last executing test programs: 2.445518114s ago: executing program 3 (id=579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@multicast2}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d4, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 2.417234546s ago: executing program 3 (id=581): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000008500000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000500), 0x4) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f00000019c0)={@dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010100, 0x0, "544e6b24af869c8bcb343306faffff1400165fadcc19dc1a4d5b370e4d00", 0x0, 0x0, 0xfffffffd}, 0x3c) 2.358318021s ago: executing program 3 (id=582): gettid() r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r4 = dup2(r3, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200020a, 0x1}) 2.25426289s ago: executing program 3 (id=584): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ed792335c86bcc3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) keyctl$link(0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sys_enter\x00', r4}, 0x10) lsm_set_self_attr(0x67, 0x0, 0x20, 0x0) pipe(&(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000600)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) getsockopt$bt_hci(r6, 0x0, 0x1, 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) 1.927393067s ago: executing program 1 (id=594): gettid() r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r4 = dup2(r3, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200020a, 0x1}) 1.920484468s ago: executing program 0 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0xee00) keyctl$chown(0x4, r2, 0x0, 0x0) 1.835160766s ago: executing program 0 (id=596): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000000000000000000210000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x7}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) 1.757418672s ago: executing program 0 (id=597): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRESDEC], 0x0, 0x648, &(0x7f00000019c0)="$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") 1.625474663s ago: executing program 1 (id=599): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ed792335c86bcc3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) keyctl$link(0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sys_enter\x00', r4}, 0x10) lsm_set_self_attr(0x67, 0x0, 0x20, 0x0) pipe(&(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000600)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) getsockopt$bt_hci(r6, 0x0, 0x1, 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x6, &(0x7f0000000000)) 1.388787643s ago: executing program 3 (id=602): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 1.155249683s ago: executing program 2 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@multicast2}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d4, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 1.133003825s ago: executing program 2 (id=609): gettid() r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r4 = dup2(r3, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200020a, 0x1}) 1.052604031s ago: executing program 1 (id=610): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x101800, 0x81) finit_module(r1, 0x0, 0x1) 997.694236ms ago: executing program 1 (id=612): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ed792335c86bcc3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) keyctl$link(0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sys_enter\x00', r4}, 0x10) lsm_set_self_attr(0x67, 0x0, 0x20, 0x0) pipe(&(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000600)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) getsockopt$bt_hci(r6, 0x0, 0x1, 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) 860.180728ms ago: executing program 0 (id=616): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) close(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect$cdc_ecm(0x1, 0x59, &(0x7f00000008c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xca, 0xa0, 0x2b, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x55}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0xfffa, 0x40}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x2}, @obex={0x5, 0x24, 0x15, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfd, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x2, 0xfd}}}}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x6, 0xb4, 0x40, 0x60, 0x6}, 0x5, &(0x7f0000000940)={0x5, 0xf, 0x5}, 0x8, [{0x1b, &(0x7f0000000980)=@string={0x1b, 0x3, "c886db7b940b1301e3db5ab6e62079477bc0403c39ed2343cc"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x42f}}, {0xfc, &(0x7f0000000b00)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0xc01}}, {0xd6, &(0x7f0000001880)=@string={0xd6, 0x3, "1e371b521fda59715503c64f57e23f199821308ff397cf0a58f57e8f6a3affd0826e75a2368791634d1c6f29c7107e60785916699d81dfd6f21e9b6c81b224b0a62edd01a52a87458aa45f68ea2e78229ce8ebed7e3c8ee1dc1ff410f49e2d92f189a005c88d42b62c916af7863bd2962b0550b656f1f6bbf6b0388039cbc5258b87e4bb51d1f30f09aca97c0d68ba618d6798ba699bad79ce90ea24a8d7663eddd1f1a5835ddc92a17f596604c7db867d91bdc240e09b52a672a8b82feb1ff93853cccf22e82e3aae7072fcbe7921896970b6f6"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x180a}}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$caif_seqpacket(0x25, 0x5, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r7, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r7, &(0x7f0000000300), 0x19ffe) 731.370318ms ago: executing program 2 (id=618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) 651.098386ms ago: executing program 2 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@multicast2}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d4, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 650.620215ms ago: executing program 2 (id=620): syz_io_uring_setup(0x4973, &(0x7f0000000380)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2800, 0x0, 0x0, 0x7, 0x800000, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x2a, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 558.164113ms ago: executing program 2 (id=621): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ed792335c86bcc3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) keyctl$link(0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sys_enter\x00', r4}, 0x10) lsm_set_self_attr(0x67, 0x0, 0x20, 0x0) pipe(&(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000600)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) getsockopt$bt_hci(r6, 0x0, 0x1, 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x6, &(0x7f0000000000)) 447.391463ms ago: executing program 3 (id=623): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') read$ptp(r4, &(0x7f0000000040)=""/40, 0x28) 319.261293ms ago: executing program 4 (id=624): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) fsetxattr$security_capability(r4, &(0x7f00000002c0), &(0x7f0000000340)=@v3={0x3000000, [{0x80}, {0x0, 0x9}]}, 0x18, 0x1) 299.548075ms ago: executing program 4 (id=625): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000000000000000000210000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x7}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) 262.534608ms ago: executing program 4 (id=626): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x0, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x24881) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='kfree\x00'}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=r0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r5, 0x0, 0x4}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000380)}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="eaff02bfc2f6684edd2ba023654be4d5dfdf2c1988ac8e977bffe5a6e7d57767d4d3ff589f5fdae6b2f5dfe745d9e9821cd5174cef645c746ed39b914ca0824ef10e210b60e2c99501a5ae0a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) 237.171261ms ago: executing program 4 (id=627): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x4e, 0x0}, 0x0) close(r0) 215.856222ms ago: executing program 4 (id=628): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 110.346961ms ago: executing program 1 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0xee00) keyctl$chown(0x4, r1, 0x0, 0x0) 109.733441ms ago: executing program 1 (id=630): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c804}, 0x4004000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='ext4_da_update_reserve_space\x00', r1}, 0x18) r2 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") openat(0xffffffffffffff9c, 0x0, 0x107042, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x1, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000000009030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163767461700004000280"], 0x34}}, 0x800) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="190000000400000008000000080000", @ANYBLOB="3bee449b7ffec7174aaf5263861d246fd7aa974ab62a0b0793af2ff40fc74a900199d8895e821d251813e2bf25da5cfca15734a46a1b258030b25610cf3eadcc7b70a42bc0faf1904f0b17d148f958958bc67431eb2467df4bec13e996878e54fd6c8969305d669e1968e1b6a31fbb9c457de6ee897bb287d5640b3de4e54112075c1c7cfbeafed70bbf38c309f7684ff252f7fabb3d33f984f3a57f200d2e930aa0de44495cd6", @ANYRES64=r2, @ANYRES32, @ANYRES8], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 42.241907ms ago: executing program 0 (id=631): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff00000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x4e, 0x0}, 0x0) close(r0) 21.099568ms ago: executing program 4 (id=632): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x40bc5311, &(0x7f00000002c0)={0x9, @tick=0x10f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc08c5335, &(0x7f0000000180)={0x4000000, 0x0, {0x2, 0x1, 0x0, 0x3, 0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r5 = syz_open_procfs$namespace(r0, &(0x7f0000000580)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r4, 0x1, 0x0, 0xfffffffe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 0s ago: executing program 0 (id=633): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x1492fe, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)='o', 0x1}], 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/166, 0xa6}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000780)=""/4096, 0x1}) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5415, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, 0x0, 0x4080401) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="00004f72064f3c88d8bc909e5d5a0000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000000000004000880340004800500030000000000050003000000000005000300000000000500030000000000050003000000000042fd0300000000000800020001000000"], 0x5c}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x5333578052521f3b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x7, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x80002}, @call={0x85, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fallocate(r0, 0x3, 0x0, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): [ 21.054883][ T29] audit: type=1400 audit(1729078830.299:81): avc: denied { read } for pid=2952 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 27.578309][ T29] audit: type=1400 audit(1729078836.819:82): avc: denied { mounton } for pid=3257 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.579557][ T3257] cgroup: Unknown subsys name 'net' [ 27.601034][ T29] audit: type=1400 audit(1729078836.819:83): avc: denied { mount } for pid=3257 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.628489][ T29] audit: type=1400 audit(1729078836.849:84): avc: denied { unmount } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.804231][ T3257] cgroup: Unknown subsys name 'cpuset' [ 27.810415][ T3257] cgroup: Unknown subsys name 'rlimit' [ 27.939135][ T29] audit: type=1400 audit(1729078837.179:85): avc: denied { setattr } for pid=3257 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.963434][ T29] audit: type=1400 audit(1729078837.179:86): avc: denied { create } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.984023][ T29] audit: type=1400 audit(1729078837.179:87): avc: denied { write } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.004441][ T29] audit: type=1400 audit(1729078837.179:88): avc: denied { read } for pid=3257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.024747][ T29] audit: type=1400 audit(1729078837.189:89): avc: denied { mounton } for pid=3257 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.033508][ T3260] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.049655][ T29] audit: type=1400 audit(1729078837.189:90): avc: denied { mount } for pid=3257 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.081515][ T29] audit: type=1400 audit(1729078837.299:91): avc: denied { relabelto } for pid=3260 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.127038][ T3257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.958074][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 30.008805][ T3271] chnl_net:caif_netlink_parms(): no params data found [ 30.047180][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 30.059325][ T3274] chnl_net:caif_netlink_parms(): no params data found [ 30.100161][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.107336][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.114559][ T3268] bridge_slave_0: entered allmulticast mode [ 30.120918][ T3268] bridge_slave_0: entered promiscuous mode [ 30.129516][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.136680][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.143872][ T3268] bridge_slave_1: entered allmulticast mode [ 30.150447][ T3268] bridge_slave_1: entered promiscuous mode [ 30.166181][ T3276] chnl_net:caif_netlink_parms(): no params data found [ 30.214488][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.221650][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.229063][ T3271] bridge_slave_0: entered allmulticast mode [ 30.235357][ T3271] bridge_slave_0: entered promiscuous mode [ 30.247277][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.265533][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.272601][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.279971][ T3271] bridge_slave_1: entered allmulticast mode [ 30.286375][ T3271] bridge_slave_1: entered promiscuous mode [ 30.307769][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.316959][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.324076][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.331266][ T3274] bridge_slave_0: entered allmulticast mode [ 30.337864][ T3274] bridge_slave_0: entered promiscuous mode [ 30.350886][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.357984][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.365148][ T3267] bridge_slave_0: entered allmulticast mode [ 30.371583][ T3267] bridge_slave_0: entered promiscuous mode [ 30.378184][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.385271][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.392399][ T3267] bridge_slave_1: entered allmulticast mode [ 30.398833][ T3267] bridge_slave_1: entered promiscuous mode [ 30.413743][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.420803][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.427964][ T3274] bridge_slave_1: entered allmulticast mode [ 30.434518][ T3274] bridge_slave_1: entered promiscuous mode [ 30.460928][ T3268] team0: Port device team_slave_0 added [ 30.467633][ T3268] team0: Port device team_slave_1 added [ 30.478703][ T3271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.488750][ T3274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.501310][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.520581][ T3274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.530793][ T3271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.549665][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.560412][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.567420][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.593473][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.604731][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.611676][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.637686][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.657206][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.664304][ T3276] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.671479][ T3276] bridge_slave_0: entered allmulticast mode [ 30.678085][ T3276] bridge_slave_0: entered promiscuous mode [ 30.706560][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.713786][ T3276] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.720933][ T3276] bridge_slave_1: entered allmulticast mode [ 30.727404][ T3276] bridge_slave_1: entered promiscuous mode [ 30.739790][ T3267] team0: Port device team_slave_0 added [ 30.746690][ T3267] team0: Port device team_slave_1 added [ 30.752831][ T3274] team0: Port device team_slave_0 added [ 30.759298][ T3271] team0: Port device team_slave_0 added [ 30.771211][ T3276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.785597][ T3274] team0: Port device team_slave_1 added [ 30.791845][ T3271] team0: Port device team_slave_1 added [ 30.803212][ T3276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.839880][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.846877][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.872891][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.894742][ T3268] hsr_slave_0: entered promiscuous mode [ 30.900876][ T3268] hsr_slave_1: entered promiscuous mode [ 30.907560][ T3276] team0: Port device team_slave_0 added [ 30.914191][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.921144][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.947153][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.958091][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.965065][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.991009][ T3274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.001920][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.008925][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.034887][ T3271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.051727][ T3276] team0: Port device team_slave_1 added [ 31.066080][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.073038][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.099013][ T3274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.113855][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.120800][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.146726][ T3271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.186330][ T3276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.193312][ T3276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.219255][ T3276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.231776][ T3267] hsr_slave_0: entered promiscuous mode [ 31.238240][ T3267] hsr_slave_1: entered promiscuous mode [ 31.244199][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.251741][ T3267] Cannot create hsr debugfs directory [ 31.270198][ T3276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.277184][ T3276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.303167][ T3276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.325403][ T3271] hsr_slave_0: entered promiscuous mode [ 31.331344][ T3271] hsr_slave_1: entered promiscuous mode [ 31.337259][ T3271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.344844][ T3271] Cannot create hsr debugfs directory [ 31.357440][ T3274] hsr_slave_0: entered promiscuous mode [ 31.363550][ T3274] hsr_slave_1: entered promiscuous mode [ 31.369375][ T3274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.376947][ T3274] Cannot create hsr debugfs directory [ 31.421944][ T3276] hsr_slave_0: entered promiscuous mode [ 31.428492][ T3276] hsr_slave_1: entered promiscuous mode [ 31.435868][ T3276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.443552][ T3276] Cannot create hsr debugfs directory [ 31.604448][ T3268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.617659][ T3268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.626272][ T3268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.634719][ T3271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.643258][ T3268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.651763][ T3271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.660398][ T3271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.669724][ T3271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.697491][ T3274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.706086][ T3274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.715151][ T3274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.727873][ T3274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.760145][ T3267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.778837][ T3267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.788636][ T3267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.804140][ T3267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.812548][ T3276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.821381][ T3276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.830844][ T3276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.839879][ T3276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.880917][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.907597][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.925044][ T2087] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.932138][ T2087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.941147][ T2087] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.948223][ T2087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.962817][ T3274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.998781][ T3271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.011338][ T3274] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.024866][ T2087] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.032007][ T2087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.041061][ T2087] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.048168][ T2087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.060957][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.076088][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.096031][ T3271] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.116989][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.131227][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.138439][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.155315][ T3276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.167195][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.174288][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.184390][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.191523][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.217913][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.225011][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.247983][ T3276] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.258530][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.283317][ T2087] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.290396][ T2087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.300989][ T2087] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.308138][ T2087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.348565][ T3274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.373880][ T3276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.427679][ T3271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.494455][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.518877][ T3276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.544737][ T3274] veth0_vlan: entered promiscuous mode [ 32.565622][ T3274] veth1_vlan: entered promiscuous mode [ 32.580771][ T3271] veth0_vlan: entered promiscuous mode [ 32.609429][ T3271] veth1_vlan: entered promiscuous mode [ 32.632936][ T3271] veth0_macvtap: entered promiscuous mode [ 32.651720][ T3271] veth1_macvtap: entered promiscuous mode [ 32.662531][ T3274] veth0_macvtap: entered promiscuous mode [ 32.670001][ T3274] veth1_macvtap: entered promiscuous mode [ 32.688657][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.699188][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.709758][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.721469][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.736168][ T3268] veth0_vlan: entered promiscuous mode [ 32.747165][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.758621][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.769358][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.779970][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.793642][ T3276] veth0_vlan: entered promiscuous mode [ 32.799995][ T3267] veth0_vlan: entered promiscuous mode [ 32.809241][ T3274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.818077][ T3274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.826954][ T3274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.835794][ T3274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.847029][ T3271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.855844][ T3271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.864569][ T3271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.873294][ T3271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.889303][ T3267] veth1_vlan: entered promiscuous mode [ 32.895822][ T3268] veth1_vlan: entered promiscuous mode [ 32.909129][ T3276] veth1_vlan: entered promiscuous mode [ 32.919833][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 32.919848][ T29] audit: type=1400 audit(1729078842.159:110): avc: denied { mounton } for pid=3271 comm="syz-executor" path="/root/syzkaller.VDkrx2/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.930704][ T3268] veth0_macvtap: entered promiscuous mode [ 32.964647][ T3268] veth1_macvtap: entered promiscuous mode [ 32.974684][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.985235][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.993313][ T29] audit: type=1400 audit(1729078842.159:111): avc: denied { mount } for pid=3271 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.995182][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.017060][ T29] audit: type=1400 audit(1729078842.159:112): avc: denied { mounton } for pid=3271 comm="syz-executor" path="/root/syzkaller.VDkrx2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.017131][ T29] audit: type=1400 audit(1729078842.159:113): avc: denied { mount } for pid=3271 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.017151][ T29] audit: type=1400 audit(1729078842.159:114): avc: denied { mounton } for pid=3271 comm="syz-executor" path="/root/syzkaller.VDkrx2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.027622][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.052759][ T29] audit: type=1400 audit(1729078842.159:115): avc: denied { mounton } for pid=3271 comm="syz-executor" path="/root/syzkaller.VDkrx2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.112236][ T3271] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.138508][ T29] audit: type=1400 audit(1729078842.159:116): avc: denied { unmount } for pid=3271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.156548][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.172682][ T29] audit: type=1400 audit(1729078842.199:117): avc: denied { mounton } for pid=3271 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.214917][ T3267] veth0_macvtap: entered promiscuous mode [ 33.222507][ T3267] veth1_macvtap: entered promiscuous mode [ 33.230924][ T29] audit: type=1400 audit(1729078842.469:118): avc: denied { read write } for pid=3271 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.250108][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.255149][ T29] audit: type=1400 audit(1729078842.469:119): avc: denied { open } for pid=3271 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.265533][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.265543][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.310033][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.321053][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.352594][ T3276] veth0_macvtap: entered promiscuous mode [ 33.360932][ T3268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.369758][ T3268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.378656][ T3268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.387488][ T3268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.405126][ T3276] veth1_macvtap: entered promiscuous mode [ 33.413847][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.424490][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.434355][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.444851][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.454742][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.465222][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.476515][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.488345][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.499010][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.508977][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.519559][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.525319][ T3414] loop3: detected capacity change from 0 to 2048 [ 33.529474][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.529507][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.529525][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.566616][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.577415][ T3276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.578333][ T3414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.598234][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.608796][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.618710][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.629152][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.639088][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.649559][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.660562][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.671836][ T3421] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 33.672832][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.688467][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.698322][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.708814][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.718779][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.729311][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.739374][ T3276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.749961][ T3276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.771744][ T3276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.782206][ T3276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.791049][ T3276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.800032][ T3276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.808902][ T3276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.820985][ T3267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.829871][ T3267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.838697][ T3267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.847477][ T3267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.874993][ T3414] syz.3.4 (3414) used greatest stack depth: 10368 bytes left [ 33.893963][ T3274] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.000387][ T3433] loop1: detected capacity change from 0 to 2048 [ 34.014272][ T3433] ======================================================= [ 34.014272][ T3433] WARNING: The mand mount option has been deprecated and [ 34.014272][ T3433] and is ignored by this kernel. Remove the mand [ 34.014272][ T3433] option from the mount to silence this warning. [ 34.014272][ T3433] ======================================================= [ 34.049457][ T3433] ext3: Unknown parameter 'obj_type' [ 34.087754][ T3428] loop4: detected capacity change from 0 to 4096 [ 34.107841][ T3439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.116920][ T3439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.132589][ T3428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.136871][ T3433] loop1: detected capacity change from 0 to 1024 [ 34.231181][ T3433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.244146][ T3428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=3428 comm=+}[@ [ 34.330548][ T3433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.545932][ T3448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.573977][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 34.583674][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 34.618392][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.651471][ T3451] ªªªªªª: renamed from vlan0 (while UP) [ 34.664576][ T3451] process 'syz.2.12' launched './file0' with NULL argv: empty string added [ 34.715295][ T3457] syz.2.14 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.814593][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.858975][ T3469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 34.888093][ T3469] ------------[ cut here ]------------ [ 34.893645][ T3469] refcount_t: underflow; use-after-free. [ 34.899823][ T3469] WARNING: CPU: 1 PID: 3469 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 34.909308][ T3469] Modules linked in: [ 34.913244][ T3469] CPU: 1 UID: 0 PID: 3469 Comm: syz.4.17 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 34.923924][ T3469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.934168][ T3469] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 34.940723][ T3469] Code: 72 ff ff ff e8 8b 85 71 ff 48 c7 c7 3e d9 b2 86 e8 2f 6b 8a ff c6 05 f6 30 f4 04 01 90 48 c7 c7 85 a2 1b 86 e8 8b 4b 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 5c 85 71 ff 48 c7 c7 3b d9 b2 86 e8 [ 34.960412][ T3469] RSP: 0018:ffffc90002217468 EFLAGS: 00010246 [ 34.966574][ T3469] RAX: 39a473b912fd4a00 RBX: ffff8881045acfe4 RCX: 0000000000040000 [ 34.974660][ T3469] RDX: ffffc900035ab000 RSI: 0000000000004f2a RDI: 0000000000004f2b [ 34.978419][ T3480] netlink: 256 bytes leftover after parsing attributes in process `syz.3.22'. [ 34.982735][ T3469] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 34.982755][ T3469] R10: 0001ffffffffffff R11: ffff88810403e300 R12: ffff8881153dc468 [ 35.007626][ T3469] R13: ffff8881153dc400 R14: ffff8881045acfe4 R15: 0000000000000000 [ 35.015660][ T3469] FS: 00007f7b2e7b16c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 35.024635][ T3469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.031224][ T3469] CR2: 00007f7b2fcc7ab8 CR3: 0000000117002000 CR4: 00000000003506f0 [ 35.039306][ T3469] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.047328][ T3469] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.055334][ T3469] Call Trace: [ 35.058640][ T3469] [ 35.061576][ T3469] ? __warn+0x141/0x350 [ 35.065801][ T3469] ? report_bug+0x315/0x420 [ 35.070325][ T3469] ? refcount_warn_saturate+0x1c6/0x230 [ 35.075919][ T3469] ? handle_bug+0x60/0x90 [ 35.080270][ T3469] ? exc_invalid_op+0x1a/0x50 [ 35.085039][ T3469] ? asm_exc_invalid_op+0x1a/0x20 [ 35.090151][ T3469] ? __warn_printk+0x167/0x1b0 [ 35.095026][ T3469] ? refcount_warn_saturate+0x1c6/0x230 [ 35.100586][ T3469] ? refcount_warn_saturate+0x1c5/0x230 [ 35.106192][ T3469] sk_skb_reason_drop+0xe9/0x290 [ 35.111228][ T3469] j1939_session_put+0x157/0x2a0 [ 35.116233][ T3469] j1939_cancel_active_session+0x1d4/0x220 [ 35.122076][ T3469] j1939_netdev_notify+0x13a/0x1b0 [ 35.127236][ T3469] ? __pfx_j1939_netdev_notify+0x10/0x10 [ 35.132959][ T3469] raw_notifier_call_chain+0x6f/0x1d0 [ 35.138393][ T3469] call_netdevice_notifiers_info+0xae/0x100 [ 35.144342][ T3469] dev_close_many+0x174/0x240 [ 35.149034][ T3469] unregister_netdevice_many_notify+0x263/0x11b0 [ 35.155538][ T3469] ? __pfx_vxcan_dellink+0x10/0x10 [ 35.160740][ T3469] rtnl_dellink+0x380/0x580 [ 35.165376][ T3469] ? should_fail_ex+0x31/0x230 [ 35.170239][ T3469] ? security_capable+0x81/0x90 [ 35.175147][ T3469] ? ns_capable+0x7d/0xb0 [ 35.179498][ T3469] ? __pfx_rtnl_dellink+0x10/0x10 [ 35.184599][ T3469] rtnetlink_rcv_msg+0x6aa/0x710 [ 35.189589][ T3469] ? __dev_queue_xmit+0x161/0x2040 [ 35.194844][ T3469] ? ref_tracker_alloc+0x1f5/0x2f0 [ 35.200056][ T3469] netlink_rcv_skb+0x12c/0x230 [ 35.204866][ T3469] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 35.210410][ T3469] rtnetlink_rcv+0x1c/0x30 [ 35.214896][ T3469] netlink_unicast+0x599/0x670 [ 35.219761][ T3469] netlink_sendmsg+0x5cc/0x6e0 [ 35.224626][ T3469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.230037][ T3469] __sock_sendmsg+0x140/0x180 [ 35.234797][ T3469] ____sys_sendmsg+0x312/0x410 [ 35.239695][ T3469] __sys_sendmsg+0x1d9/0x270 [ 35.244410][ T3469] __x64_sys_sendmsg+0x46/0x50 [ 35.249284][ T3469] x64_sys_call+0x2689/0x2d60 [ 35.254084][ T3469] do_syscall_64+0xc9/0x1c0 [ 35.258612][ T3469] ? clear_bhb_loop+0x55/0xb0 [ 35.263404][ T3469] ? clear_bhb_loop+0x55/0xb0 [ 35.268121][ T3469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.274058][ T3469] RIP: 0033:0x7f7b2fb3dff9 [ 35.278502][ T3469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.298197][ T3469] RSP: 002b:00007f7b2e7b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.306693][ T3469] RAX: ffffffffffffffda RBX: 00007f7b2fcf5f80 RCX: 00007f7b2fb3dff9 [ 35.314764][ T3469] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 35.322752][ T3469] RBP: 00007f7b2fbb0296 R08: 0000000000000000 R09: 0000000000000000 [ 35.331072][ T3469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.339087][ T3469] R13: 0000000000000000 R14: 00007f7b2fcf5f80 R15: 00007ffc96197bc8 [ 35.347097][ T3469] [ 35.350141][ T3469] ---[ end trace 0000000000000000 ]--- [ 35.563889][ T3488] loop2: detected capacity change from 0 to 164 [ 35.572726][ T3488] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 35.967629][ T3493] ªªªªªª: renamed from vlan0 (while UP) [ 35.980003][ T3496] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 35.991946][ T3496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.006272][ T3496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.016585][ T3496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.085064][ T3498] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 36.221888][ T3505] loop0: detected capacity change from 0 to 512 [ 36.246119][ T3505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.259668][ T3505] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.278132][ T3505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.474914][ T3523] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.483853][ T3523] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.492620][ T3523] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.501458][ T3523] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.510839][ T3523] vxlan0: entered promiscuous mode [ 36.516073][ T3523] vxlan0: entered allmulticast mode [ 36.526043][ T3523] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 36.535119][ T3523] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 36.544174][ T3523] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 36.553140][ T3523] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 36.584395][ T3528] 9pnet_fd: Insufficient options for proto=fd [ 36.761403][ T3535] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 36.788060][ T3537] loop1: detected capacity change from 0 to 2048 [ 36.795886][ T3537] EXT4-fs: Ignoring removed orlov option [ 36.804889][ T3537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.820353][ T3537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 36.836660][ T3537] hsr_slave_1 (unregistering): left promiscuous mode [ 36.940816][ T3541] mmap: syz.3.40 (3541) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.018540][ T3543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.41'. [ 37.027445][ T3543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.41'. [ 37.070410][ T3547] loop3: detected capacity change from 0 to 512 [ 37.095123][ T3547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.107954][ T3547] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.119169][ T3547] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.176153][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.213225][ T3553] blktrace: Concurrent blktraces are not allowed on loop7 [ 37.225358][ T3555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 37.234280][ T3555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 37.288667][ T3561] 9pnet_fd: Insufficient options for proto=fd [ 37.347607][ T3567] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 37.527001][ T3580] loop2: detected capacity change from 0 to 512 [ 37.534127][ T3578] loop0: detected capacity change from 0 to 2048 [ 37.544029][ T3578] EXT4-fs: Ignoring removed orlov option [ 37.575647][ T3580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.576060][ T3578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.608508][ T3580] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.626059][ T3580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.665895][ T3578] hsr_slave_1 (unregistering): left promiscuous mode [ 37.737352][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.870649][ T3601] 9pnet_fd: Insufficient options for proto=fd [ 37.911831][ T3604] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 37.932229][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 37.932245][ T29] audit: type=1326 audit(1729078847.169:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3602 comm="syz.1.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9d4dff9 code=0x0 [ 38.067451][ T3617] loop2: detected capacity change from 0 to 2048 [ 38.074998][ T3617] EXT4-fs: Ignoring removed orlov option [ 38.095551][ T3617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.119782][ T3617] hsr_slave_1 (unregistering): left promiscuous mode [ 38.165018][ T3276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.204190][ T3624] loop2: detected capacity change from 0 to 512 [ 38.229601][ T3624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.242180][ T3624] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.253381][ T3624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.275778][ T3624] blktrace: Concurrent blktraces are not allowed on loop5 [ 38.315283][ T3632] blktrace: Concurrent blktraces are not allowed on loop5 [ 38.371259][ T3637] 9pnet_fd: Insufficient options for proto=fd [ 38.389035][ T3641] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 38.428085][ T3643] random: crng reseeded on system resumption [ 38.444819][ T3647] loop3: detected capacity change from 0 to 2048 [ 38.451385][ T3647] EXT4-fs: Ignoring removed orlov option [ 38.461775][ T29] audit: type=1400 audit(1729078847.669:339): avc: denied { append } for pid=3642 comm="syz.0.79" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.484846][ T29] audit: type=1400 audit(1729078847.669:340): avc: denied { open } for pid=3642 comm="syz.0.79" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.537984][ T3647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.578739][ T3647] hsr_slave_1 (unregistering): left promiscuous mode [ 38.639760][ T3660] loop0: detected capacity change from 0 to 512 [ 38.666400][ T3660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.681256][ T3660] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.704929][ T3274] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.715499][ T3660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.757360][ T3660] blktrace: Concurrent blktraces are not allowed on loop1 [ 38.855789][ T3672] 9pnet_fd: Insufficient options for proto=fd [ 38.968545][ T3683] random: crng reseeded on system resumption [ 39.049482][ T29] audit: type=1326 audit(1729078848.289:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.1.98" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9d4dff9 code=0x0 [ 39.100575][ T3694] loop2: detected capacity change from 0 to 2048 [ 39.107871][ T3694] EXT4-fs: Ignoring removed orlov option [ 39.142310][ T3694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.171112][ T3699] loop3: detected capacity change from 0 to 512 [ 39.197909][ T3694] __nla_validate_parse: 27 callbacks suppressed [ 39.197927][ T3694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 39.224975][ T3699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.240918][ T3706] 9pnet_fd: Insufficient options for proto=fd [ 39.245360][ T3276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.247252][ T3699] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.274474][ T3699] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.292758][ T3710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 39.301805][ T3710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 39.483944][ T3721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'. [ 39.492976][ T3721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'. [ 39.574722][ T3729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 39.583719][ T3729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 39.598569][ T3727] random: crng reseeded on system resumption [ 39.754694][ T3736] 9pnet_fd: Insufficient options for proto=fd [ 39.764468][ T3738] loop0: detected capacity change from 0 to 2048 [ 39.771166][ T3738] EXT4-fs: Ignoring removed orlov option [ 39.796573][ T3738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.820990][ T3744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.115'. [ 39.830066][ T3744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.115'. [ 39.858532][ T3738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 39.886502][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.933246][ T3751] blktrace: Concurrent blktraces are not allowed on loop1 [ 39.942570][ T3749] loop2: detected capacity change from 0 to 512 [ 39.983162][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.010346][ T3749] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.031625][ T3749] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.084322][ T3765] random: crng reseeded on system resumption [ 40.091526][ T3767] 9pnet_fd: Insufficient options for proto=fd [ 40.234345][ T29] audit: type=1326 audit(1729078849.469:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3775 comm="syz.3.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x0 [ 40.287176][ T3780] loop2: detected capacity change from 0 to 2048 [ 40.296299][ T3780] EXT4-fs: Ignoring removed orlov option [ 40.328717][ T3780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.408042][ T3276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.535516][ T3802] 9pnet_fd: Insufficient options for proto=fd [ 40.589193][ T3807] loop2: detected capacity change from 0 to 512 [ 40.598460][ T3808] random: crng reseeded on system resumption [ 40.665838][ T3807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.681479][ T3807] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.692896][ T3807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.719557][ T3807] blktrace: Concurrent blktraces are not allowed on loop5 [ 40.802647][ T3820] blktrace: Concurrent blktraces are not allowed on loop5 [ 40.811162][ T3818] loop1: detected capacity change from 0 to 2048 [ 40.818654][ T3818] EXT4-fs: Ignoring removed orlov option [ 40.859695][ T3818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.934147][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.006815][ T3841] loop2: detected capacity change from 0 to 512 [ 41.027700][ T3841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.077813][ T3841] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.092837][ T3845] random: crng reseeded on system resumption [ 41.099249][ T3847] 9pnet_fd: Insufficient options for proto=fd [ 41.124748][ T3841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.309346][ T3859] blktrace: Concurrent blktraces are not allowed on loop5 [ 41.375885][ T3865] loop2: detected capacity change from 0 to 2048 [ 41.383786][ T3865] EXT4-fs: Ignoring removed orlov option [ 41.417152][ T3865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.430084][ T29] audit: type=1326 audit(1729078850.669:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.3.163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x0 [ 41.482163][ T3276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.506811][ T3878] 9pnet_fd: Insufficient options for proto=fd [ 41.565133][ T3885] random: crng reseeded on system resumption [ 41.580255][ T3887] loop2: detected capacity change from 0 to 512 [ 41.608475][ T3887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.622008][ T3887] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.633113][ T3887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.780516][ T3905] loop0: detected capacity change from 0 to 2048 [ 41.794686][ T3905] EXT4-fs: Ignoring removed orlov option [ 41.815008][ T3905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.887773][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.027386][ T3926] random: crng reseeded on system resumption [ 42.220745][ T3934] loop0: detected capacity change from 0 to 512 [ 42.246496][ T3934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.263174][ T3934] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.274610][ T3934] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.351574][ T3946] blktrace: Concurrent blktraces are not allowed on loop7 [ 42.401161][ T3948] loop2: detected capacity change from 0 to 2048 [ 42.425161][ T3948] EXT4-fs: Ignoring removed orlov option [ 42.479776][ T3958] random: crng reseeded on system resumption [ 42.542035][ T3948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.589910][ T3276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.645353][ T29] audit: type=1326 audit(1729078851.879:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3966 comm="syz.3.197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x0 [ 42.769539][ T3980] loop1: detected capacity change from 0 to 512 [ 42.795728][ T3980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.813138][ T3980] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.824202][ T3980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.908357][ T3997] random: crng reseeded on system resumption [ 42.918377][ T3995] loop2: detected capacity change from 0 to 2048 [ 42.927341][ T3995] EXT4-fs: Ignoring removed orlov option [ 42.983411][ T3995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.030864][ T3276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.072112][ T4014] blktrace: Concurrent blktraces are not allowed on loop1 [ 43.556699][ T4031] loop2: detected capacity change from 0 to 512 [ 43.651673][ T4031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.676022][ T4031] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.693808][ T4031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.712033][ T4031] blktrace: Concurrent blktraces are not allowed on loop5 [ 43.733958][ T4041] loop3: detected capacity change from 0 to 2048 [ 43.740710][ T4041] EXT4-fs: Ignoring removed orlov option [ 43.747486][ T4043] random: crng reseeded on system resumption [ 43.765448][ T4041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.814355][ T3274] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.950884][ T29] audit: type=1326 audit(1729078853.189:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.1.232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9d4dff9 code=0x0 [ 44.017374][ T4069] loop2: detected capacity change from 0 to 512 [ 44.055600][ T4069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.066911][ T4075] loop0: detected capacity change from 0 to 2048 [ 44.068914][ T4069] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.074801][ T4075] EXT4-fs: Ignoring removed orlov option [ 44.096841][ T4069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.108404][ T4075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.134331][ T4069] blktrace: Concurrent blktraces are not allowed on loop5 [ 44.169224][ T4083] random: crng reseeded on system resumption [ 44.242756][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.311107][ T4093] __nla_validate_parse: 64 callbacks suppressed [ 44.311123][ T4093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'. [ 44.326449][ T4093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.243'. [ 44.354947][ T4097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.245'. [ 44.364026][ T4097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.245'. [ 44.389377][ T4102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 44.398322][ T4102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 44.492413][ T4107] 9pnet: Could not find request transport: fd0x0000000000000003 [ 44.550652][ T4114] loop0: detected capacity change from 0 to 512 [ 44.575962][ T4114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.588925][ T4114] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.602613][ T4114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.788035][ T4119] loop0: detected capacity change from 0 to 2048 [ 44.796348][ T4119] EXT4-fs: Ignoring removed orlov option [ 44.867630][ T4119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.057176][ T4127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 45.086527][ T4125] random: crng reseeded on system resumption [ 45.100099][ T4129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.256'. [ 45.104827][ T29] audit: type=1400 audit(1729078854.349:346): avc: denied { mounton } for pid=4130 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.109032][ T4129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.256'. [ 45.210751][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.325414][ T4152] 9pnet: Could not find request transport: fd0x0000000000000003 [ 45.335596][ T4156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.263'. [ 45.373107][ T29] audit: type=1326 audit(1729078854.609:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4160 comm="syz.1.265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9d4dff9 code=0x0 [ 45.433691][ T4130] chnl_net:caif_netlink_parms(): no params data found [ 45.532268][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.539471][ T4130] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.568674][ T4130] bridge_slave_0: entered allmulticast mode [ 45.581075][ T4130] bridge_slave_0: entered promiscuous mode [ 45.590432][ T4176] loop3: detected capacity change from 0 to 2048 [ 45.599269][ T4130] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.606515][ T4130] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.615407][ T4176] EXT4-fs: Ignoring removed orlov option [ 45.629547][ T4130] bridge_slave_1: entered allmulticast mode [ 45.637980][ T4130] bridge_slave_1: entered promiscuous mode [ 45.644923][ T4176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.687603][ T4130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.704517][ T4130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.720888][ T3274] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.752622][ T4130] team0: Port device team_slave_0 added [ 45.759482][ T4130] team0: Port device team_slave_1 added [ 45.776501][ T4130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.783662][ T4130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.809659][ T4130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.822453][ T4130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.829486][ T4130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.855667][ T4130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.889050][ T4188] random: crng reseeded on system resumption [ 45.898018][ T4130] hsr_slave_0: entered promiscuous mode [ 45.913684][ T4130] hsr_slave_1: entered promiscuous mode [ 45.919878][ T4130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.929083][ T4130] Cannot create hsr debugfs directory [ 45.994670][ T4130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.051628][ T4196] 9pnet: Could not find request transport: fd0x0000000000000003 [ 46.062980][ T4130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.109934][ T4130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.176426][ T4130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.250458][ T4210] blktrace: Concurrent blktraces are not allowed on loop3 [ 46.251556][ T4208] loop2: detected capacity change from 0 to 2048 [ 46.281745][ T4208] EXT4-fs: Ignoring removed orlov option [ 46.378989][ T4130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.430444][ T4130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.486075][ T4208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.506018][ T4130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.552768][ T4130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.638136][ T4218] random: crng reseeded on system resumption [ 46.672900][ T4130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.691440][ T3276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.708171][ T4130] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.742823][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.750033][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.776506][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.783710][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.786192][ T4228] 9pnet_fd: Insufficient options for proto=fd [ 46.854069][ T29] audit: type=1326 audit(1729078856.089:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faae169dff9 code=0x0 [ 46.915946][ T4130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.139247][ T4130] veth0_vlan: entered promiscuous mode [ 47.150945][ T4130] veth1_vlan: entered promiscuous mode [ 47.181255][ T4130] veth0_macvtap: entered promiscuous mode [ 47.189566][ T4130] veth1_macvtap: entered promiscuous mode [ 47.202450][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.212994][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.222886][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.233464][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.243601][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.254089][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.264154][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.274717][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.284650][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.295167][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.307744][ T4130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.318454][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.329072][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.338983][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.349577][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.359460][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.370036][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.379869][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.390340][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.400207][ T4130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.410671][ T4130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.421565][ T4130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.432757][ T4130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.441698][ T4130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.450623][ T4130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.459645][ T4130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.480314][ T4269] random: crng reseeded on system resumption [ 47.561280][ T4274] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 47.604299][ T4280] 9pnet_fd: Insufficient options for proto=fd [ 47.943444][ T4309] 9pnet_fd: Insufficient options for proto=fd [ 47.957568][ T4310] random: crng reseeded on system resumption [ 48.222415][ T4321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.231094][ T29] audit: type=1326 audit(1729078857.459:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.3.315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x0 [ 48.255874][ T4321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.523628][ T4330] blktrace: Concurrent blktraces are not allowed on loop5 [ 48.628735][ T4340] 9pnet_fd: Insufficient options for proto=fd [ 48.691096][ T4346] random: crng reseeded on system resumption [ 48.880330][ T4361] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.889226][ T4361] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.898099][ T4361] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.906947][ T4361] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.917360][ T4361] vxlan0: entered promiscuous mode [ 48.922601][ T4361] vxlan0: entered allmulticast mode [ 48.930241][ T4361] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.939219][ T4361] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.948210][ T4361] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.957110][ T4361] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.430236][ T4374] 9pnet_fd: Insufficient options for proto=fd [ 49.689716][ T4387] __nla_validate_parse: 26 callbacks suppressed [ 49.689734][ T4387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 49.705194][ T4387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 49.762413][ T4389] Invalid ELF header magic: != ELF [ 49.767783][ T29] audit: type=1400 audit(1729078858.999:350): avc: denied { module_load } for pid=4388 comm="syz.2.342" path="/sys/kernel/notes" dev="sysfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 49.837030][ T4397] loop1: detected capacity change from 0 to 2048 [ 49.851741][ T4397] EXT4-fs: Ignoring removed orlov option [ 49.904443][ T4408] loop3: detected capacity change from 0 to 512 [ 49.920930][ T4408] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.934221][ T4408] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.939750][ T4410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.945932][ T4408] EXT4-fs (loop3): 1 truncate cleaned up [ 49.953385][ T4397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.970503][ T4410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.972681][ T4408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.996033][ T4408] FAULT_INJECTION: forcing a failure. [ 49.996033][ T4408] name failslab, interval 1, probability 0, space 0, times 1 [ 50.008803][ T4408] CPU: 1 UID: 0 PID: 4408 Comm: syz.3.350 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 50.020962][ T4408] Tainted: [W]=WARN [ 50.024770][ T4408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.034841][ T4408] Call Trace: [ 50.038209][ T4408] [ 50.041154][ T4408] dump_stack_lvl+0xf2/0x150 [ 50.045764][ T4408] dump_stack+0x15/0x20 [ 50.049938][ T4408] should_fail_ex+0x223/0x230 [ 50.054709][ T4408] ? ext4_mb_new_blocks+0x2fc/0x2020 [ 50.060070][ T4408] should_failslab+0x8f/0xb0 [ 50.064729][ T4408] kmem_cache_alloc_noprof+0x4c/0x290 [ 50.070226][ T4408] ? ext4_mb_new_blocks+0x1031/0x2020 [ 50.075638][ T4408] ext4_mb_new_blocks+0x2fc/0x2020 [ 50.080853][ T4408] ? ext4_get_branch+0x323/0x3a0 [ 50.085050][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 50.085833][ T4408] ? ext4_ind_map_blocks+0x815/0x14a0 [ 50.099973][ T4408] ext4_ind_map_blocks+0xb3e/0x14a0 [ 50.105308][ T4408] ext4_map_blocks+0x54c/0xcf0 [ 50.110096][ T4408] _ext4_get_block+0x104/0x370 [ 50.114980][ T4408] ext4_get_block+0x39/0x50 [ 50.119516][ T4408] ext4_block_write_begin+0x34f/0x9c0 [ 50.124905][ T4408] ? __pfx_ext4_get_block+0x10/0x10 [ 50.130128][ T4408] ? folio_mapping+0xb8/0x120 [ 50.134972][ T4408] ext4_write_begin+0x426/0xc30 [ 50.139864][ T4408] generic_perform_write+0x1a8/0x4a0 [ 50.145187][ T4408] ext4_buffered_write_iter+0x1ea/0x370 [ 50.150767][ T4408] ext4_file_write_iter+0x293/0xe10 [ 50.156038][ T4408] ? kstrtouint+0x77/0xc0 [ 50.160387][ T4408] ? kstrtouint_from_user+0xb0/0xe0 [ 50.165604][ T4408] ? avc_policy_seqno+0x15/0x20 [ 50.170484][ T4408] vfs_write+0x76a/0x910 [ 50.174763][ T4408] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 50.180506][ T4408] ksys_write+0xeb/0x1b0 [ 50.184769][ T4408] __x64_sys_write+0x42/0x50 [ 50.189408][ T4408] x64_sys_call+0x27dd/0x2d60 [ 50.194110][ T4408] do_syscall_64+0xc9/0x1c0 [ 50.198621][ T4408] ? clear_bhb_loop+0x55/0xb0 [ 50.203378][ T4408] ? clear_bhb_loop+0x55/0xb0 [ 50.208090][ T4408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.214040][ T4408] RIP: 0033:0x7f2a69c3dff9 [ 50.218465][ T4408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.238195][ T4408] RSP: 002b:00007f2a688b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.246674][ T4408] RAX: ffffffffffffffda RBX: 00007f2a69df5f80 RCX: 00007f2a69c3dff9 [ 50.254715][ T4408] RDX: 00000000175d9003 RSI: 0000000020000200 RDI: 0000000000000004 [ 50.262774][ T4408] RBP: 00007f2a688b7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.270755][ T4408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.278738][ T4408] R13: 0000000000000000 R14: 00007f2a69df5f80 R15: 00007ffc34e843e8 [ 50.286808][ T4408] [ 50.338640][ T4417] loop3: detected capacity change from 0 to 4096 [ 50.339312][ T4419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 50.354072][ T4419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 50.375376][ T4417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=4417 comm=+}[@ [ 50.999641][ T4447] Invalid ELF header magic: != ELF [ 51.026990][ T4449] loop1: detected capacity change from 0 to 2048 [ 51.037109][ T4449] EXT4-fs: Ignoring removed orlov option [ 51.316634][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 51.437994][ T4459] loop4: detected capacity change from 0 to 2048 [ 51.466574][ T4463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.368'. [ 51.467904][ T4461] loop3: detected capacity change from 0 to 2048 [ 51.475684][ T4463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.368'. [ 51.515678][ T29] audit: type=1400 audit(1729078860.749:351): avc: denied { map } for pid=4460 comm="syz.3.365" path="/104/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.538086][ T29] audit: type=1400 audit(1729078860.749:352): avc: denied { execute } for pid=4460 comm="syz.3.365" path="/104/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.602817][ C0] hrtimer: interrupt took 28382 ns [ 51.677278][ T29] audit: type=1400 audit(1729078860.869:353): avc: denied { read } for pid=4460 comm="syz.3.365" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.699873][ T29] audit: type=1400 audit(1729078860.869:354): avc: denied { open } for pid=4460 comm="syz.3.365" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.723096][ T29] audit: type=1400 audit(1729078860.869:355): avc: denied { ioctl } for pid=4460 comm="syz.3.365" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.873097][ T4484] ieee802154 phy0 wpan0: encryption failed: -22 [ 51.938339][ T4486] loop2: detected capacity change from 0 to 4096 [ 51.965404][ T4486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=4486 comm=+}[@ [ 51.967057][ T4494] Invalid ELF header magic: != ELF [ 52.045671][ T4495] loop4: detected capacity change from 0 to 164 [ 52.151556][ T4495] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 52.401522][ T4501] loop3: detected capacity change from 0 to 2048 [ 52.464782][ T4499] netlink: 'syz.1.379': attribute type 4 has an invalid length. [ 52.477668][ T4499] netlink: 'syz.1.379': attribute type 4 has an invalid length. [ 52.492361][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.494853][ T4499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.499843][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.515856][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.523340][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.530785][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.538253][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.545670][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.553124][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.560634][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.568052][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.575534][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.583003][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.590512][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.598121][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.605694][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.613081][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.620508][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.627985][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.635404][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.642895][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.650313][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.657754][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.665163][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.672562][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.680110][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.687572][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.694992][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.702506][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.710011][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.717434][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.724856][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.732354][ T3356] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.743488][ T3356] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 52.756465][ T4499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.866923][ T29] audit: type=1400 audit(1729078862.109:356): avc: denied { create } for pid=4514 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.888026][ T29] audit: type=1400 audit(1729078862.119:357): avc: denied { getopt } for pid=4514 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.916477][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.385'. [ 52.925507][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.385'. [ 53.056476][ T4531] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.066824][ T29] audit: type=1400 audit(1729078862.309:358): avc: denied { getopt } for pid=4530 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 53.094776][ T29] audit: type=1400 audit(1729078862.339:359): avc: denied { search } for pid=3008 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.340508][ T4538] loop3: detected capacity change from 0 to 164 [ 53.352582][ T4538] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 53.477204][ T4540] loop2: detected capacity change from 0 to 2048 [ 53.713746][ T4550] ieee802154 phy0 wpan0: encryption failed: -22 [ 53.760989][ T4554] loop1: detected capacity change from 0 to 2048 [ 53.769081][ T4556] Zero length message leads to an empty skb [ 54.123576][ T4572] SELinux: truncated policydb string identifier [ 54.130149][ T4572] SELinux: failed to load policy [ 54.378206][ T4581] Invalid ELF header magic: != ELF [ 54.432625][ T4582] block device autoloading is deprecated and will be removed. [ 54.464365][ T4582] loop4: detected capacity change from 0 to 512 [ 54.522497][ T4582] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.579733][ T4600] loop1: detected capacity change from 0 to 2048 [ 54.593970][ T4600] EXT4-fs: Ignoring removed orlov option [ 54.699656][ T4617] Invalid ELF header magic: != ELF [ 54.723792][ T4616] __nla_validate_parse: 1 callbacks suppressed [ 54.723823][ T4616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.417'. [ 54.739516][ T4616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.417'. [ 54.782287][ T4624] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 54.847004][ T4626] loop4: detected capacity change from 0 to 2048 [ 54.901485][ T4633] loop3: detected capacity change from 0 to 2048 [ 54.949022][ T4626] EXT4-fs: Ignoring removed orlov option [ 55.023638][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 55.110418][ T4626] hsr_slave_1 (unregistering): left promiscuous mode [ 55.165741][ T4647] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.199869][ T4652] Invalid ELF header magic: != ELF [ 55.225967][ T4651] loop1: detected capacity change from 0 to 2048 [ 55.239228][ T4654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.432'. [ 55.248308][ T4654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.432'. [ 55.301479][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 55.301497][ T29] audit: type=1326 audit(1729078864.539:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x7ffc0000 [ 55.331096][ T29] audit: type=1326 audit(1729078864.539:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x7ffc0000 [ 55.382021][ T29] audit: type=1326 audit(1729078864.539:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2a69c3dff9 code=0x7ffc0000 [ 55.405417][ T29] audit: type=1326 audit(1729078864.539:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x7ffc0000 [ 55.428979][ T29] audit: type=1326 audit(1729078864.539:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x7ffc0000 [ 55.451912][ T29] audit: type=1326 audit(1729078864.539:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a69c3dff9 code=0x7ffc0000 [ 55.474807][ T29] audit: type=1326 audit(1729078864.539:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x7ffc0000 [ 55.497676][ T29] audit: type=1326 audit(1729078864.539:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x7ffc0000 [ 55.521233][ T29] audit: type=1326 audit(1729078864.549:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a69c3dff9 code=0x7ffc0000 [ 55.544126][ T29] audit: type=1326 audit(1729078864.609:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4663 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a69c3dff9 code=0x7ffc0000 [ 55.869476][ T4675] loop3: detected capacity change from 0 to 2048 [ 55.872005][ T4673] loop4: detected capacity change from 0 to 512 [ 55.911074][ T4673] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.946407][ T4684] syz.2.442[4684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.946590][ T4684] syz.2.442[4684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.987327][ T4684] syz.2.442[4684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.131737][ T4698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'. [ 56.151879][ T4698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'. [ 56.295988][ T4676] chnl_net:caif_netlink_parms(): no params data found [ 56.314036][ T4718] loop4: detected capacity change from 0 to 2048 [ 56.333088][ T4720] loop2: detected capacity change from 0 to 512 [ 56.394955][ T4723] loop1: detected capacity change from 0 to 164 [ 56.402879][ T4723] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 56.473228][ T4720] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.745336][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.752459][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.768591][ T4676] bridge_slave_0: entered allmulticast mode [ 56.776813][ T4676] bridge_slave_0: entered promiscuous mode [ 56.784493][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.791598][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.817235][ T4676] bridge_slave_1: entered allmulticast mode [ 56.823984][ T4676] bridge_slave_1: entered promiscuous mode [ 56.958430][ T4676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.962058][ T4732] Invalid ELF header magic: != ELF [ 56.970527][ T4676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.026459][ T4736] loop3: detected capacity change from 0 to 2048 [ 57.045207][ T4676] team0: Port device team_slave_0 added [ 57.052393][ T4676] team0: Port device team_slave_1 added [ 57.079159][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.086820][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.112888][ T4676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.126817][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.133997][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.159964][ T4676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.202377][ T4676] hsr_slave_0: entered promiscuous mode [ 57.224763][ T4676] hsr_slave_1: entered promiscuous mode [ 57.230880][ T4676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.240047][ T4676] Cannot create hsr debugfs directory [ 57.253567][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 57.262499][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 57.352154][ T4755] loop1: detected capacity change from 0 to 512 [ 57.362727][ T4676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.388228][ T4755] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.431819][ T4676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.513707][ T4676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.526030][ T4769] Invalid ELF header magic: != ELF [ 57.558536][ T4676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.573611][ T4771] loop1: detected capacity change from 0 to 2048 [ 57.776376][ T4676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.850013][ T4676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.930894][ T4676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.943744][ T4676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.960178][ T4779] FAULT_INJECTION: forcing a failure. [ 57.960178][ T4779] name failslab, interval 1, probability 0, space 0, times 0 [ 57.973755][ T4779] CPU: 0 UID: 0 PID: 4779 Comm: syz.2.470 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 57.985889][ T4779] Tainted: [W]=WARN [ 57.989758][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.999831][ T4779] Call Trace: [ 58.003131][ T4779] [ 58.006083][ T4779] dump_stack_lvl+0xf2/0x150 [ 58.010714][ T4779] dump_stack+0x15/0x20 [ 58.014871][ T4779] should_fail_ex+0x223/0x230 [ 58.019568][ T4779] ? security_context_to_sid_core+0x66/0x3b0 [ 58.025635][ T4779] should_failslab+0x8f/0xb0 [ 58.030246][ T4779] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 58.036602][ T4779] ? vsscanf+0x3af/0x1270 [ 58.040951][ T4779] kmemdup_nul+0x30/0x80 [ 58.045279][ T4779] security_context_to_sid_core+0x66/0x3b0 [ 58.051107][ T4779] security_context_str_to_sid+0x33/0x40 [ 58.056759][ T4779] sel_write_create+0x356/0x4d0 [ 58.061619][ T4779] selinux_transaction_write+0xba/0x100 [ 58.067177][ T4779] ? __pfx_selinux_transaction_write+0x10/0x10 [ 58.073390][ T4779] vfs_write+0x26c/0x910 [ 58.077784][ T4779] ? __fget_files+0x1d4/0x210 [ 58.082623][ T4779] ksys_write+0xeb/0x1b0 [ 58.086912][ T4779] __x64_sys_write+0x42/0x50 [ 58.091520][ T4779] x64_sys_call+0x27dd/0x2d60 [ 58.096218][ T4779] do_syscall_64+0xc9/0x1c0 [ 58.100732][ T4779] ? clear_bhb_loop+0x55/0xb0 [ 58.105479][ T4779] ? clear_bhb_loop+0x55/0xb0 [ 58.110190][ T4779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.116101][ T4779] RIP: 0033:0x7faae169dff9 [ 58.120579][ T4779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.140196][ T4779] RSP: 002b:00007faae0311038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.148672][ T4779] RAX: ffffffffffffffda RBX: 00007faae1855f80 RCX: 00007faae169dff9 [ 58.156678][ T4779] RDX: 000000000000005d RSI: 0000000020000140 RDI: 0000000000000006 [ 58.164677][ T4779] RBP: 00007faae0311090 R08: 0000000000000000 R09: 0000000000000000 [ 58.172689][ T4779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.180667][ T4779] R13: 0000000000000000 R14: 00007faae1855f80 R15: 00007ffdcaab7938 [ 58.188748][ T4779] [ 58.230366][ T4676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.243137][ T4676] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.255695][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.262800][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.283959][ T4676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.294371][ T4676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.331289][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.338822][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.366288][ T4800] loop3: detected capacity change from 0 to 2048 [ 58.378193][ T4802] Invalid ELF header magic: != ELF [ 58.381278][ T4790] loop2: detected capacity change from 0 to 4096 [ 58.418397][ T4790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=4790 comm=+}[@ [ 58.465758][ T4676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.799292][ T4676] veth0_vlan: entered promiscuous mode [ 58.809877][ T4676] veth1_vlan: entered promiscuous mode [ 58.831367][ T4819] loop1: detected capacity change from 0 to 2048 [ 58.842057][ T4823] loop2: detected capacity change from 0 to 512 [ 58.853117][ T4676] veth0_macvtap: entered promiscuous mode [ 58.874551][ T4676] veth1_macvtap: entered promiscuous mode [ 58.889694][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.900220][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.910180][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.920767][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.931223][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.941749][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.951678][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.962229][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.972193][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.982649][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.992607][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.003109][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.014572][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.022863][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.033409][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.043213][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.053796][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.063785][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.074256][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.084127][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.095337][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.105262][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.115716][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.125636][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.136105][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.147186][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.171617][ T4823] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.187066][ T4676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.195930][ T4676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.204742][ T4676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.213567][ T4676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.291503][ T4823] blktrace: Concurrent blktraces are not allowed on loop5 [ 59.390226][ T4847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'. [ 59.430475][ T4851] blktrace: Concurrent blktraces are not allowed on loop5 [ 59.501863][ T4860] blktrace: Concurrent blktraces are not allowed on loop3 [ 59.564667][ T4866] loop0: detected capacity change from 0 to 512 [ 59.572422][ T4858] loop3: detected capacity change from 0 to 4096 [ 59.586662][ T4866] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.620436][ T4866] blktrace: Concurrent blktraces are not allowed on loop1 [ 59.642480][ T4858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=4858 comm=+}[@ [ 59.668137][ T4875] netlink: 'syz.1.499': attribute type 4 has an invalid length. [ 59.685893][ T4875] netlink: 'syz.1.499': attribute type 4 has an invalid length. [ 59.698568][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.702540][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.720932][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.729147][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.736616][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.744103][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.751528][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.759052][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.766557][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.774058][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.781460][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.788893][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.797099][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.805208][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.812604][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.820100][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.827525][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.835009][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.842422][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.846946][ T4880] Invalid ELF header magic: != ELF [ 59.849907][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.862507][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.870006][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.878824][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.887168][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.894689][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.902117][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.909626][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.917456][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.924914][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.932508][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.939973][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.947392][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.955465][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.962934][ T984] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.045588][ T984] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 60.290659][ T4896] FAULT_INJECTION: forcing a failure. [ 60.290659][ T4896] name failslab, interval 1, probability 0, space 0, times 0 [ 60.303549][ T4896] CPU: 1 UID: 0 PID: 4896 Comm: syz.3.507 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 60.315791][ T4896] Tainted: [W]=WARN [ 60.319639][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.329710][ T4896] Call Trace: [ 60.332997][ T4896] [ 60.335955][ T4896] dump_stack_lvl+0xf2/0x150 [ 60.340576][ T4896] dump_stack+0x15/0x20 [ 60.344789][ T4896] should_fail_ex+0x223/0x230 [ 60.349514][ T4896] ? getname_flags+0x81/0x3b0 [ 60.354296][ T4896] should_failslab+0x8f/0xb0 [ 60.359002][ T4896] kmem_cache_alloc_noprof+0x4c/0x290 [ 60.364399][ T4896] getname_flags+0x81/0x3b0 [ 60.368927][ T4896] user_path_at+0x26/0x110 [ 60.373357][ T4896] __se_sys_pivot_root+0xca/0x1090 [ 60.378551][ T4896] ? __rcu_read_unlock+0x4e/0x70 [ 60.383602][ T4896] ? bpf_trace_run2+0x123/0x1d0 [ 60.388533][ T4896] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 60.394355][ T4896] ? __bpf_trace_sys_enter+0x9/0x10 [ 60.399595][ T4896] ? __traceiter_sys_enter+0x5b/0x80 [ 60.404960][ T4896] __x64_sys_pivot_root+0x31/0x40 [ 60.410074][ T4896] x64_sys_call+0x270b/0x2d60 [ 60.414764][ T4896] do_syscall_64+0xc9/0x1c0 [ 60.419274][ T4896] ? clear_bhb_loop+0x55/0xb0 [ 60.423969][ T4896] ? clear_bhb_loop+0x55/0xb0 [ 60.428705][ T4896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.434615][ T4896] RIP: 0033:0x7f2a69c3dff9 [ 60.439094][ T4896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.458718][ T4896] RSP: 002b:00007f2a688b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 60.467191][ T4896] RAX: ffffffffffffffda RBX: 00007f2a69df5f80 RCX: 00007f2a69c3dff9 [ 60.475291][ T4896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.483279][ T4896] RBP: 00007f2a688b7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.491267][ T4896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.499264][ T4896] R13: 0000000000000000 R14: 00007f2a69df5f80 R15: 00007ffc34e843e8 [ 60.507247][ T4896] [ 60.540271][ T4898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4898 comm=syz.2.508 [ 60.556983][ T4898] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 60.609505][ T4898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.633139][ T4901] bond1: (slave bridge1): making interface the new active one [ 60.641990][ T4901] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 60.660387][ T4899] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 60.763449][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.783611][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.311311][ T4915] __nla_validate_parse: 3 callbacks suppressed [ 61.311327][ T4915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.513'. [ 61.326625][ T4915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.513'. [ 61.365380][ T4917] loop2: detected capacity change from 0 to 4096 [ 61.395493][ T4919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.515'. [ 61.404468][ T4919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.515'. [ 61.443535][ T4917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=4917 comm=+}[@ [ 61.527759][ T4930] loop4: detected capacity change from 0 to 2048 [ 61.534594][ T4930] EXT4-fs: Ignoring removed orlov option [ 61.648039][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 61.842464][ T4940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.892970][ T4942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 61.901985][ T4942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 61.919677][ T4940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.138442][ T4949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.528'. [ 62.147454][ T4949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.528'. [ 62.216842][ T4952] loop4: detected capacity change from 0 to 164 [ 62.226389][ T4952] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 62.705603][ T4963] netlink: 'syz.1.533': attribute type 4 has an invalid length. [ 62.731522][ T4963] netlink: 'syz.1.533': attribute type 4 has an invalid length. [ 62.755120][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.762598][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.770141][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.777687][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.785165][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.792620][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.800045][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.807493][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.814914][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.822306][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.831022][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.838557][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.846065][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.853533][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.860997][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.868414][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.875819][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.883208][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.890656][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.898156][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.906806][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.914263][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.921740][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.929161][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.936573][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.944077][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.951494][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.958952][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.966392][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.973815][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.981208][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.989859][ T3342] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.100959][ T3342] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 63.226983][ T4978] loop3: detected capacity change from 0 to 2048 [ 63.369759][ T4986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.540'. [ 63.471482][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 63.471560][ T29] audit: type=1400 audit(1729078872.699:506): avc: denied { write } for pid=4979 comm="syz.1.539" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.501282][ T29] audit: type=1400 audit(1729078872.699:507): avc: denied { ioctl } for pid=4979 comm="syz.1.539" path="/dev/sg0" dev="devtmpfs" ino=111 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.824942][ T5009] IPv6: Can't replace route, no match found [ 63.859080][ T5007] netlink: 'syz.2.548': attribute type 4 has an invalid length. [ 63.874005][ T5012] loop4: detected capacity change from 0 to 164 [ 63.898995][ T29] audit: type=1400 audit(1729078873.049:508): avc: denied { getopt } for pid=5008 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.920860][ T5012] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 63.975495][ T5013] netlink: 'syz.2.548': attribute type 4 has an invalid length. [ 64.048512][ T29] audit: type=1326 audit(1729078873.289:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9d4dff9 code=0x7ffc0000 [ 64.191140][ T29] audit: type=1326 audit(1729078873.319:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9d4dff9 code=0x7ffc0000 [ 64.214586][ T29] audit: type=1326 audit(1729078873.329:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbbc9d4dff9 code=0x7ffc0000 [ 64.237983][ T29] audit: type=1326 audit(1729078873.329:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9d4dff9 code=0x7ffc0000 [ 64.260831][ T29] audit: type=1326 audit(1729078873.329:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9d4dff9 code=0x7ffc0000 [ 64.285140][ T29] audit: type=1326 audit(1729078873.329:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbc9d4dff9 code=0x7ffc0000 [ 64.308212][ T29] audit: type=1326 audit(1729078873.329:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc9d4dff9 code=0x7ffc0000 [ 64.369354][ T5029] loop2: detected capacity change from 0 to 2048 [ 64.991618][ T5044] loop0: detected capacity change from 0 to 512 [ 65.047235][ T5044] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.151609][ T5061] IPv6: Can't replace route, no match found [ 65.203625][ T5044] blktrace: Concurrent blktraces are not allowed on loop1 [ 65.235333][ T5063] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.308224][ T5070] loop4: detected capacity change from 0 to 164 [ 65.334444][ T5070] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 65.516846][ T5075] loop0: detected capacity change from 0 to 4096 [ 65.623501][ T5077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=5077 comm=syz.0.575 [ 65.847238][ T5092] loop3: detected capacity change from 0 to 512 [ 65.886459][ T5092] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.115243][ T5109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.142108][ T5109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.387959][ T5124] loop1: detected capacity change from 0 to 512 [ 66.427755][ T5124] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.580363][ T5136] __nla_validate_parse: 12 callbacks suppressed [ 66.580382][ T5136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.598'. [ 66.663481][ T5143] loop4: detected capacity change from 0 to 2048 [ 66.710607][ T5144] loop0: detected capacity change from 0 to 164 [ 66.773504][ T5144] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 66.866489][ T5143] EXT4-fs mount: 70 callbacks suppressed [ 66.866509][ T5143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.110057][ T4130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.147885][ T5166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.608'. [ 67.151947][ T5164] loop2: detected capacity change from 0 to 512 [ 67.156896][ T5166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.608'. [ 67.194606][ T5168] Invalid ELF header magic: != ELF [ 67.206748][ T5164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.208421][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.611'. [ 67.228306][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.611'. [ 67.233116][ T5164] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.266526][ T5176] IPv6: Can't replace route, no match found [ 67.280496][ T5164] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.389897][ T5183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.423491][ T5183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.432550][ T5185] loop4: detected capacity change from 0 to 2048 [ 67.548173][ T5185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.774963][ T4130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.168523][ T5224] loop1: detected capacity change from 0 to 4096 [ 68.216133][ T5224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.239410][ T5224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=5224 comm=+}[@ [ 68.267860][ T5231] loop0: detected capacity change from 0 to 2048 [ 68.282292][ T5231] ================================================================== [ 68.290422][ T5231] BUG: KCSAN: data-race in xas_create / xas_find [ 68.296772][ T5231] [ 68.299097][ T5231] write to 0xffff888106994001 of 1 bytes by task 3261 on cpu 0: [ 68.306911][ T5231] xas_create+0x666/0xbd0 [ 68.311294][ T5231] xas_store+0x6f/0xc90 [ 68.315466][ T5231] __filemap_add_folio+0x3cc/0x6f0 [ 68.320595][ T5231] filemap_add_folio+0x9c/0x1b0 [ 68.325466][ T5231] page_cache_ra_unbounded+0x175/0x310 [ 68.330940][ T5231] page_cache_sync_ra+0x252/0x670 [ 68.336004][ T5231] filemap_get_pages+0x2c1/0x10e0 [ 68.341062][ T5231] filemap_read+0x216/0x680 [ 68.345592][ T5231] blkdev_read_iter+0x20e/0x2c0 [ 68.350459][ T5231] vfs_read+0x5f6/0x720 [ 68.354667][ T5231] ksys_read+0xeb/0x1b0 [ 68.358855][ T5231] __x64_sys_read+0x42/0x50 [ 68.363380][ T5231] x64_sys_call+0x27d3/0x2d60 [ 68.368089][ T5231] do_syscall_64+0xc9/0x1c0 [ 68.372607][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.378523][ T5231] [ 68.380854][ T5231] read to 0xffff888106994001 of 1 bytes by task 5231 on cpu 1: [ 68.388489][ T5231] xas_find+0x372/0x3f0 [ 68.392689][ T5231] find_get_entry+0x66/0x390 [ 68.397300][ T5231] find_lock_entries+0x412/0x480 [ 68.402261][ T5231] truncate_inode_pages_range+0x138/0x6b0 [ 68.408008][ T5231] truncate_inode_pages+0x24/0x30 [ 68.413056][ T5231] set_blocksize+0x258/0x270 [ 68.417690][ T5231] sb_set_blocksize+0x2c/0xb0 [ 68.422410][ T5231] ext4_fill_super+0xdca/0x3a10 [ 68.427285][ T5231] get_tree_bdev+0x256/0x2e0 [ 68.431906][ T5231] ext4_get_tree+0x1c/0x30 [ 68.436347][ T5231] vfs_get_tree+0x56/0x1e0 [ 68.440808][ T5231] do_new_mount+0x227/0x690 [ 68.445340][ T5231] path_mount+0x49b/0xb30 [ 68.449692][ T5231] __se_sys_mount+0x27c/0x2d0 [ 68.454404][ T5231] __x64_sys_mount+0x67/0x80 [ 68.459022][ T5231] x64_sys_call+0x203e/0x2d60 [ 68.463723][ T5231] do_syscall_64+0xc9/0x1c0 [ 68.468241][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.474183][ T5231] [ 68.476516][ T5231] value changed: 0x12 -> 0x00 [ 68.481217][ T5231] [ 68.483541][ T5231] Reported by Kernel Concurrency Sanitizer on: [ 68.489693][ T5231] CPU: 1 UID: 0 PID: 5231 Comm: syz.0.633 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 68.501771][ T5231] Tainted: [W]=WARN [ 68.505571][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.515624][ T5231] ================================================================== [ 68.614840][ T5231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.772882][ T4676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.199707][ T3271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.