last executing test programs: 1.938076476s ago: executing program 0 (id=4137): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 1.71846012s ago: executing program 0 (id=4143): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x100dd31, 0x528, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0xffffffc, 0xa, 0x3, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x1, 0x5, 0x3}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x80000001}, 0x18) sendmsg$NFT_BATCH(r2, 0x0, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x790, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x9, 0x4, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3d, &(0x7f0000000200), 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x10006, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0xffffffffffffffff, 0x6, 0xa}, 0x4, r4}}]}, {0x4, 0xa}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.71778302s ago: executing program 3 (id=4144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000008c0), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d6163736563000004000280", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x8000) 1.663939211s ago: executing program 3 (id=4145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, 0x0, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000b40)={0x1, &(0x7f0000001300)=[{}]}) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r15}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 1.625914552s ago: executing program 0 (id=4146): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x20, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) llistxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 1.546584743s ago: executing program 4 (id=4147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x33, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa4265be00f2521c8a200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000a00), 0x3, 0x485, &(0x7f0000001380)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f0000"], 0x48) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x804) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x2, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xd, 0x5}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x25c3}, @TCA_FQ_PIE_TARGET={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}]}, 0x4c}}, 0x20004004) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r7, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r11) 1.499219344s ago: executing program 0 (id=4148): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8410b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x1721, 0x0, 0x3, 0x1, 0x9, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 1.414643036s ago: executing program 0 (id=4149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x33, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa4265be00f2521c8a200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000a00), 0x3, 0x485, &(0x7f0000001380)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f0000"], 0x48) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x804) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x2, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xd, 0x5}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x25c3}, @TCA_FQ_PIE_TARGET={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}]}, 0x4c}}, 0x20004004) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r7, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r11) 1.313137757s ago: executing program 2 (id=4151): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xb9}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x8}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/173, 0xad}], 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001a80)="5c85d5e0e4d6", 0x0, 0x0, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) pwrite64(r0, &(0x7f0000000640)="be08946b4cc4ea119fbbf4c9e57f55e808ff9d98d22f241f4d", 0x19, 0x80000004) syz_io_uring_setup(0x34fc, &(0x7f0000000480)={0x0, 0x645e, 0x1, 0x400006, 0x20000251, 0x0, r5}, &(0x7f0000000400), &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.09667541s ago: executing program 1 (id=4153): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000008c0)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca8703c0e8f94b157f55799d27afa84640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a918d9678f0c14dceff81869199bbb78b3c4254e9930924f83081c3", 0x8c}, {&(0x7f0000000840)="3f67466b434f0f1dab64b413f241dddea2dbdf0911184a79c6d06cb884a50159037441904c0acf6a994e41d7790cac9d46215c54cd9cd1c8c424bda885bc6dd022b01fff74a0f6227fd01fa455f675b59ef6c2", 0x53}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 1.080635631s ago: executing program 1 (id=4154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='rxrpc_tx_ack\x00', r1}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000880)={[{@bh}, {@mblk_io_submit}, {@oldalloc}, {@nombcache}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@data_ordered}, {@grpquota}, {@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@usrjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x80000000000001}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = open(&(0x7f0000000040)='./file0\x00', 0x4100, 0x64) sendmsg$inet6(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="91b85a23b223faf71555878a3941dbfa75c6b5e008a58ca842afb120e774be9b2d04adb50b17fe57449088dba66a98bc4ec570c4b5cc94ae9b24cd70da53201890767c04538ba82b", 0x48}, {&(0x7f0000000680)="733c6d62dc593b76ddc9256fa9bd02f3b6eb0c7cd1a8cf4583906552dfc9204dc96cc7e8b340c41aed9e15f029cd1312daa1b9fdbc9051f9cfc745cd9f738d58f8b2771139b2d7679a70eb95fe513d72844e5f9e123d0b868bb437cdb8e3ddc47c090e6c10be866c36db0b89517ae35a78bf5ee195792dd9152407220a0c41579cccca2cb2f300ef932e99cf2a89e6c55a34df9c1d170517221f417a87eb531dbf030a5ff4a091d4fbb787f433fb987a3ce18f0cac63978bc512ae0a108e5bb49d9911115b8d5417", 0xc8}, {&(0x7f0000000180)}, {&(0x7f0000000780)="1e8f1e11cdfbdf63b1ccc1b990d833d103c3582a17649df26549eb77132a219993387a50f641e5dae6e90938313972cf489c2a397255464697b49f91913bf10864ba60414fe1484ca2444ac1bb61533fcfecf526f1fd8315055dbbeecb745c9a565ac425f64ac3f4d799728d1828195e88e40a71bd468926a0890eb8f5ffbf615424fcd0a286e70706ba1c63ef7172b99c056cc23a270aa06aa49996457f491828611553cc4cfaedeb3bcfa8b107c18572642aade88ab24ffbf1bc8e2211e1bc0122c10adb28c9798f4ee70fe857b126cf9aa711ec43f430e8bd39b46d7842455db53eaa37d3781b653aef314d3fcdf94d882d6a31a0935658eb61de1967", 0xfe}, {&(0x7f0000000280)="a9d73fdde2de55a04177a3f3e6c6cf7697d0b6105a1d14da6fa6", 0x1a}], 0x5}, 0x4044020) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00580e0f01824def4d63b303f1f081f7", @ANYRES16=r7, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0xfffffffe}, 0x80, 0x0}, 0x400405d) close(r2) 805.832716ms ago: executing program 3 (id=4155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c480000", @ANYRES16=0x0, @ANYBLOB="010000000008000000001200000007"], 0x1c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 760.266617ms ago: executing program 1 (id=4156): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb674, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x2000000000000267, &(0x7f00000005c0)=ANY=[@ANYRES8=r4, @ANYRES8=r3], &(0x7f0000000600)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r6, 0xc}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x2ab, 0x1, 0x3fe, 0x3, 0x1fffffe, 0x0, 0x3000003}}) 750.713887ms ago: executing program 3 (id=4157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES8=r1, @ANYRES32, @ANYBLOB="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"], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000008000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = dup2(r1, r2) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x5f5}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) r11 = socket$inet6(0xa, 0x1, 0x0) r12 = socket(0x15, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r15], 0x20}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x30, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000064628000fcffffff18120000", @ANYRES32=r4, @ANYBLOB="000000000000000003dc653000000000b7080000000000007b8af8ff00000000b70800008f8900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008100000182300"/108, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186400000a0000000000000090400000852000000200000085100000feffffff181b0000", @ANYRES32=r6, @ANYBLOB="00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x60, 0xc4, &(0x7f0000000440)=""/196, 0x41100, 0x2, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x6, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[{0x1, 0x1, 0xd}, {0x3, 0x2, 0x2, 0x2}, {0x5, 0x1, 0x3, 0xb}, {0x4, 0x2, 0x10, 0x212620bfb8bd57f8}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0xa438, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 750.069237ms ago: executing program 1 (id=4158): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}) io_setup(0x2004, &(0x7f0000000680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {0x0, 0x2710}}) 724.977497ms ago: executing program 1 (id=4159): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 674.770598ms ago: executing program 4 (id=4160): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 634.642719ms ago: executing program 4 (id=4161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000008c0), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d61637365630000040002800800", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x8000) 611.189349ms ago: executing program 4 (id=4162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) 585.6362ms ago: executing program 1 (id=4163): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{}], 0x1, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000000c0), &(0x7f0000000140)='%pi6 \x00'}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) r6 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r6, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r7 = inotify_init1(0x0) read(r7, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 584.82525ms ago: executing program 4 (id=4173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000008c0), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d61637365630000040002800800", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x8000) 556.24691ms ago: executing program 0 (id=4164): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x794, &(0x7f0000000800)="$eJzs3M9rG2caAOB3JlYcJ96VF/awe8kuJJBAiGzHl+S03suyl0AgsNdgbNkYj61gyVnbDcTurVBI40tbCqW999hrIaR/QG8l0EJvPRRCm7qHtheVkWW5cSRHTuwocZ8HRvq+mW/mfV/9+DwDHgXwh/XP/CGJGIyIaxFRbK5PI+J4o3UiYm1r3Obj25P5kkS9fv37JN8tNuvF1rGS5vOpaOwSf4uIB4WIC28+Hbe6sjo3kWXlxWZ/uDZ/c7i6snpxdn5ipjxTXhgduzJyeWzs8vGDq/Xs/64M3PviPxsbX35au3u672IS4426o1nbwUXasfWaFGJ81/qFwwjWQ0kXY/peQh4AAOwtP88/1jw3K0Qxju11luYEDgAAAF5L9f56t37peiQAAADwikmi1xkAAAAAh2v7/wC27+09rPtgO3n074gYahe/r3EPccSJKETEyc3kidsPkq3d4IWsrUfE/fE2n79u7mje28hOc+BgjshBu5/PP+Pt5p+0Nf9Em/mnb/u3E15Q5/lvJ/6xDvPftS5jfPbh3wsd469Xl9863S5+0oqftIu/j99luLvx9r1O2+ofR5xr+/dn59uS7PX7ECNjw9OzWbuvVivdB7+ef9g+etp4PPlU/CRpRE32qD8ibnZZ/xubP86tddj2aD3i/Jm93/+t+P1P7Jd/Jt5p5pFXca/5nPc3dsU4M//V509HTta24091eP3bv///bdX/UZf1f/NJ/3KXQwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAhjYjBSNJSq52mpVLEqYj4a5xMs0q1dmG6srQwlW+LGIpCOj2blUciorjVT/L+aKO907+0qz8WEX/5emAr6GxWLk1WsqleFw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDLqYgYjCQtRUQaET8V07RU6nVWAAAAwIEb6nUCAAAAwKFz/Q8AAABH3/Ne/ycHnAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwpF27ejVf6puPb0/m/albK0tzlVsXp8rVudL80mRpsrJ4szRTqcxk5dJkZf5Zx0sjYvRKLC0P18rV2nB1ZfXGfGVpoXZjdn5ipnyjXHgpVQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBfg40lSUsRkTbaaVoqRfwpIoaikEzPZuWRiPhzRDwsFvrz/mivkwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODAVVdW5yayrLz4ejfqR6ucrhuRRLwCaXRovN98V/Yak6xFZOVvmyN7lGraDP8ix9lf8nee8bL0uvGPHsxFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0XnVldW4iy8qL1V5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG+l3yURkS/nimcHd289nvxcbDxHxP8/uP7u8kSttjiar/+htb72XnP9pd/teKdtsIHDqwMAAACOtH/tZ/D2dfr2dTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC3qiurcxNZVl48xEas97pKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgefwWAAD//7ZHtSE=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) syz_emit_ethernet(0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="bfffffffffffaaaaaaaaaabb66a800008867c5d0a8000888a800000ea92fe1f6d21cb13f0366526ac25f0062214fced4c4e2c96be9fe3605194242c13d496ca9f0809f60bb9fc05f0b361d53c887b8a16919d806ed852832c4df397cf1a18560d124366863ea209be368a4b840fee7c28b896ddd8f"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5, 0x0, 0x400000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0xfffffffc}}]}}]}, 0x14c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x1010, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00'}, 0x18) r9 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r10, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 553.18176ms ago: executing program 4 (id=4165): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) fallocate(r0, 0x10, 0xcf7, 0x2c03) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000580), 0x1000) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 549.00522ms ago: executing program 3 (id=4166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000"], 0x118}}, 0x0) 466.525462ms ago: executing program 3 (id=4167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x33, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa4265be00f2521c8a200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000a00), 0x3, 0x485, &(0x7f0000001380)="$eJzs3MtvVNUfAPDvnT6AH/BrxScPtYrGxkehBZWFCzWauNDExA0ua1sIUsDQmgghisbg0pC4Ny5N/Atc6caoG03c6sqNISGGjaibMXfuvfNi7jCUKQPM55MMnDP33p7z7bln5jxmGsDQmkr/SSK2RMSvETGRZVtPmMr+u3zpzMLfl84sJFGtvvFnUjvvr0tnFopTi+s255npSkTl4yR2dih35dTpo/PLy0sn8/ye1WPv7Fk5dfqpI8fmDy8dXjo+d+DA/n2zzz4z93T9mg1XjWa89MgdaV13vH9i1/ZX3jz/2sLB82/98FVSxN8WR59MdTv4aLXa5+IGa2tTOhnt9arK+lSGno1ERNpcY7X+PxEj0Wi8iXj5o4FWDlhX1VzJ4bNV4DaWxKBrAAxG8Uafzn+LR8TGsuHCT7fbjO3iC9kEKI37cv7Ijoxms9OxbG60dZ3Kn4qIg2f/+Tx9xPqsQwAAtPgmHf882T7+i9ra/D1N5/0/3xuazPdStkXEnRFxV0TcHVE7996IuO8ay2/fJLly/FO5sKbAepSO/57L97Zax3/1ke7kSJ7bWsuMJYeOLC/tzX8n0zG2Ic3Pdinj25d++bTsWPP4L32k5RdjwbweF0bbNr4W51fnryfmZhc/jNgx2in+pL4TkETE9ojYscYyjjz+5a6yY+3xV5NuP+n51mzP+0zlql9EPJa1/9loi7+QdN+frI7E8tLePcVdcaUffz73epRMqq7e/i1Grj/iVmn7/6/j/V+PfzJp3q9dufYyzv32SemcZmZN93/jiWLH97351dWTsxHjyatZpZufn2tcW+SL89P4p3d37v/bovGb2BkR6U18f0Q8EBEP5m33UEQ8HBG7u8T//YuPvF127Brbv+/S+Bfb2n+y9ZRG+xd3cHYjnBovEsWtUZIYOfrd160/sZHs7fVvfy01nT+Tv/79vrlLXL3Ua213MwAAANx6KhGxJZLKTD1dqczM1D7DvyF9avnEyuoTh068e3wx+47AZIxVipWubD04Ww+dzaf1RX6uLb8vXzf+LDbWP3S4OOjgYchtLun/qT/6vtoM3HT6sI8G3KJGa9uYXVTLvyEE3Nq8/8Pw6tj/k/a/BALcjjr0/02DqAdw43V6//+gkaxO3MjKADdUW/+37QdDxPofDC/9H4ZXc/+35A9DY2VTXP1L8hISVySiclNUoz+JpHMv+LfapyK2DDrAnhPjRWLQr0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD98V8AAAD//1b77XU=") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f0000"], 0x48) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x804) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x2, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xd, 0x5}, {0x6, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x25c3}, @TCA_FQ_PIE_TARGET={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}]}, 0x4c}}, 0x20004004) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r7, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r11) 446.172722ms ago: executing program 2 (id=4168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 417.458492ms ago: executing program 2 (id=4169): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}) io_setup(0x2004, &(0x7f0000000680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {0x0, 0x2710}}) 348.119954ms ago: executing program 2 (id=4170): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8410b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x1721, 0x0, 0x3, 0x1, 0x9, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 285.762935ms ago: executing program 2 (id=4171): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0xe9b, 0x3, 0x9, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$vcsa(&(0x7f0000000580), 0x5, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r7 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x0, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x4c, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x3516, 0x2, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1e00000004000000080000000000000002000000", @ANYRES32=r5, @ANYBLOB="0100"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="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"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0xfffffcce, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x8001) pipe(&(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46ec0800000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 0s ago: executing program 2 (id=4172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000951d9b369551f46e6be3a0764dfbb7457eeab7d7ecfdced20a597ae2bee6e925ade95154ffa9a412cbdc3723d3254693ed722e7b72da8a105d4c47dcf0fd3a83b088ba3012d69bbd"], 0x0, 0x0, 0x63, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8}}, 0x0, 0x0, 0x400, 0x0, 0x13}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) splice(r6, 0x0, r4, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) close_range(r3, 0xffffffffffffffff, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket(0x10, 0x3, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r12 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r12, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}}], 0x3ffffffffffff1b, 0x0, 0x0) kernel console output (not intermixed with test programs): 9068069.157:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f007de929 code=0x7ffc0000 [ 163.656719][ T29] audit: type=1326 audit(1749068069.157:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f007de929 code=0x7ffc0000 [ 163.680475][ T29] audit: type=1326 audit(1749068069.157:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f007de929 code=0x7ffc0000 [ 163.704219][ T29] audit: type=1326 audit(1749068069.157:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.1.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f007de929 code=0x7ffc0000 [ 163.793301][T12796] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.856170][T12796] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.903652][T12796] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.987981][T12891] bond_slave_0: entered promiscuous mode [ 163.993719][T12891] bond_slave_1: entered promiscuous mode [ 164.001463][T12891] macsec1: entered promiscuous mode [ 164.006713][T12891] bond0: entered promiscuous mode [ 164.012252][T12891] macsec1: entered allmulticast mode [ 164.017555][T12891] bond0: entered allmulticast mode [ 164.022787][T12891] bond_slave_0: entered allmulticast mode [ 164.028533][T12891] bond_slave_1: entered allmulticast mode [ 164.040880][T12891] bond0: left allmulticast mode [ 164.045812][T12891] bond_slave_0: left allmulticast mode [ 164.051294][T12891] bond_slave_1: left allmulticast mode [ 164.056819][T12891] bond0: left promiscuous mode [ 164.061984][T12891] bond_slave_0: left promiscuous mode [ 164.067443][T12891] bond_slave_1: left promiscuous mode [ 164.077360][T12796] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.112591][T12895] loop2: detected capacity change from 0 to 512 [ 164.125110][T12895] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.138842][T12895] EXT4-fs (loop2): failed to initialize system zone (-117) [ 164.163159][T12895] EXT4-fs (loop2): mount failed [ 164.198838][T12796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.213766][T12796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.225077][T12796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.234286][T12796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.309717][T12796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.333522][T12796] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.344442][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.351604][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.372464][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.379620][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.486927][T12796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.521300][T12933] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 164.530884][T12930] bond_slave_0: entered promiscuous mode [ 164.536603][T12930] bond_slave_1: entered promiscuous mode [ 164.543082][T12930] macsec1: entered promiscuous mode [ 164.548319][T12930] bond0: entered promiscuous mode [ 164.553615][T12930] macsec1: entered allmulticast mode [ 164.558897][T12930] bond0: entered allmulticast mode [ 164.564039][T12930] bond_slave_0: entered allmulticast mode [ 164.569800][T12930] bond_slave_1: entered allmulticast mode [ 164.577403][T12930] bond0: left allmulticast mode [ 164.582352][T12930] bond_slave_0: left allmulticast mode [ 164.587847][T12930] bond_slave_1: left allmulticast mode [ 164.593348][T12930] bond0: left promiscuous mode [ 164.598327][T12930] bond_slave_0: left promiscuous mode [ 164.603739][T12930] bond_slave_1: left promiscuous mode [ 164.675118][T12944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3172'. [ 164.677568][T12796] veth0_vlan: entered promiscuous mode [ 164.698258][T12796] veth1_vlan: entered promiscuous mode [ 164.730946][T12796] veth0_macvtap: entered promiscuous mode [ 164.758433][T12796] veth1_macvtap: entered promiscuous mode [ 164.774802][T12796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.792800][T12796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.806543][T12796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.815422][T12796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.824238][T12796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.832934][T12796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.887433][T12961] FAULT_INJECTION: forcing a failure. [ 164.887433][T12961] name failslab, interval 1, probability 0, space 0, times 0 [ 164.900359][T12961] CPU: 1 UID: 0 PID: 12961 Comm: syz.4.3177 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 164.900398][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.900479][T12961] Call Trace: [ 164.900486][T12961] [ 164.900494][T12961] __dump_stack+0x1d/0x30 [ 164.900518][T12961] dump_stack_lvl+0xe8/0x140 [ 164.900543][T12961] dump_stack+0x15/0x1b [ 164.900564][T12961] should_fail_ex+0x265/0x280 [ 164.900591][T12961] should_failslab+0x8c/0xb0 [ 164.900671][T12961] kmem_cache_alloc_node_noprof+0x57/0x320 [ 164.900703][T12961] ? __alloc_skb+0x101/0x320 [ 164.900792][T12961] __alloc_skb+0x101/0x320 [ 164.900817][T12961] ? audit_log_start+0x365/0x6c0 [ 164.900852][T12961] audit_log_start+0x380/0x6c0 [ 164.900897][T12961] audit_seccomp+0x48/0x100 [ 164.900934][T12961] ? __seccomp_filter+0x68c/0x10d0 [ 164.900957][T12961] __seccomp_filter+0x69d/0x10d0 [ 164.901007][T12961] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.901034][T12961] ? vfs_write+0x75e/0x8e0 [ 164.901072][T12961] __secure_computing+0x82/0x150 [ 164.901099][T12961] syscall_trace_enter+0xcf/0x1e0 [ 164.901129][T12961] do_syscall_64+0xac/0x200 [ 164.901211][T12961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.901235][T12961] ? clear_bhb_loop+0x40/0x90 [ 164.901306][T12961] ? clear_bhb_loop+0x40/0x90 [ 164.901327][T12961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.901351][T12961] RIP: 0033:0x7f0f1b97e929 [ 164.901371][T12961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.901391][T12961] RSP: 002b:00007f0f19fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.901411][T12961] RAX: ffffffffffffffda RBX: 00007f0f1bba5fa0 RCX: 00007f0f1b97e929 [ 164.901437][T12961] RDX: 0000200000000000 RSI: 000000000000560a RDI: 0000000000000003 [ 164.901450][T12961] RBP: 00007f0f19fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 164.901464][T12961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.901477][T12961] R13: 0000000000000000 R14: 00007f0f1bba5fa0 R15: 00007ffc9b815948 [ 164.901501][T12961] [ 165.220835][T12975] bond_slave_0: entered promiscuous mode [ 165.227961][T12975] bond_slave_1: entered promiscuous mode [ 165.242251][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'. [ 165.251586][T12975] macsec1: entered promiscuous mode [ 165.256841][T12975] bond0: entered promiscuous mode [ 165.262294][T12975] macsec1: entered allmulticast mode [ 165.267663][T12975] bond0: entered allmulticast mode [ 165.272862][T12975] bond_slave_0: entered allmulticast mode [ 165.278690][T12975] bond_slave_1: entered allmulticast mode [ 165.295848][T12975] bond0: left allmulticast mode [ 165.300769][T12975] bond_slave_0: left allmulticast mode [ 165.306283][T12975] bond_slave_1: left allmulticast mode [ 165.311809][T12975] bond0: left promiscuous mode [ 165.316981][T12975] bond_slave_0: left promiscuous mode [ 165.322492][T12975] bond_slave_1: left promiscuous mode [ 165.411656][T12994] loop4: detected capacity change from 0 to 512 [ 165.419392][T12997] loop2: detected capacity change from 0 to 256 [ 165.425042][T12994] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.445363][T12994] EXT4-fs (loop4): failed to initialize system zone (-117) [ 165.466395][T12994] EXT4-fs (loop4): mount failed [ 165.494035][T13010] FAULT_INJECTION: forcing a failure. [ 165.494035][T13010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.507169][T13010] CPU: 1 UID: 0 PID: 13010 Comm: syz.3.3193 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 165.507201][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.507281][T13010] Call Trace: [ 165.507289][T13010] [ 165.507298][T13010] __dump_stack+0x1d/0x30 [ 165.507320][T13010] dump_stack_lvl+0xe8/0x140 [ 165.507344][T13010] dump_stack+0x15/0x1b [ 165.507363][T13010] should_fail_ex+0x265/0x280 [ 165.507463][T13010] should_fail+0xb/0x20 [ 165.507484][T13010] should_fail_usercopy+0x1a/0x20 [ 165.507512][T13010] _copy_from_user+0x1c/0xb0 [ 165.507541][T13010] __sys_connect+0xd0/0x2b0 [ 165.507589][T13010] __x64_sys_connect+0x3f/0x50 [ 165.507622][T13010] x64_sys_call+0x1daa/0x2fb0 [ 165.507649][T13010] do_syscall_64+0xd2/0x200 [ 165.507694][T13010] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 165.507764][T13010] ? clear_bhb_loop+0x40/0x90 [ 165.507786][T13010] ? clear_bhb_loop+0x40/0x90 [ 165.507838][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.507865][T13010] RIP: 0033:0x7f38a38fe929 [ 165.507920][T13010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.507937][T13010] RSP: 002b:00007f38a1f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 165.507955][T13010] RAX: ffffffffffffffda RBX: 00007f38a3b25fa0 RCX: 00007f38a38fe929 [ 165.507967][T13010] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000004 [ 165.507982][T13010] RBP: 00007f38a1f67090 R08: 0000000000000000 R09: 0000000000000000 [ 165.507998][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.508013][T13010] R13: 0000000000000000 R14: 00007f38a3b25fa0 R15: 00007ffca0abe478 [ 165.508053][T13010] [ 165.698887][T12982] chnl_net:caif_netlink_parms(): no params data found [ 165.768261][T13025] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 165.781755][T12982] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.789891][T12982] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.797581][T12982] bridge_slave_0: entered allmulticast mode [ 165.804470][T12982] bridge_slave_0: entered promiscuous mode [ 165.811886][T12982] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.819098][T12982] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.826356][T12982] bridge_slave_1: entered allmulticast mode [ 165.833673][T12982] bridge_slave_1: entered promiscuous mode [ 165.852831][T12982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.863392][T12982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.884648][T12982] team0: Port device team_slave_0 added [ 165.891589][T12982] team0: Port device team_slave_1 added [ 165.910933][T12982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.918264][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.944513][T12982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.956311][T12982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.963430][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.989728][T12982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.019249][T12982] hsr_slave_0: entered promiscuous mode [ 166.025393][T12982] hsr_slave_1: entered promiscuous mode [ 166.031454][T12982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.039020][T12982] Cannot create hsr debugfs directory [ 166.094344][T12982] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.152703][T12982] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.182700][T13030] bond_slave_0: entered promiscuous mode [ 166.188446][T13030] bond_slave_1: entered promiscuous mode [ 166.194523][T13030] macsec1: entered promiscuous mode [ 166.199926][T13030] bond0: entered promiscuous mode [ 166.205403][T13030] macsec1: entered allmulticast mode [ 166.210694][T13030] bond0: entered allmulticast mode [ 166.215866][T13030] bond_slave_0: entered allmulticast mode [ 166.221618][T13030] bond_slave_1: entered allmulticast mode [ 166.232259][T13030] bond0: left allmulticast mode [ 166.237118][T13030] bond_slave_0: left allmulticast mode [ 166.242718][T13030] bond_slave_1: left allmulticast mode [ 166.248280][T13030] bond0: left promiscuous mode [ 166.253353][T13030] bond_slave_0: left promiscuous mode [ 166.258807][T13030] bond_slave_1: left promiscuous mode [ 166.273590][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3200'. [ 166.286695][T12982] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.335489][T12982] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.441354][T12982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.460036][T12982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.474691][T12982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.484811][T12982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.518440][T13051] loop0: detected capacity change from 0 to 512 [ 166.525864][T13051] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.548552][T12982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.555590][T13051] EXT4-fs (loop0): failed to initialize system zone (-117) [ 166.560533][T12982] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.569965][T13051] EXT4-fs (loop0): mount failed [ 166.577677][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.584764][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.611977][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3210'. [ 166.622644][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.629729][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.685067][T13060] bond_slave_0: entered promiscuous mode [ 166.690748][T13060] bond_slave_1: entered promiscuous mode [ 166.696670][T13060] macsec1: entered promiscuous mode [ 166.701988][T13060] bond0: entered promiscuous mode [ 166.707312][T13060] macsec1: entered allmulticast mode [ 166.712683][T13060] bond0: entered allmulticast mode [ 166.717920][T13060] bond_slave_0: entered allmulticast mode [ 166.723686][T13060] bond_slave_1: entered allmulticast mode [ 166.733337][T13060] bond0: left allmulticast mode [ 166.738248][T13060] bond_slave_0: left allmulticast mode [ 166.743934][T13060] bond_slave_1: left allmulticast mode [ 166.749560][T13060] bond0: left promiscuous mode [ 166.754743][T13060] bond_slave_0: left promiscuous mode [ 166.760148][T13060] bond_slave_1: left promiscuous mode [ 166.805240][T12982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.903293][T12982] veth0_vlan: entered promiscuous mode [ 166.913971][T13090] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 166.923489][T12982] veth1_vlan: entered promiscuous mode [ 166.948494][T12982] veth0_macvtap: entered promiscuous mode [ 166.958513][T12982] veth1_macvtap: entered promiscuous mode [ 166.972189][T12982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.993421][T12982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.005167][T12982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.013949][T12982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.022750][T12982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.031565][T12982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.049548][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3222'. [ 167.351672][T13123] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 167.354666][T13125] 9pnet_fd: Insufficient options for proto=fd [ 167.384095][T13104] chnl_net:caif_netlink_parms(): no params data found [ 167.394136][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3233'. [ 167.455919][T13104] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.463085][T13104] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.470473][T13104] bridge_slave_0: entered allmulticast mode [ 167.477451][T13104] bridge_slave_0: entered promiscuous mode [ 167.484994][T13104] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.492288][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.499758][T13104] bridge_slave_1: entered allmulticast mode [ 167.506550][T13104] bridge_slave_1: entered promiscuous mode [ 167.538765][T13104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.549603][T13104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.581720][T13104] team0: Port device team_slave_0 added [ 167.588655][T13104] team0: Port device team_slave_1 added [ 167.609384][T13104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.616480][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.642615][T13104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.655040][T13104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.662165][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.688227][T13104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.722851][T13155] loop2: detected capacity change from 0 to 512 [ 167.729704][T13155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.742332][T13155] EXT4-fs (loop2): failed to initialize system zone (-117) [ 167.749651][T13155] EXT4-fs (loop2): mount failed [ 167.761241][T13104] hsr_slave_0: entered promiscuous mode [ 167.767432][T13104] hsr_slave_1: entered promiscuous mode [ 167.776495][T13104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.784252][T13104] Cannot create hsr debugfs directory [ 167.799680][T13158] 9pnet_fd: Insufficient options for proto=fd [ 167.865040][T13104] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.913575][T13104] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.963401][T13104] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.014436][T13104] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.077342][T13104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.086312][T13104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.095467][T13104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.104377][T13104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.130695][T13104] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.137812][T13104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.145234][T13104] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.152352][T13104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.192772][T13104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.208541][ T113] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.211319][T13178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3252'. [ 168.225023][ T113] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.242548][T13104] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.261984][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.269131][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.282143][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.289386][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.352554][T13183] 9pnet_fd: Insufficient options for proto=fd [ 168.393327][T13190] FAULT_INJECTION: forcing a failure. [ 168.393327][T13190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.406548][T13190] CPU: 0 UID: 0 PID: 13190 Comm: syz.4.3256 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 168.406640][T13190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.406650][T13190] Call Trace: [ 168.406655][T13190] [ 168.406661][T13190] __dump_stack+0x1d/0x30 [ 168.406679][T13190] dump_stack_lvl+0xe8/0x140 [ 168.406695][T13190] dump_stack+0x15/0x1b [ 168.406777][T13190] should_fail_ex+0x265/0x280 [ 168.406799][T13190] should_fail+0xb/0x20 [ 168.406817][T13190] should_fail_usercopy+0x1a/0x20 [ 168.406841][T13190] _copy_to_user+0x20/0xa0 [ 168.406923][T13190] simple_read_from_buffer+0xb5/0x130 [ 168.407006][T13190] proc_fail_nth_read+0x100/0x140 [ 168.407083][T13190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.407105][T13190] vfs_read+0x19d/0x6f0 [ 168.407120][T13190] ? __rcu_read_unlock+0x4f/0x70 [ 168.407138][T13190] ? __fget_files+0x184/0x1c0 [ 168.407158][T13190] ksys_read+0xda/0x1a0 [ 168.407217][T13190] __x64_sys_read+0x40/0x50 [ 168.407234][T13190] x64_sys_call+0x2d77/0x2fb0 [ 168.407251][T13190] do_syscall_64+0xd2/0x200 [ 168.407294][T13190] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 168.407319][T13190] ? clear_bhb_loop+0x40/0x90 [ 168.407353][T13190] ? clear_bhb_loop+0x40/0x90 [ 168.407372][T13190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.407395][T13190] RIP: 0033:0x7f0f1b97d33c [ 168.407449][T13190] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.407469][T13190] RSP: 002b:00007f0f19fe7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.407485][T13190] RAX: ffffffffffffffda RBX: 00007f0f1bba5fa0 RCX: 00007f0f1b97d33c [ 168.407497][T13190] RDX: 000000000000000f RSI: 00007f0f19fe70a0 RDI: 0000000000000007 [ 168.407508][T13190] RBP: 00007f0f19fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.407519][T13190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.407600][T13190] R13: 0000000000000000 R14: 00007f0f1bba5fa0 R15: 00007ffc9b815948 [ 168.407616][T13190] [ 168.628602][T13104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.737785][T13205] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 168.747212][T13201] bond_slave_0: entered promiscuous mode [ 168.752909][T13201] bond_slave_1: entered promiscuous mode [ 168.768993][T13201] macsec1: entered promiscuous mode [ 168.774340][T13201] bond0: entered promiscuous mode [ 168.779634][T13201] macsec1: entered allmulticast mode [ 168.784976][T13201] bond0: entered allmulticast mode [ 168.790098][T13201] bond_slave_0: entered allmulticast mode [ 168.795901][T13201] bond_slave_1: entered allmulticast mode [ 168.810136][T13201] bond0: left allmulticast mode [ 168.815063][T13201] bond_slave_0: left allmulticast mode [ 168.820549][T13201] bond_slave_1: left allmulticast mode [ 168.826189][T13201] bond0: left promiscuous mode [ 168.831112][T13201] bond_slave_0: left promiscuous mode [ 168.836548][T13201] bond_slave_1: left promiscuous mode [ 168.888444][T13213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=13213 comm=syz.0.3265 [ 168.947989][T13104] veth0_vlan: entered promiscuous mode [ 168.966743][T13104] veth1_vlan: entered promiscuous mode [ 168.996275][T13224] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 169.004833][T13104] veth0_macvtap: entered promiscuous mode [ 169.032362][T13104] veth1_macvtap: entered promiscuous mode [ 169.049978][T13104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.063566][T13104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.073470][T13104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.082500][T13104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.091218][T13104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.100100][T13104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.142862][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 169.142877][ T29] audit: type=1400 audit(1749068074.787:5281): avc: denied { write } for pid=13233 comm="syz.1.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.194001][T13234] team0 (unregistering): Port device team_slave_0 removed [ 169.203732][T13234] team0 (unregistering): Port device team_slave_1 removed [ 169.221935][T13239] netlink: 'syz.2.3276': attribute type 3 has an invalid length. [ 169.233324][T13242] block device autoloading is deprecated and will be removed. [ 169.262234][ T29] audit: type=1400 audit(1749068074.917:5282): avc: denied { tracepoint } for pid=13243 comm="syz.2.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.282193][T13244] proc: Bad value for 'gid' [ 169.290480][ T29] audit: type=1400 audit(1749068074.937:5283): avc: denied { remount } for pid=13243 comm="syz.2.3277" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 169.310362][ T29] audit: type=1400 audit(1749068074.937:5284): avc: denied { write } for pid=13243 comm="syz.2.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.329995][ T29] audit: type=1400 audit(1749068074.937:5285): avc: denied { block_suspend } for pid=13243 comm="syz.2.3277" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.367357][T13248] FAULT_INJECTION: forcing a failure. [ 169.367357][T13248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.380540][T13248] CPU: 0 UID: 0 PID: 13248 Comm: syz.3.3279 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 169.380641][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.380660][T13248] Call Trace: [ 169.380665][T13248] [ 169.380671][T13248] __dump_stack+0x1d/0x30 [ 169.380695][T13248] dump_stack_lvl+0xe8/0x140 [ 169.380727][T13248] dump_stack+0x15/0x1b [ 169.380820][T13248] should_fail_ex+0x265/0x280 [ 169.380836][T13248] should_fail+0xb/0x20 [ 169.380849][T13248] should_fail_usercopy+0x1a/0x20 [ 169.380919][T13248] _copy_to_user+0x20/0xa0 [ 169.380982][T13248] scsi_ioctl+0xf13/0x14d0 [ 169.381091][T13248] ? do_vfs_ioctl+0x9df/0x11d0 [ 169.381163][T13248] sg_ioctl+0x12fb/0x1360 [ 169.381219][T13248] ? __pfx_sg_ioctl+0x10/0x10 [ 169.381243][T13248] __se_sys_ioctl+0xcb/0x140 [ 169.381269][T13248] __x64_sys_ioctl+0x43/0x50 [ 169.381310][T13248] x64_sys_call+0x19a8/0x2fb0 [ 169.381330][T13248] do_syscall_64+0xd2/0x200 [ 169.381379][T13248] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 169.381463][T13248] ? clear_bhb_loop+0x40/0x90 [ 169.381488][T13248] ? clear_bhb_loop+0x40/0x90 [ 169.381573][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.381594][T13248] RIP: 0033:0x7f9997fbe929 [ 169.381607][T13248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.381640][T13248] RSP: 002b:00007f9996627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.381667][T13248] RAX: ffffffffffffffda RBX: 00007f99981e5fa0 RCX: 00007f9997fbe929 [ 169.381682][T13248] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 169.381696][T13248] RBP: 00007f9996627090 R08: 0000000000000000 R09: 0000000000000000 [ 169.381709][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.381722][T13248] R13: 0000000000000000 R14: 00007f99981e5fa0 R15: 00007fff602f9588 [ 169.381743][T13248] [ 169.740059][ T29] audit: type=1400 audit(1749068075.387:5286): avc: denied { unmount } for pid=12640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 169.770418][T13253] bond_slave_0: entered promiscuous mode [ 169.776100][T13253] bond_slave_1: entered promiscuous mode [ 169.781978][T13253] macsec1: entered promiscuous mode [ 169.787237][T13253] bond0: entered promiscuous mode [ 169.792824][T13253] macsec1: entered allmulticast mode [ 169.798131][T13253] bond0: entered allmulticast mode [ 169.803560][T13253] bond_slave_0: entered allmulticast mode [ 169.809364][T13253] bond_slave_1: entered allmulticast mode [ 169.817422][T13253] bond0: left allmulticast mode [ 169.822384][T13253] bond_slave_0: left allmulticast mode [ 169.827945][T13253] bond_slave_1: left allmulticast mode [ 169.833434][T13253] bond0: left promiscuous mode [ 169.838365][T13253] bond_slave_0: left promiscuous mode [ 169.843777][T13253] bond_slave_1: left promiscuous mode [ 169.919974][T13257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3283'. [ 169.929279][T13257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3283'. [ 170.036979][T13273] netlink: 'syz.0.3291': attribute type 3 has an invalid length. [ 170.049774][T13277] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 170.129079][T13284] bond_slave_0: entered promiscuous mode [ 170.134927][T13284] bond_slave_1: entered promiscuous mode [ 170.142145][T13284] macsec1: entered promiscuous mode [ 170.147467][T13284] bond0: entered promiscuous mode [ 170.153078][T13284] macsec1: entered allmulticast mode [ 170.158432][T13284] bond0: entered allmulticast mode [ 170.163663][T13284] bond_slave_0: entered allmulticast mode [ 170.169373][T13284] bond_slave_1: entered allmulticast mode [ 170.176922][T13284] bond0: left allmulticast mode [ 170.181827][T13284] bond_slave_0: left allmulticast mode [ 170.187348][T13284] bond_slave_1: left allmulticast mode [ 170.192936][T13284] bond0: left promiscuous mode [ 170.198032][T13284] bond_slave_0: left promiscuous mode [ 170.203424][T13284] bond_slave_1: left promiscuous mode [ 170.335858][T13290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3299'. [ 170.344903][T13290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3299'. [ 170.371220][T13292] loop0: detected capacity change from 0 to 512 [ 170.379392][T13292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.390290][T13292] EXT4-fs (loop0): failed to initialize system zone (-117) [ 170.397623][T13292] EXT4-fs (loop0): mount failed [ 170.469657][T13299] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 170.901010][T13303] FAULT_INJECTION: forcing a failure. [ 170.901010][T13303] name failslab, interval 1, probability 0, space 0, times 0 [ 170.913857][T13303] CPU: 1 UID: 0 PID: 13303 Comm: syz.4.3305 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 170.913960][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.913971][T13303] Call Trace: [ 170.913977][T13303] [ 170.913984][T13303] __dump_stack+0x1d/0x30 [ 170.914003][T13303] dump_stack_lvl+0xe8/0x140 [ 170.914021][T13303] dump_stack+0x15/0x1b [ 170.914035][T13303] should_fail_ex+0x265/0x280 [ 170.914102][T13303] should_failslab+0x8c/0xb0 [ 170.914126][T13303] kmem_cache_alloc_node_noprof+0x57/0x320 [ 170.914159][T13303] ? __alloc_skb+0x101/0x320 [ 170.914183][T13303] __alloc_skb+0x101/0x320 [ 170.914213][T13303] netlink_alloc_large_skb+0xba/0xf0 [ 170.914265][T13303] netlink_sendmsg+0x3cf/0x6b0 [ 170.914353][T13303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.914405][T13303] __sock_sendmsg+0x145/0x180 [ 170.914429][T13303] ____sys_sendmsg+0x31e/0x4e0 [ 170.914468][T13303] ___sys_sendmsg+0x17b/0x1d0 [ 170.914560][T13303] __x64_sys_sendmsg+0xd4/0x160 [ 170.914666][T13303] x64_sys_call+0x2999/0x2fb0 [ 170.914691][T13303] do_syscall_64+0xd2/0x200 [ 170.914724][T13303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.914816][T13303] ? clear_bhb_loop+0x40/0x90 [ 170.914842][T13303] ? clear_bhb_loop+0x40/0x90 [ 170.914871][T13303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.914895][T13303] RIP: 0033:0x7f0f1b97e929 [ 170.914926][T13303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.914945][T13303] RSP: 002b:00007f0f19fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.915037][T13303] RAX: ffffffffffffffda RBX: 00007f0f1bba5fa0 RCX: 00007f0f1b97e929 [ 170.915049][T13303] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 170.915091][T13303] RBP: 00007f0f19fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.915106][T13303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.915121][T13303] R13: 0000000000000000 R14: 00007f0f1bba5fa0 R15: 00007ffc9b815948 [ 170.915145][T13303] [ 171.130421][ T36] page_pool_release_retry() stalled pool shutdown: id 122, 1 inflight 61 sec [ 171.178290][T13309] loop4: detected capacity change from 0 to 512 [ 171.185199][T13309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.197014][T13309] EXT4-fs (loop4): failed to initialize system zone (-117) [ 171.204795][T13309] EXT4-fs (loop4): mount failed [ 171.231199][T13314] 9pnet_fd: Insufficient options for proto=fd [ 171.239416][T13316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3310'. [ 171.256781][ T29] audit: type=1400 audit(1749068076.907:5287): avc: denied { ioctl } for pid=13317 comm="syz.2.3312" path="socket:[38306]" dev="sockfs" ino=38306 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.290890][ T29] audit: type=1400 audit(1749068076.937:5288): avc: denied { write } for pid=13317 comm="syz.2.3312" name="pfkey" dev="proc" ino=4026533706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 171.317323][T13318] team0 (unregistering): Port device team_slave_0 removed [ 171.327243][T13318] team0 (unregistering): Port device team_slave_1 removed [ 171.340015][T13322] bond_slave_0: entered promiscuous mode [ 171.345712][T13322] bond_slave_1: entered promiscuous mode [ 171.353385][T13324] loop3: detected capacity change from 0 to 512 [ 171.360248][T13324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.362041][T13322] macsec1: entered promiscuous mode [ 171.371173][T13324] EXT4-fs (loop3): failed to initialize system zone (-117) [ 171.375335][T13322] bond0: entered promiscuous mode [ 171.384457][T13324] EXT4-fs (loop3): mount failed [ 171.387905][T13322] macsec1: entered allmulticast mode [ 171.397957][T13322] bond0: entered allmulticast mode [ 171.403184][T13322] bond_slave_0: entered allmulticast mode [ 171.408954][T13322] bond_slave_1: entered allmulticast mode [ 171.416951][T13322] bond0: left allmulticast mode [ 171.421917][T13322] bond_slave_0: left allmulticast mode [ 171.427389][T13322] bond_slave_1: left allmulticast mode [ 171.432902][T13322] bond0: left promiscuous mode [ 171.437996][T13322] bond_slave_0: left promiscuous mode [ 171.443397][T13322] bond_slave_1: left promiscuous mode [ 171.492803][ T29] audit: type=1326 audit(1749068077.147:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654714e929 code=0x7ffc0000 [ 171.516409][ T29] audit: type=1326 audit(1749068077.147:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13326 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654714e929 code=0x7ffc0000 [ 171.586394][T13337] loop0: detected capacity change from 0 to 1024 [ 171.604194][T13337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.650279][T12796] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 81:freeing already freed block (bit 5); block bitmap corrupt. [ 171.665825][T12796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.700145][T13346] 9pnet_fd: Insufficient options for proto=fd [ 171.720504][T13348] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 171.857474][T13364] bond_slave_0: entered promiscuous mode [ 171.863171][T13364] bond_slave_1: entered promiscuous mode [ 171.869033][T13364] macsec1: entered promiscuous mode [ 171.874346][T13364] bond0: entered promiscuous mode [ 171.879767][T13364] macsec1: entered allmulticast mode [ 171.885315][T13364] bond0: entered allmulticast mode [ 171.890445][T13364] bond_slave_0: entered allmulticast mode [ 171.896432][T13364] bond_slave_1: entered allmulticast mode [ 171.905703][T13364] bond0: left allmulticast mode [ 171.910738][T13364] bond_slave_0: left allmulticast mode [ 171.916353][T13364] bond_slave_1: left allmulticast mode [ 171.921860][T13364] bond0: left promiscuous mode [ 171.926884][T13364] bond_slave_0: left promiscuous mode [ 171.932326][T13364] bond_slave_1: left promiscuous mode [ 171.987516][T13366] FAULT_INJECTION: forcing a failure. [ 171.987516][T13366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.000629][T13366] CPU: 0 UID: 0 PID: 13366 Comm: syz.0.3331 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 172.000754][T13366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.000766][T13366] Call Trace: [ 172.000771][T13366] [ 172.000777][T13366] __dump_stack+0x1d/0x30 [ 172.000794][T13366] dump_stack_lvl+0xe8/0x140 [ 172.000811][T13366] dump_stack+0x15/0x1b [ 172.000903][T13366] should_fail_ex+0x265/0x280 [ 172.000949][T13366] should_fail+0xb/0x20 [ 172.000963][T13366] should_fail_usercopy+0x1a/0x20 [ 172.000982][T13366] _copy_to_user+0x20/0xa0 [ 172.001004][T13366] simple_read_from_buffer+0xb5/0x130 [ 172.001094][T13366] proc_fail_nth_read+0x100/0x140 [ 172.001114][T13366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.001133][T13366] vfs_read+0x19d/0x6f0 [ 172.001154][T13366] ksys_read+0xda/0x1a0 [ 172.001180][T13366] __x64_sys_read+0x40/0x50 [ 172.001198][T13366] x64_sys_call+0x2d77/0x2fb0 [ 172.001217][T13366] do_syscall_64+0xd2/0x200 [ 172.001261][T13366] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.001349][T13366] ? clear_bhb_loop+0x40/0x90 [ 172.001375][T13366] ? clear_bhb_loop+0x40/0x90 [ 172.001407][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.001433][T13366] RIP: 0033:0x7f6cfeddd33c [ 172.001449][T13366] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.001557][T13366] RSP: 002b:00007f6cfd447030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.001581][T13366] RAX: ffffffffffffffda RBX: 00007f6cff005fa0 RCX: 00007f6cfeddd33c [ 172.001597][T13366] RDX: 000000000000000f RSI: 00007f6cfd4470a0 RDI: 0000000000000004 [ 172.001613][T13366] RBP: 00007f6cfd447090 R08: 0000000000000000 R09: 0000000000000000 [ 172.001629][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.001660][T13366] R13: 0000000000000000 R14: 00007f6cff005fa0 R15: 00007ffc3b618f18 [ 172.001683][T13366] [ 172.222575][T13368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=13368 comm=syz.3.3332 [ 172.240231][T13370] 9pnet_fd: Insufficient options for proto=fd [ 172.242404][T13372] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 172.293221][T13380] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 172.441522][ T1031] page_pool_release_retry() stalled pool shutdown: id 125, 1 inflight 60 sec [ 172.458821][T13397] 9pnet_fd: Insufficient options for proto=fd [ 172.466628][T13399] __nla_validate_parse: 1 callbacks suppressed [ 172.466644][T13399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3346'. [ 172.495924][T13401] loop2: detected capacity change from 0 to 512 [ 172.500452][T13403] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 172.503220][T13401] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.528281][T13401] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 172.542412][T13401] EXT4-fs (loop2): 1 truncate cleaned up [ 172.550414][T13401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.634150][T12640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.748055][T13419] loop2: detected capacity change from 0 to 512 [ 172.755037][T13419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.767888][T13419] EXT4-fs (loop2): failed to initialize system zone (-117) [ 172.775406][T13419] EXT4-fs (loop2): mount failed [ 173.158857][T13429] 9pnet_fd: Insufficient options for proto=fd [ 173.182331][T13432] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 173.205260][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3360'. [ 173.233543][T13436] loop4: detected capacity change from 0 to 512 [ 173.240927][T13436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.263736][T13436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.276563][T13436] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.599039][T13453] bond_slave_0: entered promiscuous mode [ 173.604733][T13453] bond_slave_1: entered promiscuous mode [ 173.610437][T13453] macsec1: entered promiscuous mode [ 173.615771][T13453] bond0: entered promiscuous mode [ 173.621141][T13453] macsec1: entered allmulticast mode [ 173.626533][T13453] bond0: entered allmulticast mode [ 173.631861][T13453] bond_slave_0: entered allmulticast mode [ 173.637634][T13453] bond_slave_1: entered allmulticast mode [ 173.656614][T13453] bond0: left allmulticast mode [ 173.661549][T13453] bond_slave_0: left allmulticast mode [ 173.667032][T13453] bond_slave_1: left allmulticast mode [ 173.672625][T13453] bond0: left promiscuous mode [ 173.677622][T13453] bond_slave_0: left promiscuous mode [ 173.683119][T13453] bond_slave_1: left promiscuous mode [ 173.691522][T13455] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 173.730917][T13459] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 173.756175][T13461] 9pnet_fd: Insufficient options for proto=fd [ 173.765210][T13463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3372'. [ 173.830505][T11554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.979075][T13480] loop3: detected capacity change from 0 to 512 [ 173.985995][T13480] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.996735][T13480] EXT4-fs (loop3): failed to initialize system zone (-117) [ 174.004113][T13480] EXT4-fs (loop3): mount failed [ 174.227504][T13487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3382'. [ 174.252007][T13489] 9pnet_fd: Insufficient options for proto=fd [ 174.277363][T13491] bond_slave_0: entered promiscuous mode [ 174.283092][T13491] bond_slave_1: entered promiscuous mode [ 174.292293][T13491] macsec1: entered promiscuous mode [ 174.297502][T13491] bond0: entered promiscuous mode [ 174.302872][T13491] macsec1: entered allmulticast mode [ 174.308206][T13491] bond0: entered allmulticast mode [ 174.313466][T13491] bond_slave_0: entered allmulticast mode [ 174.319326][T13491] bond_slave_1: entered allmulticast mode [ 174.327045][T13491] bond0: left allmulticast mode [ 174.331979][T13491] bond_slave_0: left allmulticast mode [ 174.337466][T13491] bond_slave_1: left allmulticast mode [ 174.342985][T13491] bond0: left promiscuous mode [ 174.347985][T13491] bond_slave_0: left promiscuous mode [ 174.353366][T13491] bond_slave_1: left promiscuous mode [ 174.409949][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3385'. [ 174.482227][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 174.482246][ T29] audit: type=1326 audit(1749068080.137:5430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.0.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfedde929 code=0x7ffc0000 [ 174.514583][ T29] audit: type=1326 audit(1749068080.137:5431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.0.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfedde929 code=0x7ffc0000 [ 174.538280][ T29] audit: type=1326 audit(1749068080.137:5432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.0.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6cfedde929 code=0x7ffc0000 [ 174.562021][ T29] audit: type=1326 audit(1749068080.137:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.0.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfedde929 code=0x7ffc0000 [ 174.585532][ T29] audit: type=1326 audit(1749068080.137:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.0.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6cfedde929 code=0x7ffc0000 [ 174.609036][ T29] audit: type=1326 audit(1749068080.137:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.0.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfedde929 code=0x7ffc0000 [ 174.632667][ T29] audit: type=1326 audit(1749068080.137:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.0.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f6cfedde929 code=0x7ffc0000 [ 174.656128][ T29] audit: type=1326 audit(1749068080.137:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.0.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfedde929 code=0x7ffc0000 [ 174.679714][ T29] audit: type=1326 audit(1749068080.137:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.0.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6cfeddd3df code=0x7ffc0000 [ 174.703058][ T29] audit: type=1326 audit(1749068080.137:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13498 comm="syz.0.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfedde929 code=0x7ffc0000 [ 174.790217][T13516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3394'. [ 174.834035][T13521] 9pnet_fd: Insufficient options for proto=fd [ 174.846598][T13520] bond_slave_0: entered promiscuous mode [ 174.852382][T13520] bond_slave_1: entered promiscuous mode [ 174.859388][T13520] macsec1: entered promiscuous mode [ 174.864758][T13520] bond0: entered promiscuous mode [ 174.870152][T13520] macsec1: entered allmulticast mode [ 174.875455][T13520] bond0: entered allmulticast mode [ 174.880607][T13520] bond_slave_0: entered allmulticast mode [ 174.886358][T13520] bond_slave_1: entered allmulticast mode [ 174.894422][T13520] bond0: left allmulticast mode [ 174.899345][T13520] bond_slave_0: left allmulticast mode [ 174.904971][T13520] bond_slave_1: left allmulticast mode [ 174.910613][T13520] bond0: left promiscuous mode [ 174.915728][T13520] bond_slave_0: left promiscuous mode [ 174.921259][T13520] bond_slave_1: left promiscuous mode [ 174.987138][T13531] xt_hashlimit: size too large, truncated to 1048576 [ 175.408392][T13546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3405'. [ 175.537598][T13551] 9pnet_fd: Insufficient options for proto=fd [ 175.691440][T13565] xt_hashlimit: size too large, truncated to 1048576 [ 176.027932][T13579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3418'. [ 176.052953][T13582] 9pnet_fd: Insufficient options for proto=fd [ 176.443901][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3423'. [ 176.758214][T13604] loop3: detected capacity change from 0 to 512 [ 176.765299][T13604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 176.776395][T13604] EXT4-fs (loop3): failed to initialize system zone (-117) [ 176.783818][T13604] EXT4-fs (loop3): mount failed [ 176.858464][T13610] xt_hashlimit: size too large, truncated to 1048576 [ 177.137059][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3431'. [ 177.190744][T13628] loop0: detected capacity change from 0 to 512 [ 177.198074][T13628] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 177.210395][T13628] EXT4-fs (loop0): failed to initialize system zone (-117) [ 177.217653][T13628] EXT4-fs (loop0): mount failed [ 177.649367][T13645] xt_hashlimit: size too large, truncated to 1048576 [ 177.863179][T13650] bond_slave_0: entered promiscuous mode [ 177.868872][T13650] bond_slave_1: entered promiscuous mode [ 177.878805][T13650] macsec1: entered promiscuous mode [ 177.884092][T13650] bond0: entered promiscuous mode [ 177.889480][T13650] macsec1: entered allmulticast mode [ 177.894897][T13650] bond0: entered allmulticast mode [ 177.900066][T13650] bond_slave_0: entered allmulticast mode [ 177.905867][T13650] bond_slave_1: entered allmulticast mode [ 177.914514][T13650] bond0: left allmulticast mode [ 177.919397][T13650] bond_slave_0: left allmulticast mode [ 177.924921][T13650] bond_slave_1: left allmulticast mode [ 177.930424][T13650] bond0: left promiscuous mode [ 177.935595][T13650] bond_slave_0: left promiscuous mode [ 177.940992][T13650] bond_slave_1: left promiscuous mode [ 178.063080][T13672] loop0: detected capacity change from 0 to 512 [ 178.072101][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3445'. [ 178.084056][T13672] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.117411][T13672] EXT4-fs (loop0): failed to initialize system zone (-117) [ 178.130053][T13680] xt_hashlimit: size too large, truncated to 1048576 [ 178.131032][T13672] EXT4-fs (loop0): mount failed [ 178.334658][T13698] loop3: detected capacity change from 0 to 512 [ 178.343516][T13698] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.354479][T13698] EXT4-fs (loop3): failed to initialize system zone (-117) [ 178.363872][T13698] EXT4-fs (loop3): mount failed [ 178.832427][T13725] loop2: detected capacity change from 0 to 512 [ 178.839312][T13725] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 178.851306][T13725] EXT4-fs (loop2): failed to initialize system zone (-117) [ 178.858651][T13725] EXT4-fs (loop2): mount failed [ 178.922119][ T3597] page_pool_release_retry() stalled pool shutdown: id 135, 1 inflight 60 sec [ 178.936237][T13730] xt_hashlimit: size too large, truncated to 1048576 [ 179.162630][T13735] xt_hashlimit: size too large, truncated to 1048576 [ 179.466575][T13756] 9pnet: Could not find request transport: fd0x0000000000000004 [ 179.496868][T13763] loop0: detected capacity change from 0 to 512 [ 179.510190][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 179.510237][ T29] audit: type=1400 audit(1749068085.157:5680): avc: denied { create } for pid=13765 comm="syz.4.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.538910][T13763] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.550611][ T29] audit: type=1400 audit(1749068085.187:5681): avc: denied { ioctl } for pid=13765 comm="syz.4.3485" path="socket:[39112]" dev="sockfs" ino=39112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.584842][T13763] EXT4-fs (loop0): failed to initialize system zone (-117) [ 179.606377][T13763] EXT4-fs (loop0): mount failed [ 179.625591][T13775] xt_hashlimit: size too large, truncated to 1048576 [ 179.708486][ T29] audit: type=1400 audit(1749068085.287:5682): avc: denied { bind } for pid=13765 comm="syz.4.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.826352][ T29] audit: type=1400 audit(1749068085.477:5683): avc: denied { create } for pid=13785 comm="syz.1.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.861892][ T29] audit: type=1400 audit(1749068085.477:5684): avc: denied { prog_load } for pid=13785 comm="syz.1.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.881749][ T29] audit: type=1400 audit(1749068085.477:5685): avc: denied { bpf } for pid=13785 comm="syz.1.3493" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.903258][ T29] audit: type=1400 audit(1749068085.477:5686): avc: denied { perfmon } for pid=13785 comm="syz.1.3493" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.924355][ T29] audit: type=1400 audit(1749068085.477:5687): avc: denied { allowed } for pid=13785 comm="syz.1.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 179.943816][ T29] audit: type=1400 audit(1749068085.477:5688): avc: denied { sqpoll } for pid=13785 comm="syz.1.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 179.963237][ T29] audit: type=1400 audit(1749068085.477:5689): avc: denied { write } for pid=13785 comm="syz.1.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.984103][ T3597] page_pool_release_retry() stalled pool shutdown: id 136, 1 inflight 60 sec [ 180.055261][T13795] 9pnet: Could not find request transport: fd0x0000000000000004 [ 180.237598][T13822] xt_hashlimit: size too large, truncated to 1048576 [ 180.464803][T13836] veth1_to_bridge: entered promiscuous mode [ 180.470882][T13836] macsec1: entered promiscuous mode [ 180.476252][T13836] macsec1: entered allmulticast mode [ 180.481517][T13834] 9pnet_fd: Insufficient options for proto=fd [ 180.487649][T13836] veth1_to_bridge: entered allmulticast mode [ 180.500358][T13836] veth1_to_bridge: left allmulticast mode [ 180.506258][T13836] veth1_to_bridge: left promiscuous mode [ 180.598150][T13848] loop4: detected capacity change from 0 to 512 [ 180.609139][T13848] /dev/loop4: Can't open blockdev [ 180.689674][T13859] 9pnet_fd: Insufficient options for proto=fd [ 180.694457][T13861] xt_hashlimit: size too large, truncated to 1048576 [ 181.043975][T13887] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 181.068189][T13889] 9pnet_fd: Insufficient options for proto=fd [ 181.452477][T13898] loop4: detected capacity change from 0 to 512 [ 181.459215][T13898] /dev/loop4: Can't open blockdev [ 181.506864][T13904] xt_hashlimit: size too large, truncated to 1048576 [ 181.695154][T13909] loop3: detected capacity change from 0 to 512 [ 181.702161][T13909] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.713118][T13909] EXT4-fs (loop3): failed to initialize system zone (-117) [ 181.720390][T13909] EXT4-fs (loop3): mount failed [ 182.007599][T13925] 9pnet_fd: Insufficient options for proto=fd [ 182.132553][ T1031] page_pool_release_retry() stalled pool shutdown: id 138, 1 inflight 60 sec [ 182.756956][T13962] loop0: detected capacity change from 0 to 512 [ 182.766750][T13962] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.780295][T13962] EXT4-fs (loop0): failed to initialize system zone (-117) [ 182.787735][T13962] EXT4-fs (loop0): mount failed [ 183.212653][T13991] loop2: detected capacity change from 0 to 512 [ 183.212679][T13992] xt_hashlimit: size too large, truncated to 1048576 [ 183.219429][T13991] /dev/loop2: Can't open blockdev [ 183.445052][T13999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3585'. [ 183.649438][T14019] loop0: detected capacity change from 0 to 512 [ 183.656356][T14019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.667884][T14019] EXT4-fs (loop0): failed to initialize system zone (-117) [ 183.675363][T14019] EXT4-fs (loop0): mount failed [ 183.764430][T14026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3598'. [ 184.058189][T14031] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3600'. [ 184.132114][T14039] loop2: detected capacity change from 0 to 512 [ 184.139174][T14039] /dev/loop2: Can't open blockdev [ 184.323294][T14041] loop3: detected capacity change from 0 to 512 [ 184.330306][T14041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.341169][T14041] EXT4-fs (loop3): failed to initialize system zone (-117) [ 184.348515][T14041] EXT4-fs (loop3): mount failed [ 184.521206][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 184.521225][ T29] audit: type=1400 audit(1749068090.167:5975): avc: denied { name_bind } for pid=14051 comm="syz.4.3610" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 184.525782][T14054] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3611'. [ 184.527602][ T29] audit: type=1400 audit(1749068090.167:5976): avc: denied { node_bind } for pid=14051 comm="syz.4.3610" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 184.602631][ T29] audit: type=1400 audit(1749068090.257:5977): avc: denied { read } for pid=14055 comm="syz.0.3612" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 184.605239][T14056] xt_hashlimit: size too large, truncated to 1048576 [ 184.626040][ T29] audit: type=1400 audit(1749068090.257:5978): avc: denied { open } for pid=14055 comm="syz.0.3612" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 184.669010][ T29] audit: type=1400 audit(1749068090.257:5979): avc: denied { setopt } for pid=14055 comm="syz.0.3612" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.726428][T14061] loop4: detected capacity change from 0 to 512 [ 184.747536][T14061] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.758861][ T29] audit: type=1400 audit(1749068090.407:5980): avc: denied { module_request } for pid=14055 comm="syz.0.3612" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 184.805479][T14061] EXT4-fs (loop4): failed to initialize system zone (-117) [ 184.821434][T14061] EXT4-fs (loop4): mount failed [ 184.863177][ T29] audit: type=1400 audit(1749068090.507:5981): avc: denied { block_suspend } for pid=14055 comm="syz.0.3612" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.984046][T14075] loop2: detected capacity change from 0 to 512 [ 184.991048][T14075] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.005293][T14075] EXT4-fs (loop2): failed to initialize system zone (-117) [ 185.012603][T14075] EXT4-fs (loop2): mount failed [ 185.040021][ T29] audit: type=1400 audit(1749068090.687:5982): avc: denied { create } for pid=14072 comm="syz.0.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.063205][ T29] audit: type=1400 audit(1749068090.717:5983): avc: denied { prog_load } for pid=14072 comm="syz.0.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 185.084053][ T29] audit: type=1400 audit(1749068090.717:5984): avc: denied { bpf } for pid=14072 comm="syz.0.3618" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.227348][T14084] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3622'. [ 185.266817][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3624'. [ 185.343785][T14096] xt_hashlimit: size too large, truncated to 1048576 [ 185.566441][T14103] loop3: detected capacity change from 0 to 512 [ 185.577444][T14103] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.588453][T14103] EXT4-fs (loop3): failed to initialize system zone (-117) [ 185.595768][T14103] EXT4-fs (loop3): mount failed [ 185.626550][T14110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3633'. [ 185.703622][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3636'. [ 185.832164][T14132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3644'. [ 185.862429][T14135] loop2: detected capacity change from 0 to 512 [ 185.870113][T14135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.882590][T14135] EXT4-fs (loop2): failed to initialize system zone (-117) [ 185.889979][T14135] EXT4-fs (loop2): mount failed [ 186.460224][T14159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3655'. [ 186.620836][T14177] loop3: detected capacity change from 0 to 512 [ 186.627957][T14177] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.639381][T14177] EXT4-fs (loop3): failed to initialize system zone (-117) [ 186.651551][T14177] EXT4-fs (loop3): mount failed [ 186.836795][T14213] loop0: detected capacity change from 0 to 512 [ 186.851124][T14213] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 186.863925][T14213] EXT4-fs (loop0): failed to initialize system zone (-117) [ 186.871174][T14213] EXT4-fs (loop0): mount failed [ 187.709649][T14265] loop2: detected capacity change from 0 to 512 [ 187.717766][T14265] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.729631][T14265] EXT4-fs (loop2): failed to initialize system zone (-117) [ 187.737239][T14265] EXT4-fs (loop2): mount failed [ 187.785610][T14276] loop0: detected capacity change from 0 to 512 [ 187.792790][T14276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.805439][T14276] EXT4-fs (loop0): failed to initialize system zone (-117) [ 187.812928][T14276] EXT4-fs (loop0): mount failed [ 187.893750][T14288] loop4: detected capacity change from 0 to 512 [ 187.900438][T14288] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.913573][T14288] EXT4-fs (loop4): failed to initialize system zone (-117) [ 187.920869][T14288] EXT4-fs (loop4): mount failed [ 188.626714][T14320] bond_slave_0: entered promiscuous mode [ 188.632527][T14320] bond_slave_1: entered promiscuous mode [ 188.638841][T14320] macsec1: entered promiscuous mode [ 188.644379][T14320] bond0: entered promiscuous mode [ 188.649953][T14320] macsec1: entered allmulticast mode [ 188.655389][T14320] bond0: entered allmulticast mode [ 188.660539][T14320] bond_slave_0: entered allmulticast mode [ 188.666362][T14320] bond_slave_1: entered allmulticast mode [ 188.679138][T14320] bond0: left allmulticast mode [ 188.684081][T14320] bond_slave_0: left allmulticast mode [ 188.689569][T14320] bond_slave_1: left allmulticast mode [ 188.695227][T14320] bond0: left promiscuous mode [ 188.700322][T14320] bond_slave_0: left promiscuous mode [ 188.705777][T14320] bond_slave_1: left promiscuous mode [ 188.976228][T14366] bond_slave_0: entered promiscuous mode [ 188.981903][T14366] bond_slave_1: entered promiscuous mode [ 188.991211][T14366] macsec1: entered promiscuous mode [ 188.996585][T14366] bond0: entered promiscuous mode [ 189.001974][T14366] macsec1: entered allmulticast mode [ 189.007299][T14366] bond0: entered allmulticast mode [ 189.012446][T14366] bond_slave_0: entered allmulticast mode [ 189.018302][T14366] bond_slave_1: entered allmulticast mode [ 189.026158][T14366] bond0: left allmulticast mode [ 189.031183][T14366] bond_slave_0: left allmulticast mode [ 189.036722][T14366] bond_slave_1: left allmulticast mode [ 189.042252][T14366] bond0: left promiscuous mode [ 189.044051][T14370] __nla_validate_parse: 3 callbacks suppressed [ 189.044131][T14370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3745'. [ 189.047327][T14366] bond_slave_0: left promiscuous mode [ 189.067569][T14366] bond_slave_1: left promiscuous mode [ 189.234699][T14392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3756'. [ 189.325273][T14402] bond_slave_0: entered promiscuous mode [ 189.331032][T14402] bond_slave_1: entered promiscuous mode [ 189.341708][T14402] macsec1: entered promiscuous mode [ 189.346973][T14402] bond0: entered promiscuous mode [ 189.352719][T14402] macsec1: entered allmulticast mode [ 189.358026][T14402] bond0: entered allmulticast mode [ 189.363203][T14402] bond_slave_0: entered allmulticast mode [ 189.368997][T14402] bond_slave_1: entered allmulticast mode [ 189.388554][T14402] bond0: left allmulticast mode [ 189.393549][T14402] bond_slave_0: left allmulticast mode [ 189.399064][T14402] bond_slave_1: left allmulticast mode [ 189.404600][T14402] bond0: left promiscuous mode [ 189.409591][T14402] bond_slave_0: left promiscuous mode [ 189.415008][T14402] bond_slave_1: left promiscuous mode [ 189.432027][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3767'. [ 189.528608][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 189.528624][ T29] audit: type=1400 audit(1749068095.177:6264): avc: denied { ioctl } for pid=14419 comm="syz.0.3770" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 189.565423][ T29] audit: type=1400 audit(1749068095.217:6265): avc: denied { create } for pid=14419 comm="syz.0.3770" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.586331][ T29] audit: type=1400 audit(1749068095.217:6266): avc: denied { write } for pid=14419 comm="syz.0.3770" name="file0" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.608947][ T29] audit: type=1400 audit(1749068095.217:6267): avc: denied { open } for pid=14419 comm="syz.0.3770" path="/153/file0" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.631834][ T29] audit: type=1400 audit(1749068095.217:6268): avc: denied { ioctl } for pid=14419 comm="syz.0.3770" path="/153/file0" dev="tmpfs" ino=821 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.656832][ T29] audit: type=1400 audit(1749068095.217:6269): avc: denied { create } for pid=14419 comm="syz.0.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.676977][ T29] audit: type=1400 audit(1749068095.217:6270): avc: denied { ioctl } for pid=14419 comm="syz.0.3770" path="socket:[41393]" dev="sockfs" ino=41393 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.783999][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3780'. [ 189.846794][ T29] audit: type=1400 audit(1749068095.497:6271): avc: denied { module_request } for pid=14446 comm="syz.4.3783" kmod=6E65746465762D7B05548289985969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 189.873664][ T29] audit: type=1400 audit(1749068095.517:6272): avc: denied { sys_module } for pid=14446 comm="syz.4.3783" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 189.898764][ T29] audit: type=1326 audit(1749068095.527:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14446 comm="syz.4.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f1b9758e7 code=0x7ffc0000 [ 189.953166][T14459] netdevsim netdevsim2: Direct firmware load for « failed with error -2 [ 190.079549][T14474] loop4: detected capacity change from 0 to 512 [ 190.086962][T14474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.098597][T14474] EXT4-fs (loop4): failed to initialize system zone (-117) [ 190.105944][T14474] EXT4-fs (loop4): mount failed [ 190.394927][T14499] team0 (unregistering): Port device team_slave_0 removed [ 190.405495][T14499] team0 (unregistering): Port device team_slave_1 removed [ 190.499628][T14506] loop2: detected capacity change from 0 to 512 [ 190.506544][T14506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.517514][T14506] EXT4-fs (loop2): failed to initialize system zone (-117) [ 190.527078][T14506] EXT4-fs (loop2): mount failed [ 190.617308][T14511] loop0: detected capacity change from 0 to 512 [ 190.624214][T14511] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 190.634909][T14511] EXT4-fs (loop0): failed to initialize system zone (-117) [ 190.642726][T14511] EXT4-fs (loop0): mount failed [ 190.925743][T14523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 190.937877][T14523] bond_slave_0: entered promiscuous mode [ 190.943678][T14523] bond_slave_1: entered promiscuous mode [ 190.949722][T14523] macsec1: entered promiscuous mode [ 190.955061][T14523] bond0: entered promiscuous mode [ 190.960378][T14523] macsec1: entered allmulticast mode [ 190.965719][T14523] bond0: entered allmulticast mode [ 190.970872][T14523] bond_slave_0: entered allmulticast mode [ 190.976770][T14523] bond_slave_1: entered allmulticast mode [ 191.349646][T14539] bond_slave_0: entered promiscuous mode [ 191.355340][T14539] bond_slave_1: entered promiscuous mode [ 191.361079][T14539] macsec1: entered promiscuous mode [ 191.366442][T14539] bond0: entered promiscuous mode [ 191.371811][T14539] macsec1: entered allmulticast mode [ 191.377128][T14539] bond0: entered allmulticast mode [ 191.382270][T14539] bond_slave_0: entered allmulticast mode [ 191.388115][T14539] bond_slave_1: entered allmulticast mode [ 191.395533][T14539] bond0: left allmulticast mode [ 191.400393][T14539] bond_slave_0: left allmulticast mode [ 191.405963][T14539] bond_slave_1: left allmulticast mode [ 191.411612][T14539] bond0: left promiscuous mode [ 191.416604][T14539] bond_slave_0: left promiscuous mode [ 191.421989][T14539] bond_slave_1: left promiscuous mode [ 191.488167][T14545] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3824'. [ 191.539299][T14551] xt_hashlimit: size too large, truncated to 1048576 [ 191.575435][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3830'. [ 191.589824][T14555] bond_slave_0: entered promiscuous mode [ 191.595545][T14555] bond_slave_1: entered promiscuous mode [ 191.608804][T14555] macsec1: entered promiscuous mode [ 191.614098][T14555] bond0: entered promiscuous mode [ 191.619314][T14555] macsec1: entered allmulticast mode [ 191.624751][T14555] bond0: entered allmulticast mode [ 191.629884][T14555] bond_slave_0: entered allmulticast mode [ 191.635783][T14555] bond_slave_1: entered allmulticast mode [ 191.723846][T14567] loop2: detected capacity change from 0 to 512 [ 191.735924][T14567] /dev/loop2: Can't open blockdev [ 191.810020][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 191.843310][T14575] netdevsim netdevsim0: Direct firmware load for « failed with error -2 [ 191.898651][T14584] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3837'. [ 192.048470][T14609] netdevsim netdevsim4: Direct firmware load for « failed with error -2 [ 192.543959][T14618] team0 (unregistering): Port device team_slave_0 removed [ 192.553599][T14618] team0 (unregistering): Port device team_slave_1 removed [ 192.572899][T14620] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3852'. [ 192.637193][T14628] xt_hashlimit: size too large, truncated to 1048576 [ 192.847660][T14638] xt_hashlimit: size too large, truncated to 1048576 [ 193.052611][T14651] xt_hashlimit: size too large, truncated to 1048576 [ 193.062640][T14646] netdevsim netdevsim4: Direct firmware load for « failed with error -2 [ 193.085261][T14654] loop3: detected capacity change from 0 to 512 [ 193.093125][T14654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.162523][T14654] EXT4-fs (loop3): failed to initialize system zone (-117) [ 193.169894][T14654] EXT4-fs (loop3): mount failed [ 193.372153][T14665] team0 (unregistering): Port device team_slave_0 removed [ 193.382514][T14665] team0 (unregistering): Port device team_slave_1 removed [ 193.938237][T14686] loop2: detected capacity change from 0 to 512 [ 193.946960][T14686] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.958300][T14686] EXT4-fs (loop2): failed to initialize system zone (-117) [ 193.966004][T14686] EXT4-fs (loop2): mount failed [ 194.054010][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 194.224724][T14698] netdevsim netdevsim0: Direct firmware load for « failed with error -2 [ 194.478947][T14719] bond_slave_0: entered promiscuous mode [ 194.484618][T14719] bond_slave_1: entered promiscuous mode [ 194.490419][T14719] macsec1: entered promiscuous mode [ 194.495645][T14719] bond0: entered promiscuous mode [ 194.501025][T14719] macsec1: entered allmulticast mode [ 194.506322][T14719] bond0: entered allmulticast mode [ 194.511538][T14719] bond_slave_0: entered allmulticast mode [ 194.517413][T14719] bond_slave_1: entered allmulticast mode [ 194.542296][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 194.609049][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 194.609063][ T29] audit: type=1400 audit(1749068100.257:6609): avc: denied { map_read map_write } for pid=14723 comm="syz.4.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.635953][ T29] audit: type=1400 audit(1749068100.257:6610): avc: denied { prog_run } for pid=14723 comm="syz.4.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.655098][ T29] audit: type=1400 audit(1749068100.267:6611): avc: denied { create } for pid=14723 comm="syz.4.3888" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 194.676419][ T29] audit: type=1400 audit(1749068100.267:6612): avc: denied { map } for pid=14723 comm="syz.4.3888" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 194.700919][ T29] audit: type=1400 audit(1749068100.267:6613): avc: denied { read write } for pid=14723 comm="syz.4.3888" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 194.726024][ T29] audit: type=1400 audit(1749068100.287:6614): avc: denied { open } for pid=14723 comm="syz.4.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 194.745565][ T29] audit: type=1400 audit(1749068100.287:6615): avc: denied { kernel } for pid=14723 comm="syz.4.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 194.764768][T14724] netdevsim netdevsim4: Direct firmware load for « failed with error -2 [ 194.765329][ T29] audit: type=1400 audit(1749068100.397:6616): avc: denied { create } for pid=14723 comm="syz.4.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.793308][ T29] audit: type=1400 audit(1749068100.397:6617): avc: denied { connect } for pid=14723 comm="syz.4.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.813226][ T29] audit: type=1400 audit(1749068100.397:6618): avc: denied { setopt } for pid=14723 comm="syz.4.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.880515][T14730] netdevsim netdevsim3: Direct firmware load for « failed with error -2 [ 195.012121][T14748] SELinux: policydb version 0 does not match my version range 15-34 [ 195.020450][T14748] SELinux: failed to load policy [ 195.083506][T14758] loop3: detected capacity change from 0 to 512 [ 195.090416][T14758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.103127][T14758] EXT4-fs (loop3): failed to initialize system zone (-117) [ 195.110359][T14758] EXT4-fs (loop3): mount failed [ 195.131709][T14763] netdevsim netdevsim2: Direct firmware load for « failed with error -2 [ 195.169123][T14766] FAULT_INJECTION: forcing a failure. [ 195.169123][T14766] name failslab, interval 1, probability 0, space 0, times 0 [ 195.181810][T14766] CPU: 1 UID: 0 PID: 14766 Comm: syz.2.3905 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 195.181870][T14766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.181885][T14766] Call Trace: [ 195.181890][T14766] [ 195.181896][T14766] __dump_stack+0x1d/0x30 [ 195.181916][T14766] dump_stack_lvl+0xe8/0x140 [ 195.181933][T14766] dump_stack+0x15/0x1b [ 195.181948][T14766] should_fail_ex+0x265/0x280 [ 195.182015][T14766] should_failslab+0x8c/0xb0 [ 195.182036][T14766] __kmalloc_cache_node_noprof+0x54/0x320 [ 195.182062][T14766] ? __get_vm_area_node+0x106/0x1d0 [ 195.182171][T14766] __get_vm_area_node+0x106/0x1d0 [ 195.182199][T14766] __vmalloc_node_range_noprof+0x273/0xe00 [ 195.182289][T14766] ? sel_write_load+0x158/0x380 [ 195.182339][T14766] ? __rcu_read_unlock+0x4f/0x70 [ 195.182387][T14766] ? sel_write_load+0x158/0x380 [ 195.182412][T14766] vmalloc_noprof+0x82/0xc0 [ 195.182486][T14766] ? sel_write_load+0x158/0x380 [ 195.182564][T14766] sel_write_load+0x158/0x380 [ 195.182670][T14766] ? __pfx_sel_write_load+0x10/0x10 [ 195.182698][T14766] vfs_write+0x269/0x8e0 [ 195.182717][T14766] ? __rcu_read_unlock+0x4f/0x70 [ 195.182743][T14766] ? __fget_files+0x184/0x1c0 [ 195.182783][T14766] ksys_write+0xda/0x1a0 [ 195.182802][T14766] __x64_sys_write+0x40/0x50 [ 195.182820][T14766] x64_sys_call+0x2cdd/0x2fb0 [ 195.182838][T14766] do_syscall_64+0xd2/0x200 [ 195.182863][T14766] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.182909][T14766] ? clear_bhb_loop+0x40/0x90 [ 195.183006][T14766] ? clear_bhb_loop+0x40/0x90 [ 195.183025][T14766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.183043][T14766] RIP: 0033:0x7f654714e929 [ 195.183061][T14766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.183095][T14766] RSP: 002b:00007f65457b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.183114][T14766] RAX: ffffffffffffffda RBX: 00007f6547375fa0 RCX: 00007f654714e929 [ 195.183182][T14766] RDX: 0000000000002000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 195.183193][T14766] RBP: 00007f65457b7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.183203][T14766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.183214][T14766] R13: 0000000000000000 R14: 00007f6547375fa0 R15: 00007ffeb24ba3f8 [ 195.183231][T14766] [ 195.183237][T14766] syz.2.3905: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 195.432893][T14766] CPU: 1 UID: 0 PID: 14766 Comm: syz.2.3905 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 195.432914][T14766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.432923][T14766] Call Trace: [ 195.432929][T14766] [ 195.432934][T14766] __dump_stack+0x1d/0x30 [ 195.432950][T14766] dump_stack_lvl+0xe8/0x140 [ 195.432964][T14766] dump_stack+0x15/0x1b [ 195.432998][T14766] warn_alloc+0x12b/0x1a0 [ 195.433026][T14766] __vmalloc_node_range_noprof+0x297/0xe00 [ 195.433083][T14766] ? __rcu_read_unlock+0x4f/0x70 [ 195.433153][T14766] ? sel_write_load+0x158/0x380 [ 195.433188][T14766] vmalloc_noprof+0x82/0xc0 [ 195.433212][T14766] ? sel_write_load+0x158/0x380 [ 195.433305][T14766] sel_write_load+0x158/0x380 [ 195.433373][T14766] ? __pfx_sel_write_load+0x10/0x10 [ 195.433395][T14766] vfs_write+0x269/0x8e0 [ 195.433446][T14766] ? __rcu_read_unlock+0x4f/0x70 [ 195.433466][T14766] ? __fget_files+0x184/0x1c0 [ 195.433494][T14766] ksys_write+0xda/0x1a0 [ 195.433603][T14766] __x64_sys_write+0x40/0x50 [ 195.433688][T14766] x64_sys_call+0x2cdd/0x2fb0 [ 195.433704][T14766] do_syscall_64+0xd2/0x200 [ 195.433725][T14766] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.433744][T14766] ? clear_bhb_loop+0x40/0x90 [ 195.433803][T14766] ? clear_bhb_loop+0x40/0x90 [ 195.433820][T14766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.433853][T14766] RIP: 0033:0x7f654714e929 [ 195.433865][T14766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.433879][T14766] RSP: 002b:00007f65457b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.433892][T14766] RAX: ffffffffffffffda RBX: 00007f6547375fa0 RCX: 00007f654714e929 [ 195.433901][T14766] RDX: 0000000000002000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 195.433949][T14766] RBP: 00007f65457b7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.433958][T14766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.433967][T14766] R13: 0000000000000000 R14: 00007f6547375fa0 R15: 00007ffeb24ba3f8 [ 195.433982][T14766] [ 195.434013][T14766] Mem-Info: [ 195.647586][T14766] active_anon:4965 inactive_anon:0 isolated_anon:0 [ 195.647586][T14766] active_file:16410 inactive_file:2262 isolated_file:0 [ 195.647586][T14766] unevictable:0 dirty:296 writeback:0 [ 195.647586][T14766] slab_reclaimable:3110 slab_unreclaimable:25960 [ 195.647586][T14766] mapped:29171 shmem:148 pagetables:891 [ 195.647586][T14766] sec_pagetables:0 bounce:0 [ 195.647586][T14766] kernel_misc_reclaimable:0 [ 195.647586][T14766] free:1855878 free_pcp:3651 free_cma:0 [ 195.692323][T14766] Node 0 active_anon:19860kB inactive_anon:0kB active_file:65640kB inactive_file:9048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116684kB dirty:1184kB writeback:0kB shmem:592kB writeback_tmp:0kB kernel_stack:3776kB pagetables:3564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 195.721129][T14766] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.749840][T14766] lowmem_reserve[]: 0 2882 7860 7860 [ 195.755226][T14766] Node 0 DMA32 free:2947872kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951400kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 195.785335][T14766] lowmem_reserve[]: 0 0 4978 4978 [ 195.790444][T14766] Node 0 Normal free:4460280kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19744kB inactive_anon:0kB active_file:65640kB inactive_file:9048kB unevictable:0kB writepending:1184kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:10876kB local_pcp:5880kB free_cma:0kB [ 195.822466][T14766] lowmem_reserve[]: 0 0 0 0 [ 195.827093][T14766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 195.839864][T14766] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947872kB [ 195.855963][T14766] Node 0 Normal: 1339*4kB (UME) 1007*8kB (UM) 750*16kB (UME) 503*32kB (UME) 299*64kB (UME) 52*128kB (UME) 32*256kB (UM) 36*512kB (UM) 134*1024kB (UME) 11*2048kB (UME) 1027*4096kB (UM) = 4460260kB [ 195.875543][T14766] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 195.884936][T14766] 18815 total pagecache pages [ 195.889599][T14766] 0 pages in swap cache [ 195.893762][T14766] Free swap = 124996kB [ 195.897954][T14766] Total swap = 124996kB [ 195.902123][T14766] 2097051 pages RAM [ 195.905922][T14766] 0 pages HighMem/MovableOnly [ 195.910587][T14766] 80803 pages reserved [ 195.959285][T14776] loop2: detected capacity change from 0 to 512 [ 195.972781][T14776] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.983912][T14776] EXT4-fs (loop2): failed to initialize system zone (-117) [ 195.991212][T14776] EXT4-fs (loop2): mount failed [ 195.996567][T14782] bond_slave_0: entered promiscuous mode [ 196.002345][T14782] bond_slave_1: entered promiscuous mode [ 196.010190][T14782] macsec1: entered promiscuous mode [ 196.015507][T14782] bond0: entered promiscuous mode [ 196.020961][T14782] macsec1: entered allmulticast mode [ 196.026340][T14782] bond0: entered allmulticast mode [ 196.031496][T14782] bond_slave_0: entered allmulticast mode [ 196.037249][T14782] bond_slave_1: entered allmulticast mode [ 196.080333][T14797] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 196.086893][T14797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.094786][T14797] vhci_hcd vhci_hcd.0: Device attached [ 196.104503][T14797] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 196.111133][T14797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.118772][T14797] vhci_hcd vhci_hcd.0: Device attached [ 196.125052][T14797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 196.133914][T14797] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 196.140539][T14797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.148144][T14797] vhci_hcd vhci_hcd.0: Device attached [ 196.154525][T14797] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(19) [ 196.161134][T14797] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 196.168826][T14797] vhci_hcd vhci_hcd.0: Device attached [ 196.177657][T14797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 196.186126][T14797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 196.194672][T14797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 196.210543][T14797] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(29) [ 196.217208][T14797] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.224823][T14797] vhci_hcd vhci_hcd.0: Device attached [ 196.231323][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3917'. [ 196.249628][T14811] vhci_hcd: connection closed [ 196.249806][ T2602] vhci_hcd: stop threads [ 196.249933][T14817] vhci_hcd: connection closed [ 196.254558][ T2602] vhci_hcd: release socket [ 196.259112][T14804] vhci_hcd: connection closed [ 196.263504][ T2602] vhci_hcd: disconnect device [ 196.268007][T14809] vhci_hcd: connection closed [ 196.283834][ T2602] vhci_hcd: stop threads [ 196.291761][T14799] vhci_hcd: connection closed [ 196.292900][ T2602] vhci_hcd: release socket [ 196.302137][ T2602] vhci_hcd: disconnect device [ 196.306995][ T2602] vhci_hcd: stop threads [ 196.311239][ T2602] vhci_hcd: release socket [ 196.315738][ T2602] vhci_hcd: disconnect device [ 196.320591][ T2602] vhci_hcd: stop threads [ 196.324887][ T2602] vhci_hcd: release socket [ 196.329300][ T2602] vhci_hcd: disconnect device [ 196.331547][ T3393] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 196.341443][ T2602] vhci_hcd: stop threads [ 196.345699][ T2602] vhci_hcd: release socket [ 196.350105][ T2602] vhci_hcd: disconnect device [ 196.798289][T14821] xt_hashlimit: size too large, truncated to 1048576 [ 197.014808][T14838] loop0: detected capacity change from 0 to 512 [ 197.038947][T14838] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.064137][T14838] EXT4-fs (loop0): failed to initialize system zone (-117) [ 197.071519][T14838] EXT4-fs (loop0): mount failed [ 197.217295][T14861] netdevsim netdevsim3: Direct firmware load for « failed with error -2 [ 197.447817][T14867] loop3: detected capacity change from 0 to 512 [ 197.455234][T14867] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.473369][T14867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.487135][T14867] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.499334][T14867] FAULT_INJECTION: forcing a failure. [ 197.499334][T14867] name failslab, interval 1, probability 0, space 0, times 0 [ 197.512000][T14867] CPU: 1 UID: 0 PID: 14867 Comm: syz.3.3935 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 197.512024][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.512084][T14867] Call Trace: [ 197.512091][T14867] [ 197.512100][T14867] __dump_stack+0x1d/0x30 [ 197.512124][T14867] dump_stack_lvl+0xe8/0x140 [ 197.512142][T14867] dump_stack+0x15/0x1b [ 197.512156][T14867] should_fail_ex+0x265/0x280 [ 197.512240][T14867] should_failslab+0x8c/0xb0 [ 197.512269][T14867] __kmalloc_node_noprof+0xa9/0x410 [ 197.512399][T14867] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 197.512442][T14867] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 197.512522][T14867] __vmalloc_node_noprof+0x89/0xc0 [ 197.512603][T14867] ? copy_process+0x399/0x1fe0 [ 197.512625][T14867] ? copy_process+0x399/0x1fe0 [ 197.512718][T14867] dup_task_struct+0x449/0x6a0 [ 197.512743][T14867] ? _parse_integer+0x27/0x40 [ 197.512807][T14867] copy_process+0x399/0x1fe0 [ 197.512832][T14867] ? kstrtouint+0x76/0xc0 [ 197.512860][T14867] ? kstrtouint_from_user+0x9f/0xf0 [ 197.512884][T14867] ? __rcu_read_unlock+0x4f/0x70 [ 197.512962][T14867] kernel_clone+0x16c/0x5b0 [ 197.512987][T14867] ? vfs_write+0x75e/0x8e0 [ 197.513006][T14867] __x64_sys_clone+0xe6/0x120 [ 197.513067][T14867] x64_sys_call+0x2c59/0x2fb0 [ 197.513087][T14867] do_syscall_64+0xd2/0x200 [ 197.513118][T14867] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 197.513149][T14867] ? clear_bhb_loop+0x40/0x90 [ 197.513194][T14867] ? clear_bhb_loop+0x40/0x90 [ 197.513213][T14867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.513232][T14867] RIP: 0033:0x7f9997fbe929 [ 197.513250][T14867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.513310][T14867] RSP: 002b:00007f99965e4fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 197.513328][T14867] RAX: ffffffffffffffda RBX: 00007f99981e6160 RCX: 00007f9997fbe929 [ 197.513338][T14867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000047043080 [ 197.513349][T14867] RBP: 00007f99965e5090 R08: 0000000000000000 R09: 0000000000000000 [ 197.513360][T14867] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 197.513371][T14867] R13: 0000000000000000 R14: 00007f99981e6160 R15: 00007fff602f9588 [ 197.513470][T14867] [ 197.928118][T14881] xt_hashlimit: size too large, truncated to 1048576 [ 198.025950][T14883] loop4: detected capacity change from 0 to 1024 [ 198.087012][T14883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.241296][T11554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.344596][T13104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.394355][T14906] loop3: detected capacity change from 0 to 512 [ 198.403458][T14906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.432237][T14906] EXT4-fs (loop3): failed to initialize system zone (-117) [ 198.439545][T14906] EXT4-fs (loop3): mount failed [ 198.492440][T14911] netdevsim netdevsim2: Direct firmware load for « failed with error -2 [ 198.501151][T14914] FAULT_INJECTION: forcing a failure. [ 198.501151][T14914] name failslab, interval 1, probability 0, space 0, times 0 [ 198.513808][T14914] CPU: 0 UID: 0 PID: 14914 Comm: syz.0.3951 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 198.513846][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.513929][T14914] Call Trace: [ 198.513937][T14914] [ 198.513946][T14914] __dump_stack+0x1d/0x30 [ 198.513980][T14914] dump_stack_lvl+0xe8/0x140 [ 198.514077][T14914] dump_stack+0x15/0x1b [ 198.514092][T14914] should_fail_ex+0x265/0x280 [ 198.514110][T14914] should_failslab+0x8c/0xb0 [ 198.514154][T14914] kmem_cache_alloc_noprof+0x50/0x310 [ 198.514180][T14914] ? audit_log_start+0x365/0x6c0 [ 198.514212][T14914] audit_log_start+0x365/0x6c0 [ 198.514328][T14914] audit_seccomp+0x48/0x100 [ 198.514375][T14914] ? __seccomp_filter+0x68c/0x10d0 [ 198.514398][T14914] __seccomp_filter+0x69d/0x10d0 [ 198.514448][T14914] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.514525][T14914] ? vfs_write+0x75e/0x8e0 [ 198.514546][T14914] ? __rcu_read_unlock+0x4f/0x70 [ 198.514627][T14914] ? __fget_files+0x184/0x1c0 [ 198.514655][T14914] __secure_computing+0x82/0x150 [ 198.514676][T14914] syscall_trace_enter+0xcf/0x1e0 [ 198.514699][T14914] do_syscall_64+0xac/0x200 [ 198.514805][T14914] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 198.514834][T14914] ? clear_bhb_loop+0x40/0x90 [ 198.514860][T14914] ? clear_bhb_loop+0x40/0x90 [ 198.514936][T14914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.514963][T14914] RIP: 0033:0x7f6cfedde929 [ 198.514980][T14914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.515046][T14914] RSP: 002b:00007f6cfd447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000138 [ 198.515070][T14914] RAX: ffffffffffffffda RBX: 00007f6cff005fa0 RCX: 00007f6cfedde929 [ 198.515134][T14914] RDX: 0000000000000001 RSI: 000000000000019b RDI: 000000000000019b [ 198.515148][T14914] RBP: 00007f6cfd447090 R08: ffffffffffffffff R09: 0000000000000000 [ 198.515163][T14914] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 198.515178][T14914] R13: 0000000000000000 R14: 00007f6cff005fa0 R15: 00007ffc3b618f18 [ 198.515201][T14914] [ 198.914432][T14933] block device autoloading is deprecated and will be removed. [ 199.245428][T14943] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 199.253448][T14943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3962'. [ 199.291762][T14943] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 199.299706][T14943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3962'. [ 199.308949][T14943] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 199.316790][T14943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3962'. [ 199.325914][T14943] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 199.333743][T14943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3962'. [ 199.342788][T14943] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 199.350597][T14943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3962'. [ 199.359698][T14943] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 199.367578][T14943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3962'. [ 199.376718][T14943] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 199.384557][T14943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3962'. [ 199.393764][T14943] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 199.401752][T14943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3962'. [ 199.411146][T14943] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 199.419108][T14943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3962'. [ 199.428306][T14943] netlink: 'syz.3.3962': attribute type 10 has an invalid length. [ 199.436179][T14943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3962'. [ 199.488728][T14949] netdevsim netdevsim3: Direct firmware load for « failed with error -2 [ 199.572891][T14966] loop3: detected capacity change from 0 to 512 [ 199.579966][T14966] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.593208][T14966] EXT4-fs (loop3): failed to initialize system zone (-117) [ 199.600489][T14966] EXT4-fs (loop3): mount failed [ 199.644771][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 199.644786][ T29] audit: type=1400 audit(1749068105.297:6822): avc: denied { block_suspend } for pid=14967 comm="syz.4.3973" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.681610][ T29] audit: type=1400 audit(1749068105.327:6823): avc: denied { create } for pid=14967 comm="syz.4.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.702274][ T29] audit: type=1400 audit(1749068105.337:6824): avc: denied { prog_load } for pid=14967 comm="syz.4.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 199.721486][ T29] audit: type=1400 audit(1749068105.337:6825): avc: denied { bpf } for pid=14967 comm="syz.4.3973" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.742123][ T29] audit: type=1400 audit(1749068105.337:6826): avc: denied { perfmon } for pid=14967 comm="syz.4.3973" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.763079][ T29] audit: type=1400 audit(1749068105.337:6827): avc: denied { allowed } for pid=14967 comm="syz.4.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 199.782526][ T29] audit: type=1400 audit(1749068105.337:6828): avc: denied { sqpoll } for pid=14967 comm="syz.4.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 199.801947][ T29] audit: type=1400 audit(1749068105.337:6829): avc: denied { write } for pid=14967 comm="syz.4.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.822877][ T29] audit: type=1400 audit(1749068105.337:6830): avc: denied { read } for pid=14967 comm="syz.4.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.843371][ T29] audit: type=1400 audit(1749068105.337:6831): avc: denied { create } for pid=14967 comm="syz.4.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.979336][T14987] FAULT_INJECTION: forcing a failure. [ 199.979336][T14987] name failslab, interval 1, probability 0, space 0, times 0 [ 199.992072][T14987] CPU: 1 UID: 0 PID: 14987 Comm: syz.2.3981 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 199.992120][T14987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.992134][T14987] Call Trace: [ 199.992140][T14987] [ 199.992151][T14987] __dump_stack+0x1d/0x30 [ 199.992169][T14987] dump_stack_lvl+0xe8/0x140 [ 199.992272][T14987] dump_stack+0x15/0x1b [ 199.992287][T14987] should_fail_ex+0x265/0x280 [ 199.992305][T14987] should_failslab+0x8c/0xb0 [ 199.992404][T14987] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 199.992432][T14987] ? sidtab_sid2str_get+0xa0/0x130 [ 199.992462][T14987] kmemdup_noprof+0x2b/0x70 [ 199.992490][T14987] sidtab_sid2str_get+0xa0/0x130 [ 199.992580][T14987] security_sid_to_context_core+0x1eb/0x2e0 [ 199.992614][T14987] security_sid_to_context+0x27/0x40 [ 199.992638][T14987] selinux_lsmprop_to_secctx+0x67/0xf0 [ 199.992662][T14987] security_lsmprop_to_secctx+0x43/0x80 [ 199.992773][T14987] audit_log_task_context+0x77/0x190 [ 199.992814][T14987] audit_log_task+0xf4/0x250 [ 199.992971][T14987] audit_seccomp+0x61/0x100 [ 199.993003][T14987] ? __seccomp_filter+0x68c/0x10d0 [ 199.993024][T14987] __seccomp_filter+0x69d/0x10d0 [ 199.993076][T14987] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 199.993141][T14987] ? vfs_write+0x75e/0x8e0 [ 199.993162][T14987] __secure_computing+0x82/0x150 [ 199.993257][T14987] syscall_trace_enter+0xcf/0x1e0 [ 199.993277][T14987] do_syscall_64+0xac/0x200 [ 199.993300][T14987] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 199.993347][T14987] ? clear_bhb_loop+0x40/0x90 [ 199.993364][T14987] ? clear_bhb_loop+0x40/0x90 [ 199.993421][T14987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.993438][T14987] RIP: 0033:0x7f654714e929 [ 199.993450][T14987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.993465][T14987] RSP: 002b:00007f65457b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 199.993487][T14987] RAX: ffffffffffffffda RBX: 00007f6547375fa0 RCX: 00007f654714e929 [ 199.993497][T14987] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 00002000000004c0 [ 199.993507][T14987] RBP: 00007f65457b7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.993517][T14987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.993526][T14987] R13: 0000000000000000 R14: 00007f6547375fa0 R15: 00007ffeb24ba3f8 [ 199.993541][T14987] [ 200.434199][T15003] netdevsim netdevsim3: Direct firmware load for « failed with error -2 [ 200.485164][T15006] SELinux: security policydb version 18 (MLS) not backwards compatible [ 200.493742][T15006] SELinux: failed to load policy [ 200.504005][T15008] loop4: detected capacity change from 0 to 512 [ 200.511073][T15008] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.523504][T15008] EXT4-fs (loop4): failed to initialize system zone (-117) [ 200.531448][T15008] EXT4-fs (loop4): mount failed [ 200.538814][T15006] hub 6-0:1.0: USB hub found [ 200.543550][T15006] hub 6-0:1.0: 8 ports detected [ 200.623260][T15015] loop3: detected capacity change from 0 to 1024 [ 200.635122][T15015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.836995][T15021] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 200.843537][T15021] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.851099][T15021] vhci_hcd vhci_hcd.0: Device attached [ 200.881901][T15021] vhci_hcd: invalid port number 96 [ 200.887171][T15021] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 200.903002][T15022] vhci_hcd: connection closed [ 200.903222][ T37] vhci_hcd: stop threads [ 200.912293][ T37] vhci_hcd: release socket [ 200.916737][ T37] vhci_hcd: disconnect device [ 201.117687][T13104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.176426][T15038] loop3: detected capacity change from 0 to 512 [ 201.183759][T15038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.196757][T15038] EXT4-fs (loop3): failed to initialize system zone (-117) [ 201.206891][T15038] EXT4-fs (loop3): mount failed [ 201.216435][T15043] loop2: detected capacity change from 0 to 512 [ 201.223233][T15043] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.235576][T15043] EXT4-fs (loop2): failed to initialize system zone (-117) [ 201.243026][T15043] EXT4-fs (loop2): mount failed [ 201.404601][ T3393] usb 3-1: enqueue for inactive port 0 [ 201.410436][ T3393] usb 3-1: enqueue for inactive port 0 [ 201.491439][ T3393] vhci_hcd: vhci_device speed not set [ 201.508088][T15063] bridge0: port 3(batadv0) entered blocking state [ 201.514706][T15063] bridge0: port 3(batadv0) entered disabled state [ 201.521645][T15063] batadv0: entered allmulticast mode [ 201.527648][T15063] batadv0: entered promiscuous mode [ 201.533159][T15063] bridge0: port 3(batadv0) entered blocking state [ 201.539709][T15063] bridge0: port 3(batadv0) entered forwarding state [ 201.546765][T15063] batadv0: left allmulticast mode [ 201.551870][T15063] batadv0: left promiscuous mode [ 201.556942][T15063] bridge0: port 3(batadv0) entered disabled state [ 201.582249][T15072] loop0: detected capacity change from 0 to 512 [ 201.589411][T15072] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 201.591638][T15074] SELinux: security policydb version 18 (MLS) not backwards compatible [ 201.602496][T15072] EXT4-fs (loop0): failed to initialize system zone (-117) [ 201.608774][T15074] SELinux: failed to load policy [ 201.614909][T15072] EXT4-fs (loop0): mount failed [ 201.667076][T15074] hub 6-0:1.0: USB hub found [ 201.671767][T15074] hub 6-0:1.0: 8 ports detected [ 201.739645][T15081] netdevsim netdevsim4: Direct firmware load for « failed with error -2 [ 201.875200][T15096] xt_hashlimit: size too large, truncated to 1048576 [ 202.104373][T15105] hub 6-0:1.0: USB hub found [ 202.109124][T15105] hub 6-0:1.0: 8 ports detected [ 202.191831][T15118] loop2: detected capacity change from 0 to 1024 [ 202.199134][T15118] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 202.208960][T15118] EXT4-fs (loop2): group descriptors corrupted! [ 202.287993][T15125] loop2: detected capacity change from 0 to 512 [ 202.297967][T15125] loop2: detected capacity change from 0 to 512 [ 202.308927][T15125] loop2: detected capacity change from 0 to 512 [ 202.318606][T15125] loop2: detected capacity change from 0 to 512 [ 202.328291][T15125] loop2: detected capacity change from 0 to 512 [ 202.337289][T15125] loop2: detected capacity change from 0 to 512 [ 202.346388][T15125] loop2: detected capacity change from 0 to 512 [ 202.355856][T15125] loop2: detected capacity change from 0 to 512 [ 202.368213][T15125] loop2: detected capacity change from 0 to 512 [ 202.377242][T15125] loop2: detected capacity change from 0 to 512 [ 202.386339][T15125] loop2: detected capacity change from 0 to 512 [ 202.395470][T15125] loop2: detected capacity change from 0 to 512 [ 202.404736][T15125] loop2: detected capacity change from 0 to 512 [ 202.414691][T15125] loop2: detected capacity change from 0 to 512 [ 202.424288][T15125] loop2: detected capacity change from 0 to 512 [ 202.434411][T15125] loop2: detected capacity change from 0 to 512 [ 202.444608][T15125] loop2: detected capacity change from 0 to 512 [ 202.455465][T15129] loop0: detected capacity change from 0 to 512 [ 202.455558][T15125] loop2: detected capacity change from 0 to 512 [ 202.464197][T15129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.478183][T15125] loop2: detected capacity change from 0 to 512 [ 202.485650][T15129] EXT4-fs (loop0): failed to initialize system zone (-117) [ 202.493049][T15125] loop2: detected capacity change from 0 to 512 [ 202.494799][T15129] EXT4-fs (loop0): mount failed [ 202.504438][T15125] loop2: detected capacity change from 0 to 512 [ 202.515505][T15125] loop2: detected capacity change from 0 to 512 [ 202.525216][T15125] loop2: detected capacity change from 0 to 512 [ 202.534992][T15125] loop2: detected capacity change from 0 to 512 [ 202.544804][T15125] loop2: detected capacity change from 0 to 512 [ 202.554115][T15125] loop2: detected capacity change from 0 to 512 [ 202.563675][T15125] loop2: detected capacity change from 0 to 512 [ 202.573311][T15125] loop2: detected capacity change from 0 to 512 [ 202.582521][T15125] loop2: detected capacity change from 0 to 512 [ 202.592108][T15125] loop2: detected capacity change from 0 to 512 [ 202.601230][T15125] loop2: detected capacity change from 0 to 512 [ 202.610987][T15125] loop2: detected capacity change from 0 to 512 [ 202.620311][T15125] loop2: detected capacity change from 0 to 512 [ 202.644616][T15132] openvswitch: netlink: Message has 6 unknown bytes. [ 203.193876][T15155] netdevsim netdevsim1: Direct firmware load for « failed with error -2 [ 203.264740][T15158] hub 6-0:1.0: USB hub found [ 203.269423][T15158] hub 6-0:1.0: 8 ports detected [ 203.311836][T15162] netdevsim netdevsim0: Direct firmware load for « failed with error -2 [ 203.399986][T15179] loop0: detected capacity change from 0 to 512 [ 203.412993][T15179] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 203.423752][T15179] EXT4-fs (loop0): failed to initialize system zone (-117) [ 203.431503][T15179] EXT4-fs (loop0): mount failed [ 203.485649][T15186] SELinux: security policydb version 18 (MLS) not backwards compatible [ 203.494212][T15186] SELinux: failed to load policy [ 203.831502][T15193] loop3: detected capacity change from 0 to 164 [ 203.841172][T15193] openvswitch: netlink: Message has 6 unknown bytes. [ 203.869159][T15198] loop4: detected capacity change from 0 to 2048 [ 203.885305][T15198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.898432][T15198] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.975428][T15213] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.4062: iget: bogus i_mode (0) [ 203.987705][T15213] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.4062: iget: bogus i_mode (0) [ 204.012709][T15213] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4062: bg 0: block 345: padding at end of block bitmap is not set [ 204.397130][T15226] __nla_validate_parse: 66 callbacks suppressed [ 204.397146][T15226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4069'. [ 204.412818][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4069'. [ 204.500178][T15230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4070'. [ 204.549122][T15238] loop2: detected capacity change from 0 to 512 [ 204.564808][T15238] /dev/loop2: Can't open blockdev [ 204.773165][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 204.773179][ T29] audit: type=1326 audit(1749068110.417:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.4.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1b97e929 code=0x7ffc0000 [ 204.803012][ T29] audit: type=1326 audit(1749068110.427:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.4.4062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1b97e929 code=0x7ffc0000 [ 204.868662][T15251] xt_hashlimit: max too large, truncated to 1048576 [ 204.900631][ T29] audit: type=1326 audit(1749068110.547:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997fbe929 code=0x7ffc0000 [ 204.924244][ T29] audit: type=1326 audit(1749068110.547:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997fbe929 code=0x7ffc0000 [ 204.956827][T15251] loop3: detected capacity change from 0 to 512 [ 204.966495][T15251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.978335][T15251] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.998493][ T29] audit: type=1326 audit(1749068110.547:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9997fbe929 code=0x7ffc0000 [ 205.022239][ T29] audit: type=1326 audit(1749068110.547:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997fbe929 code=0x7ffc0000 [ 205.045817][ T29] audit: type=1326 audit(1749068110.547:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997fbe929 code=0x7ffc0000 [ 205.054708][T15251] EXT4-fs (loop3): 1 truncate cleaned up [ 205.069372][ T29] audit: type=1326 audit(1749068110.607:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9997fbe929 code=0x7ffc0000 [ 205.075438][T15251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.098430][ T29] audit: type=1326 audit(1749068110.607:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9997fbe929 code=0x7ffc0000 [ 205.134422][ T29] audit: type=1326 audit(1749068110.607:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.3.4079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9997fbe929 code=0x7ffc0000 [ 205.194007][T15251] EXT4-fs (loop3): shut down requested (0) [ 205.316192][T13104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.338728][T15257] loop3: detected capacity change from 0 to 512 [ 205.345717][T15257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.357034][T15257] EXT4-fs (loop3): failed to initialize system zone (-117) [ 205.364351][T15257] EXT4-fs (loop3): mount failed [ 205.511656][T11554] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.522919][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4083'. [ 205.531878][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4083'. [ 205.601177][T15272] hub 6-0:1.0: USB hub found [ 205.606099][T15272] hub 6-0:1.0: 8 ports detected [ 205.617601][T15274] SELinux: security policydb version 18 (MLS) not backwards compatible [ 205.626413][T15274] SELinux: failed to load policy [ 205.726014][T15291] netdevsim netdevsim0: Direct firmware load for « failed with error -2 [ 205.744315][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4089'. [ 205.788340][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4096'. [ 205.797331][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4096'. [ 206.191697][T15308] SELinux: security policydb version 18 (MLS) not backwards compatible [ 206.206683][T15308] SELinux: failed to load policy [ 206.414635][T15330] validate_nla: 55 callbacks suppressed [ 206.414652][T15330] netlink: 'syz.2.4108': attribute type 1 has an invalid length. [ 206.433434][T15330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.550852][T15338] netdevsim netdevsim2: Direct firmware load for « failed with error -2 [ 206.582075][T15341] ipvlan2: entered promiscuous mode [ 206.588505][T15341] bridge0: port 3(ipvlan2) entered blocking state [ 206.595099][T15341] bridge0: port 3(ipvlan2) entered disabled state [ 206.602854][T15341] ipvlan2: entered allmulticast mode [ 206.608213][T15341] bridge0: entered allmulticast mode [ 206.614103][T15341] ipvlan2: left allmulticast mode [ 206.619127][T15341] bridge0: left allmulticast mode [ 206.675598][T15343] process 'syz.0.4113' launched '/dev/fd/3' with NULL argv: empty string added [ 206.747391][T15347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4115'. [ 206.788381][T15350] netdevsim netdevsim0: Direct firmware load for « failed with error -2 [ 207.098046][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4120'. [ 207.133458][T15376] netlink: 'syz.1.4122': attribute type 1 has an invalid length. [ 207.146869][T15376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.242278][T15383] FAULT_INJECTION: forcing a failure. [ 207.242278][T15383] name failslab, interval 1, probability 0, space 0, times 0 [ 207.255015][T15383] CPU: 1 UID: 0 PID: 15383 Comm: syz.1.4125 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 207.255048][T15383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.255066][T15383] Call Trace: [ 207.255071][T15383] [ 207.255077][T15383] __dump_stack+0x1d/0x30 [ 207.255094][T15383] dump_stack_lvl+0xe8/0x140 [ 207.255109][T15383] dump_stack+0x15/0x1b [ 207.255184][T15383] should_fail_ex+0x265/0x280 [ 207.255200][T15383] ? cma_alloc_port+0x3d/0x2f0 [ 207.255227][T15383] should_failslab+0x8c/0xb0 [ 207.255292][T15383] __kmalloc_cache_noprof+0x4c/0x320 [ 207.255368][T15383] cma_alloc_port+0x3d/0x2f0 [ 207.255413][T15383] rdma_bind_addr_dst+0xa7f/0x1cf0 [ 207.255437][T15383] ? mntput_no_expire+0x6f/0x3c0 [ 207.255486][T15383] rdma_resolve_addr+0x424/0x1340 [ 207.255559][T15383] ? _parse_integer_limit+0x170/0x190 [ 207.255592][T15383] ucma_resolve_ip+0x212/0x2e0 [ 207.255624][T15383] ucma_write+0x1b3/0x250 [ 207.255720][T15383] ? __pfx_ucma_write+0x10/0x10 [ 207.255754][T15383] vfs_write+0x269/0x8e0 [ 207.255770][T15383] ? __rcu_read_unlock+0x4f/0x70 [ 207.255800][T15383] ? __fget_files+0x184/0x1c0 [ 207.255839][T15383] ksys_write+0xda/0x1a0 [ 207.255857][T15383] __x64_sys_write+0x40/0x50 [ 207.255875][T15383] x64_sys_call+0x2cdd/0x2fb0 [ 207.255932][T15383] do_syscall_64+0xd2/0x200 [ 207.255985][T15383] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.256007][T15383] ? clear_bhb_loop+0x40/0x90 [ 207.256076][T15383] ? clear_bhb_loop+0x40/0x90 [ 207.256136][T15383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.256153][T15383] RIP: 0033:0x7fa7050ee929 [ 207.256245][T15383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.256273][T15383] RSP: 002b:00007fa703757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.256288][T15383] RAX: ffffffffffffffda RBX: 00007fa705315fa0 RCX: 00007fa7050ee929 [ 207.256298][T15383] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 0000000000000003 [ 207.256308][T15383] RBP: 00007fa703757090 R08: 0000000000000000 R09: 0000000000000000 [ 207.256317][T15383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.256332][T15383] R13: 0000000000000000 R14: 00007fa705315fa0 R15: 00007ffc19f68e88 [ 207.256347][T15383] [ 207.548926][T15391] netdevsim netdevsim1: Direct firmware load for « failed with error -2 [ 208.087190][T15417] xt_hashlimit: max too large, truncated to 1048576 [ 208.243864][T15431] loop2: detected capacity change from 0 to 512 [ 208.274355][T15431] EXT4-fs (loop2): 1 orphan inode deleted [ 208.290775][T15431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.322343][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 208.407903][T15431] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.438882][T15453] loop4: detected capacity change from 0 to 512 [ 208.465405][T15431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.514979][T15453] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 208.533670][T15453] EXT4-fs (loop4): failed to initialize system zone (-117) [ 208.541211][T15453] EXT4-fs (loop4): mount failed [ 208.553669][T15458] loop0: detected capacity change from 0 to 512 [ 208.560521][T15458] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 208.581016][T15458] EXT4-fs (loop0): failed to initialize system zone (-117) [ 208.588399][T15458] EXT4-fs (loop0): mount failed [ 209.152453][T15479] netdevsim netdevsim1: Direct firmware load for « failed with error -2 [ 209.204741][T15482] loop3: detected capacity change from 0 to 1024 [ 209.223609][T15482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.287923][T15491] openvswitch: netlink: Message has 6 unknown bytes. [ 209.295197][T15492] SET target dimension over the limit! [ 209.395486][T13104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.408734][T15504] loop4: detected capacity change from 0 to 512 [ 209.415751][T15504] /dev/loop4: Can't open blockdev [ 209.421572][T15503] loop0: detected capacity change from 0 to 2048 [ 209.435892][T15507] __nla_validate_parse: 4 callbacks suppressed [ 209.435906][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4166'. [ 209.454943][T15503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.467383][T15503] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.478666][T15511] loop3: detected capacity change from 0 to 512 [ 209.487195][T15511] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.510103][T15511] EXT4-fs (loop3): failed to initialize system zone (-117) [ 209.517731][T15511] EXT4-fs (loop3): mount failed [ 209.550604][T15518] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.4164: iget: bogus i_mode (0) [ 209.570046][T15518] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.4164: iget: bogus i_mode (0) [ 209.599483][T15518] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4164: bg 0: block 345: padding at end of block bitmap is not set [ 209.677440][T15522] loop2: detected capacity change from 0 to 2048 [ 209.732311][T15522] Alternate GPT is invalid, using primary GPT. [ 209.738964][T15522] loop2: p1 p2 p3 [ 209.870519][ T29] kauditd_printk_skb: 555 callbacks suppressed [ 209.870537][ T29] audit: type=1326 audit(2000000004.900:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.0.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6cfedde929 code=0x7ffc0000 [ 209.964625][ T29] audit: type=1400 audit(2000000005.000:7690): avc: denied { setopt } for pid=15525 comm="syz.2.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.988429][ T29] audit: type=1400 audit(2000000005.030:7691): avc: denied { bind } for pid=15525 comm="syz.2.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.007963][ T29] audit: type=1400 audit(2000000005.030:7692): avc: denied { name_bind } for pid=15525 comm="syz.2.4172" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 210.029819][ T29] audit: type=1400 audit(2000000005.030:7693): avc: denied { node_bind } for pid=15525 comm="syz.2.4172" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 210.051888][ T29] audit: type=1400 audit(2000000005.030:7694): avc: denied { write } for pid=15525 comm="syz.2.4172" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.073533][ T29] audit: type=1400 audit(2000000005.030:7695): avc: denied { connect } for pid=15525 comm="syz.2.4172" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.095145][ T29] audit: type=1400 audit(2000000005.030:7696): avc: denied { name_connect } for pid=15525 comm="syz.2.4172" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 210.121480][T15503] ================================================================== [ 210.129611][T15503] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 210.139540][T15503] [ 210.141874][T15503] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 210.149946][T15503] tick_do_update_jiffies64+0x113/0x1c0 [ 210.155682][T15503] tick_nohz_handler+0x7f/0x2d0 [ 210.160540][T15503] __hrtimer_run_queues+0x20c/0x5a0 [ 210.165746][T15503] hrtimer_interrupt+0x21a/0x460 [ 210.170717][T15503] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 210.176624][T15503] sysvec_apic_timer_interrupt+0x6f/0x80 [ 210.182283][T15503] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 210.188266][T15503] kcsan_setup_watchpoint+0x415/0x430 [ 210.193651][T15503] super_cache_count+0x103/0x160 [ 210.198593][T15503] do_shrink_slab+0x60/0x680 [ 210.203203][T15503] shrink_slab+0x448/0x760 [ 210.207634][T15503] shrink_node+0x6c3/0x2120 [ 210.212148][T15503] do_try_to_free_pages+0x3f6/0xcd0 [ 210.217348][T15503] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 210.223244][T15503] try_charge_memcg+0x358/0x9e0 [ 210.228090][T15503] charge_memcg+0x51/0xc0 [ 210.232414][T15503] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 210.238408][T15503] __read_swap_cache_async+0x1df/0x350 [ 210.243904][T15503] swap_cluster_readahead+0x277/0x3e0 [ 210.249293][T15503] swapin_readahead+0xde/0x6f0 [ 210.254069][T15503] do_swap_page+0x301/0x2430 [ 210.258666][T15503] handle_mm_fault+0x9a5/0x2be0 [ 210.263522][T15503] do_user_addr_fault+0x636/0x1090 [ 210.268645][T15503] exc_page_fault+0x62/0xa0 [ 210.273148][T15503] asm_exc_page_fault+0x26/0x30 [ 210.278001][T15503] [ 210.280323][T15503] read to 0xffffffff868099c0 of 8 bytes by task 15503 on cpu 1: [ 210.287959][T15503] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 210.294233][T15503] count_shadow_nodes+0x6a/0x230 [ 210.299174][T15503] do_shrink_slab+0x60/0x680 [ 210.303776][T15503] shrink_slab+0x448/0x760 [ 210.308202][T15503] shrink_node+0x6c3/0x2120 [ 210.312711][T15503] do_try_to_free_pages+0x3f6/0xcd0 [ 210.317907][T15503] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 210.323801][T15503] try_charge_memcg+0x358/0x9e0 [ 210.328653][T15503] obj_cgroup_charge_pages+0xa6/0x150 [ 210.334032][T15503] __memcg_kmem_charge_page+0x9f/0x170 [ 210.339501][T15503] __alloc_frozen_pages_noprof+0x188/0x360 [ 210.345361][T15503] alloc_pages_mpol+0xb3/0x250 [ 210.350142][T15503] alloc_pages_noprof+0x90/0x130 [ 210.355097][T15503] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 210.360909][T15503] __kvmalloc_node_noprof+0x30f/0x4e0 [ 210.366289][T15503] ip_set_alloc+0x1f/0x30 [ 210.370622][T15503] hash_netiface_create+0x282/0x740 [ 210.375848][T15503] ip_set_create+0x3c9/0x960 [ 210.380452][T15503] nfnetlink_rcv_msg+0x4c6/0x590 [ 210.385402][T15503] netlink_rcv_skb+0x123/0x220 [ 210.390176][T15503] nfnetlink_rcv+0x16b/0x1690 [ 210.394861][T15503] netlink_unicast+0x59e/0x670 [ 210.399632][T15503] netlink_sendmsg+0x58b/0x6b0 [ 210.404426][T15503] __sock_sendmsg+0x145/0x180 [ 210.409110][T15503] ____sys_sendmsg+0x31e/0x4e0 [ 210.413891][T15503] ___sys_sendmsg+0x17b/0x1d0 [ 210.419015][T15503] __x64_sys_sendmsg+0xd4/0x160 [ 210.423984][T15503] x64_sys_call+0x2999/0x2fb0 [ 210.428671][T15503] do_syscall_64+0xd2/0x200 [ 210.433216][T15503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.439128][T15503] [ 210.441450][T15503] value changed: 0x00000000ffffdcaf -> 0x00000000ffffdcb0 [ 210.448552][T15503] [ 210.450879][T15503] Reported by Kernel Concurrency Sanitizer on: [ 210.457021][T15503] CPU: 1 UID: 0 PID: 15503 Comm: syz.0.4164 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 210.469169][T15503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.479226][T15503] ================================================================== [ 210.521164][ T29] audit: type=1400 audit(2000000005.530:7697): avc: denied { setopt } for pid=15525 comm="syz.2.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 210.529596][T15503] syz.0.4164 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 210.555209][T15503] CPU: 1 UID: 0 PID: 15503 Comm: syz.0.4164 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 210.555237][T15503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.555252][T15503] Call Trace: [ 210.555338][T15503] [ 210.555347][T15503] __dump_stack+0x1d/0x30 [ 210.555433][T15503] dump_stack_lvl+0xe8/0x140 [ 210.555457][T15503] dump_stack+0x15/0x1b [ 210.555534][T15503] dump_header+0x81/0x220 [ 210.555573][T15503] oom_kill_process+0x334/0x3f0 [ 210.555606][T15503] out_of_memory+0x979/0xb80 [ 210.555672][T15503] try_charge_memcg+0x5e6/0x9e0 [ 210.555708][T15503] obj_cgroup_charge_pages+0xa6/0x150 [ 210.555746][T15503] __memcg_kmem_charge_page+0x9f/0x170 [ 210.555803][T15503] __alloc_frozen_pages_noprof+0x188/0x360 [ 210.555850][T15503] alloc_pages_mpol+0xb3/0x250 [ 210.555974][T15503] alloc_pages_noprof+0x90/0x130 [ 210.556011][T15503] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 210.556055][T15503] __kvmalloc_node_noprof+0x30f/0x4e0 [ 210.556095][T15503] ? ip_set_alloc+0x1f/0x30 [ 210.556123][T15503] ? ip_set_alloc+0x1f/0x30 [ 210.556149][T15503] ? hash_netiface_create+0x21b/0x740 [ 210.556225][T15503] ? __kmalloc_cache_noprof+0x189/0x320 [ 210.556249][T15503] ip_set_alloc+0x1f/0x30 [ 210.556272][T15503] hash_netiface_create+0x282/0x740 [ 210.556304][T15503] ? __pfx_hash_netiface_create+0x10/0x10 [ 210.556327][T15503] ip_set_create+0x3c9/0x960 [ 210.556430][T15503] ? __nla_parse+0x40/0x60 [ 210.556450][T15503] nfnetlink_rcv_msg+0x4c6/0x590 [ 210.556537][T15503] ? put_dec+0xd3/0xe0 [ 210.556579][T15503] ? selinux_capable+0x1f9/0x270 [ 210.556602][T15503] netlink_rcv_skb+0x123/0x220 [ 210.556673][T15503] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 210.556774][T15503] nfnetlink_rcv+0x16b/0x1690 [ 210.556800][T15503] ? __kfree_skb+0x109/0x150 [ 210.556830][T15503] ? nlmon_xmit+0x4f/0x60 [ 210.556901][T15503] ? consume_skb+0x49/0x150 [ 210.556970][T15503] ? nlmon_xmit+0x4f/0x60 [ 210.556999][T15503] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 210.557106][T15503] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 210.557228][T15503] ? __dev_queue_xmit+0x182/0x1fb0 [ 210.557264][T15503] ? ref_tracker_free+0x37d/0x3e0 [ 210.557306][T15503] ? __netlink_deliver_tap+0x4dc/0x500 [ 210.557381][T15503] netlink_unicast+0x59e/0x670 [ 210.557411][T15503] netlink_sendmsg+0x58b/0x6b0 [ 210.557449][T15503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.557489][T15503] __sock_sendmsg+0x145/0x180 [ 210.557507][T15503] ____sys_sendmsg+0x31e/0x4e0 [ 210.557583][T15503] ___sys_sendmsg+0x17b/0x1d0 [ 210.557632][T15503] __x64_sys_sendmsg+0xd4/0x160 [ 210.557661][T15503] x64_sys_call+0x2999/0x2fb0 [ 210.557686][T15503] do_syscall_64+0xd2/0x200 [ 210.557777][T15503] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.557844][T15503] ? clear_bhb_loop+0x40/0x90 [ 210.557898][T15503] ? clear_bhb_loop+0x40/0x90 [ 210.557918][T15503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.557936][T15503] RIP: 0033:0x7f6cfedde929 [ 210.557948][T15503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.558038][T15503] RSP: 002b:00007f6cfd447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.558057][T15503] RAX: ffffffffffffffda RBX: 00007f6cff005fa0 RCX: 00007f6cfedde929 [ 210.558067][T15503] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 210.558077][T15503] RBP: 00007f6cfee60ab1 R08: 0000000000000000 R09: 0000000000000000 [ 210.558087][T15503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.558097][T15503] R13: 0000000000000000 R14: 00007f6cff005fa0 R15: 00007ffc3b618f18 [ 210.558214][T15503] [ 210.558221][T15503] memory: usage 307200kB, limit 307200kB, failcnt 279 [ 210.920761][T15503] memory+swap: usage 308436kB, limit 9007199254740988kB, failcnt 0 [ 210.928818][T15503] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 210.936205][T15503] Memory cgroup stats for /syz0: [ 210.936455][T15503] cache 12288 [ 210.944870][T15503] rss 0 [ 210.947665][T15503] shmem 0 [ 210.950594][T15503] mapped_file 0 [ 210.954084][T15503] dirty 0 [ 210.957016][T15503] writeback 0 [ 210.960306][T15503] workingset_refault_anon 5172 [ 210.965092][T15503] workingset_refault_file 190 [ 210.969886][T15503] swap 1265664 [ 210.973332][T15503] swapcached 4096 [ 210.976997][T15503] nr_memmap_boot_pages 78525 [ 210.981639][T15503] pgpgin 78519 [ 210.985000][T15503] pglazyfree 131998 [ 210.988798][T15503] pgfault 682 [ 210.992216][T15503] a_other 4096 [ 210.995612][T15503] inactive_anon 0 [ 210.999234][T15503] active_anon 0 [ 211.002806][T15503] inactive_file 20480 [ 211.006779][T15503] active_file 0 [ 211.010231][T15503] hierarchical_memory_limit 314572800 [ 211.015647][T15503] hierarchical_memsw_limit 9223372036854771712 [ 211.021982][T15503] total_cache 12288 [ 211.025827][T15503] total_rss 0 [ 211.029100][T15503] total_shmem 0 [ 211.032570][T15503] total_mapped_file 0 [ 211.036535][T15503] total_dirty 0 [ 211.039979][T15503] total_writeback 0 [ 211.043817][T15503] total_workingset_refault_anon 5172 [ 211.049105][T15503] total_workingset_refault_file 190 [ 211.054349][T15503] total_swap 1265664 [ 211.058308][T15503] total_swapcached 4096 [ 211.062468][T15503] total_nr_memmap_boot_pages 78525 [ 211.067687][T15503] total_pgpgin 78519 [ 211.071603][T15503] total_pglazyfree 131998 [ 211.075938][T15503] total_pgfault 682 [ 211.079744][T15503] total_a_other 4096 [ 211.083654][T15503] total_inactive_anon 0 [ 211.087927][T15503] total_active_anon 0 [ 211.091930][T15503] total_inactive_file 20480 [ 211.096424][T15503] total_active_file 0 [ 211.100481][T15503] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4164,pid=15501,uid=0 [ 211.115224][T15503] Memory cgroup out of memory: Killed process 15501 (syz.0.4164) total-vm:95796kB, anon-rss:940kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 211.265837][T12796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.