343 comm="syz.5.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.883195][T13344] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 221.949088][T13344] EXT4-fs (loop5): 1 truncate cleaned up [ 221.998137][T13344] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3418'. [ 222.008159][T13344] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3418'. [ 222.063294][T13355] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.3420'. [ 222.073011][T13355] netlink: zone id is out of range [ 222.078210][T13355] netlink: zone id is out of range [ 222.103097][T13355] netlink: set zone limit has 8 unknown bytes [ 222.115737][T13355] loop0: detected capacity change from 0 to 164 [ 222.179801][T13364] ref_ctr increment failed for inode: 0x21e offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888107828000 [ 222.181511][ T29] audit: type=1400 audit(1743146855.475:9158): avc: denied { cpu } for pid=13363 comm="syz.0.3424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 222.210913][T13363] uprobe: syz.0.3424:13363 failed to unregister, leaking uprobe [ 222.473325][T13377] loop0: detected capacity change from 0 to 1024 [ 222.509939][T13377] EXT4-fs: Ignoring removed nobh option [ 222.558287][T13377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 222.567825][T13377] System zones: 1-12 [ 223.053443][ T29] audit: type=1400 audit(1743146856.345:9159): avc: denied { bind } for pid=13407 comm="syz.2.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.069359][T13408] __nla_validate_parse: 3 callbacks suppressed [ 223.069379][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'. [ 223.111396][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 223.118874][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 223.126385][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 223.138323][T13416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.147706][ T36] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 223.152624][T13408] 8021q: adding VLAN 0 to HW filter on device team1 [ 223.201225][T13416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.303551][T13423] loop1: detected capacity change from 0 to 128 [ 223.338891][T13423] bridge0: entered promiscuous mode [ 223.350316][T13426] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3446'. [ 223.361210][T13423] bridge0: port 3(macsec1) entered blocking state [ 223.367808][T13423] bridge0: port 3(macsec1) entered disabled state [ 223.396317][T13423] macsec1: entered allmulticast mode [ 223.401680][T13423] bridge0: entered allmulticast mode [ 223.422465][T13423] macsec1: left allmulticast mode [ 223.427902][T13423] bridge0: left allmulticast mode [ 223.435413][T13402] loop0: detected capacity change from 0 to 164 [ 223.468772][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3446'. [ 223.482405][T13423] bridge0: left promiscuous mode [ 223.524102][T13428] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 223.633471][T13437] loop3: detected capacity change from 0 to 1024 [ 223.673785][T13437] EXT4-fs: Ignoring removed nobh option [ 223.720610][T13443] loop1: detected capacity change from 0 to 512 [ 223.734262][T13437] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 223.748796][T13437] System zones: 1-12 [ 223.753598][T13437] EXT4-fs mount: 64 callbacks suppressed [ 223.753613][T13437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.760691][T13443] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 223.792034][T13437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.794477][T13443] EXT4-fs (loop1): orphan cleanup on readonly fs [ 223.807806][T13443] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 223.823042][T13443] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 223.842955][T13447] loop0: detected capacity change from 0 to 2048 [ 223.851315][T13443] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #16: comm syz.1.3455: iget: immutable or append flags not allowed on symlinks [ 223.866694][T13443] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.3455: couldn't read orphan inode 16 (err -117) [ 223.879335][T13443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.896912][T13447] loop0: p2 < > p3 p4 [ 223.898027][T13447] loop0: p3 start 65535 is beyond EOD, truncated [ 223.898050][T13447] loop0: p4 size 8192 extends beyond EOD, truncated [ 223.918064][ T3002] loop0: p2 < > p3 p4 [ 223.925570][ T3002] loop0: p3 start 65535 is beyond EOD, truncated [ 223.925600][ T3002] loop0: p4 size 8192 extends beyond EOD, truncated [ 223.979820][ T8124] udevd[8124]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 223.979856][ T8123] udevd[8123]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 224.072880][T13463] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.3460'. [ 224.102043][T13463] netlink: zone id is out of range [ 224.107286][T13463] netlink: zone id is out of range [ 224.187305][T13474] loop5: detected capacity change from 0 to 164 [ 224.196681][T13463] netlink: set zone limit has 8 unknown bytes [ 224.238724][T13477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3462'. [ 224.262377][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3462'. [ 224.281387][T13477] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 224.492446][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3469'. [ 224.587682][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 224.707854][T13499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3474'. [ 224.720219][T13495] FAULT_INJECTION: forcing a failure. [ 224.720219][T13495] name failslab, interval 1, probability 0, space 0, times 0 [ 224.732913][T13495] CPU: 1 UID: 0 PID: 13495 Comm: syz.5.3472 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) [ 224.733013][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.733025][T13495] Call Trace: [ 224.733032][T13495] [ 224.733041][T13495] dump_stack_lvl+0xf6/0x150 [ 224.733069][T13495] dump_stack+0x15/0x1a [ 224.733089][T13495] should_fail_ex+0x261/0x270 [ 224.733122][T13495] should_failslab+0x8f/0xb0 [ 224.733146][T13495] __kmalloc_cache_noprof+0x55/0x320 [ 224.733256][T13495] ? sctp_stream_init_ext+0x38/0x130 [ 224.733280][T13495] sctp_stream_init_ext+0x38/0x130 [ 224.733301][T13495] sctp_sendmsg_to_asoc+0xb5a/0xc00 [ 224.733336][T13495] ? mod_objcg_state+0x2f5/0x500 [ 224.733494][T13495] ? __rcu_read_unlock+0x4e/0x70 [ 224.733536][T13495] ? lock_sock_nested+0x114/0x140 [ 224.733626][T13495] ? sctp_sendmsg_check_sflags+0x14d/0x1d0 [ 224.733735][T13495] sctp_sendmsg+0x13ac/0x1870 [ 224.733845][T13495] ? __pfx_sctp_sendmsg+0x10/0x10 [ 224.733878][T13495] inet_sendmsg+0xc5/0xd0 [ 224.733900][T13495] __sock_sendmsg+0x102/0x180 [ 224.733936][T13495] ____sys_sendmsg+0x350/0x4e0 [ 224.733963][T13495] __sys_sendmmsg+0x22a/0x4b0 [ 224.733987][T13495] ? arch_irq_work_raise+0x27/0x50 [ 224.734124][T13495] __x64_sys_sendmmsg+0x57/0x70 [ 224.734155][T13495] x64_sys_call+0x2b53/0x2e10 [ 224.734180][T13495] do_syscall_64+0xc9/0x1c0 [ 224.734221][T13495] ? clear_bhb_loop+0x25/0x80 [ 224.734246][T13495] ? clear_bhb_loop+0x25/0x80 [ 224.734333][T13495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.734355][T13495] RIP: 0033:0x7f4a45d1d169 [ 224.734416][T13495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.734437][T13495] RSP: 002b:00007f4a44387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 224.734568][T13495] RAX: ffffffffffffffda RBX: 00007f4a45f35fa0 RCX: 00007f4a45d1d169 [ 224.734581][T13495] RDX: 0000000000000001 RSI: 0000200000003f00 RDI: 0000000000000003 [ 224.734593][T13495] RBP: 00007f4a44387090 R08: 0000000000000000 R09: 0000000000000000 [ 224.734606][T13495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.734620][T13495] R13: 0000000000000000 R14: 00007f4a45f35fa0 R15: 00007ffd1024d8b8 [ 224.734641][T13495] [ 224.968818][T13499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=13499 comm=syz.2.3474 [ 225.162795][T13517] loop2: detected capacity change from 0 to 512 [ 225.170577][T13517] EXT4-fs: dax option not supported [ 225.202316][T13518] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3477'. [ 225.218585][T13515] syzkaller0: entered promiscuous mode [ 225.224148][T13515] syzkaller0: entered allmulticast mode [ 225.268625][T13505] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 225.315189][T13522] loop3: detected capacity change from 0 to 1024 [ 225.330137][T13522] EXT4-fs: Ignoring removed nobh option [ 225.340551][T13515] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.348077][T13515] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 225.367513][T13522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 225.390348][T13522] System zones: 1-12 [ 225.402282][T13522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.425193][T13522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.471255][T13528] loop5: detected capacity change from 0 to 128 [ 225.511926][T13528] bridge0: entered promiscuous mode [ 225.520784][T13528] bridge0: port 3(macsec1) entered blocking state [ 225.527346][T13528] bridge0: port 3(macsec1) entered disabled state [ 225.536999][T13528] macsec1: entered allmulticast mode [ 225.542412][T13528] bridge0: entered allmulticast mode [ 225.557935][T13528] macsec1: left allmulticast mode [ 225.563023][T13528] bridge0: left allmulticast mode [ 225.580246][T13528] bridge0: left promiscuous mode [ 225.620888][T13538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=13538 comm=syz.3.3488 [ 225.929849][T13540] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 226.117903][T13559] netlink: 'syz.5.3494': attribute type 1 has an invalid length. [ 226.190787][T13559] ip6erspan0: entered promiscuous mode [ 226.260813][T13564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=13564 comm=syz.5.3496 [ 226.412196][T13566] hub 9-0:1.0: USB hub found [ 226.434467][T13566] hub 9-0:1.0: 8 ports detected [ 226.685752][T13584] loop2: detected capacity change from 0 to 1024 [ 226.693516][T13584] EXT4-fs: Ignoring removed nobh option [ 226.716401][T13584] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 226.734730][T13584] System zones: 1-12 [ 226.739701][T12497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.744738][T13584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.762578][T13584] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.951192][T13602] netlink: zone id is out of range [ 226.956434][T13602] netlink: zone id is out of range [ 226.965829][T13602] netlink: set zone limit has 8 unknown bytes [ 226.975331][T13601] loop0: detected capacity change from 0 to 164 [ 227.086753][T13615] loop0: detected capacity change from 0 to 512 [ 227.094419][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 227.094435][ T29] audit: type=1400 audit(1743146860.395:9243): avc: denied { remount } for pid=13614 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 227.135933][ T29] audit: type=1400 audit(1743146860.435:9244): avc: denied { setopt } for pid=13614 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.231939][T13625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=13625 comm=syz.0.3518 [ 227.269589][T13627] loop0: detected capacity change from 0 to 1024 [ 227.276582][T13627] EXT4-fs: Ignoring removed nobh option [ 227.307330][T13627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a85ec018, mo2=0003] [ 227.318106][T13627] System zones: 1-12 [ 227.322480][T13627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.338151][T13627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.363514][T13631] loop3: detected capacity change from 0 to 1024 [ 227.370677][T13631] EXT4-fs: Ignoring removed nobh option [ 227.376404][T13631] EXT4-fs: Ignoring removed bh option [ 227.385981][ T8124] ================================================================== [ 227.394087][ T8124] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 227.401479][ T8124] [ 227.403802][ T8124] write to 0xffff8881006316ee of 1 bytes by task 13631 on cpu 1: [ 227.411522][ T8124] set_blocksize+0x218/0x270 [ 227.416124][ T8124] sb_min_blocksize+0xb7/0x140 [ 227.420895][ T8124] ext4_fill_super+0x396/0x3580 [ 227.425759][ T8124] get_tree_bdev_flags+0x2b4/0x330 [ 227.430876][ T8124] get_tree_bdev+0x1f/0x30 [ 227.435294][ T8124] ext4_get_tree+0x1c/0x30 [ 227.439717][ T8124] vfs_get_tree+0x56/0x1e0 [ 227.444134][ T8124] do_new_mount+0x246/0x6b0 [ 227.448643][ T8124] path_mount+0x49b/0xb30 [ 227.452975][ T8124] __se_sys_mount+0x28f/0x2e0 [ 227.457658][ T8124] __x64_sys_mount+0x67/0x80 [ 227.462254][ T8124] x64_sys_call+0xd11/0x2e10 [ 227.466854][ T8124] do_syscall_64+0xc9/0x1c0 [ 227.471369][ T8124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.477271][ T8124] [ 227.479593][ T8124] read to 0xffff8881006316ee of 1 bytes by task 8124 on cpu 0: [ 227.487139][ T8124] do_mpage_readpage+0x53/0xd60 [ 227.492008][ T8124] mpage_readahead+0x1af/0x2d0 [ 227.496792][ T8124] blkdev_readahead+0x1c/0x30 [ 227.501489][ T8124] read_pages+0xa1/0x470 [ 227.505742][ T8124] page_cache_ra_unbounded+0x30d/0x350 [ 227.511213][ T8124] page_cache_sync_ra+0x252/0x680 [ 227.516244][ T8124] filemap_get_pages+0x2ba/0x11b0 [ 227.521292][ T8124] filemap_read+0x231/0x8d0 [ 227.525804][ T8124] blkdev_read_iter+0x227/0x2d0 [ 227.530680][ T8124] vfs_read+0x5e6/0x710 [ 227.534867][ T8124] ksys_read+0xeb/0x1b0 [ 227.539044][ T8124] __x64_sys_read+0x42/0x50 [ 227.543565][ T8124] x64_sys_call+0x2a3b/0x2e10 [ 227.548255][ T8124] do_syscall_64+0xc9/0x1c0 [ 227.552778][ T8124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.558680][ T8124] [ 227.561008][ T8124] value changed: 0x0c -> 0x0a [ 227.565682][ T8124] [ 227.568004][ T8124] Reported by Kernel Concurrency Sanitizer on: [ 227.574155][ T8124] CPU: 0 UID: 0 PID: 8124 Comm: udevd Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) [ 227.585792][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.595858][ T8124] ================================================================== [ 227.626129][T13631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.934101][T11004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.