last executing test programs: 6.719138867s ago: executing program 2 (id=1467): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000175ff8fe004000"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000008579000000000000000000010500000010000000000000000000000a02"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x20, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) 6.153966685s ago: executing program 2 (id=1470): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1600"/20, @ANYRES32=0x1, @ANYBLOB="c8b9ffff7000005f04c08e479442e738261f7b2ccd3e000000004d360ab434836ca3", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000500), 0x20000000}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048001}, 0x40014) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f000009e080)='<', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="7cffa9061b", 0x5, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) epoll_create1(0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x102, 0xffffffffffffffff, 0x4e7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x3d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) unshare(0x20000400) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f00000003c0)={0x1, 0x1, 0x7, 0x400, {0x5, 0x6, 0x7f, 0x9eb3, 0x1}, [0x4]}}, @name="fb41d0bccf751a0046c50e2c9d5552e4e556499e39cacaf9f03a1a9467e9b51ccb457ef7ce9abc7fe03af496ff80bb548428563d69d839869323b9fa1108daea698ceba38a1bd7680ffeee4f104da9dcfdf21f51feecfb505161309ffe71772da089dad4e773734455322d7ee92d3c9b08de4d49dc2db3e0721c4259b9cfde2634b85a447cc0199eb9dad7c70482e1591d2e92f0ce7d522703d29d0244114e4643557bd58b8c7b4db792b0d830fb80677f4938bb722da1624ee444eec7dc100efa7a4f9357346a2945fb56815b27378a4095feb395e45c9c2f6fe7c082ea8e4b7cd66106469bf166c721acb4c1369c2ab3aecdc4fa2e85b382f9350e28bf059c2d8c42982d176c72066a5be9cde486e805cdd19c368a7de425fc347fecbe09ad1aa668158290f0fb406b84ec2d9059954c658bf755be9fa196efdac11b40879f66b4a1a72550657a652c99ed108e39468113cb2ae00d43771aaf99c7c72a2014fe394ae10251d82365f8eb73571bf0c1d443b1cf76b7319e18e2fbcf21e8099d9e47709c580d6e25ec39f9ded643855fb9e16eea85e74263898510248d06fef434fe2890b29e0a68aa2071c4d89b74b5a66fe252824923e4b1eb544e42735f52f0ac1889a1bee6abb0013a89f88096e9a67f1e7491e8af0ccbf930bf9992fac3eb188ce38f57fa995f5b486e25005b1d527400bcbe73fe19ddcd1e48a1e587e81207912a054a0359a19927baf13c49c529f2e06b3a1fa2d7d427e5292d517b647656283384923bcaa8081194252f1aebfeaba627350c61b2802b4c9010f5eb3f7071b2ae51eac7524412c184bfa55b4bf97afe34e32aa9c10aefa0a3fcd9db348752d09b9ffb0e8a3c29dc361d1a0f066a47d883accd4bc95e7f8d525c0d37bc06523a806a333711d80d79fb50dc3c8dc5f485da7592930148a6330be6b02deeeca484f8065c50516278d5217136e3fce6534f277dadef5bc9dbc070354fc9143e8044cac5f68e7917de6a3e7c7f0e68303df6f4b7549e58c8f25af459d6a6caa201c49a34aa8769e7a2c035417aeb18f17e085a61e27efd6bfd5e8d7f74479e73cd4a8b493ac1b6ac8ea54f44214d06324bc30457a7ac523ee688ee97024b433f788538a0a548e7d22aa9405165dbbbfa7509bd18e02e6a398fc8937eb47b97c160b2edc3277229d32de00ec7ac1f9fee3d35adddd69d4a4c7920e943c44288d83b122b4c509db02c66d86e8782c1e10259ee06251cdf338670a8c8f526c729add35d5b149cc88b34e36cbbe3b6a38421924a8f3e09d4ce00b3cf943bd77ca342679cab2adb0df82ee294439a1ff6af02b7cf65064ad36a01fb409c4b924ae1363035527855d15454b54f178b26119d58f04fba81f695a75c12ae8b26851cacb0a1d94e0125798b91c1d03137df3660ac10ec4982770d11eff8c74d3c406e1f17190ebaf96b4a281eddc23629f429ee0e561fccd56c1e72a200dce8c2a3733db34ad564c23e525c53786f816f2debf2c35ded162150b214e103ea42d24b28c7d48658991412798ec682feee94dad1cd0bc11c7060c1404ff6f27581f44e9532a780683bf7e02f3ee4733412268d8a6b7ab9a74c4aee2772d8119006bf03e738382a8d729860e6873b9704cef81011c6d553fa9367764f49b781737cb0cff613f5d4419b7a065b19e0c1378e3a9623751d409c7fd6d49c18e8ce85901d76547d01d2526f6014d41094de325db75a98b5290eb4e120c31e2fd4e208ab25c3e217f09270baedb9076eb4d50efe686313e2a1357b4ee19527c231c5cdb7e165ce22053009f3a5d2c86f8ac41938841f3c557366418c68e8c71404de4df886f209676e5220e4c363e536500d3e5967d00ca47aaa3f8cb960961a4fad6dc95816f88df387f822c1a8b99ab7a2392bbcbe641945dde1b97b9310e58c240f7e62dc79449a554d65ab2178ecdd9b41b9a34155c77d6a84bfe2a3326e256d62cb1471d1c9e400f147f293d6fa9c8152e16b9abfe1ad42e8a552c7cb2017042b838373a7d3268740bebbd99f2276978f3b28d06fe5512b821e711750a79301ab7b537c1efbb12f6be8cf7385c97ec13d0d12de5756d7efd9778b40485a813da628837f844588876ac97ee84f5313409eeb62c84804aa3a22aec3c1870821836a49d6e407554a3de1a529ee8e55a4c50967d7d814d0dad4960f3d793dca6bca6164cbce017286a8b9b9e13a3d1cc953f6d91e978f6158be0ca2db580a4249fe9965df847dbc4554f840b133ec28dc20dfa5a88f76a49ee0d07b99cebaa9927ef0756b2bde7b335498da24c6bb2ec34e5b38738bca879aba2222d2ca941aecba84035d177f081252cf47fd350086e694eed1f8ff639527d1171297a5a8b7fe87c4252d9361936805dcfdb8cc5692a216f2bf5e5440b39543f8a17ffb299515eb188489bd021665b96679fea156341ac713d209dde799b4587cb6d7f6e55ddb0ec7fc10fa179081646271d872c884f1860b9e3895465999831bd13fcd3106d486bc4fba59db3dd9ebd69cb41eda68c95912a4dff95a2496e6bdb77ac60676242a5626dd2b5616a32d43f6241189d1a89d2818bf64842b813b8ad97dff6a11fed2ff1b9d01af7ff4c878fa5be2c6bf1757fd01c8f2661ef2c0a3dad6d8f61deda9d7c00a76b27bd5a8d3764e623e446dabb77495a88151e274e001c3ecdac00d1147e12a7cf339d9ba9fe586b800e4282b14ebd46abbfab251de89a894504f33545d47e7f18d571c20f3d8bb513f5f5937b381e491ada77149bf5790c9b2e3b7b295549bd798db09e2a9a3c3f8e8073156a5bcc6de858080ea79481d310f7ba27c922843daa6cb99a5a06f4aadf082df2ef03397cfdcc4d26909b539a493df881c098e12e0686ce1da41d6abdff0a79e64c1e51f293e2d695b0a47b405c66d6975d46521fef50b5401cf8c2aff9085386137690535822d067ca4cf366c6b0a0e4ec5ab9744aa0cb2eb0509c2cc537d529dbd62e3e50559ba16773cbbe2eae84382a0d3e6d048b05cd366cdc8642e9be3f711ae981f468c506bb810ef8b2caa0fce108243971a08fa9c2ec23b0108a41403ea6579badd4bf7e65d7a3e91fa49e3c190f36f5126014fab9290bc94bd2c7013f906d65d962c37ed9b8da775fad1dd49ad1fadc20de0fb0924e41e4cf7753212ea08df665f33952b057c6e5713d5c2b55a03d345e797d25031777e1eb7f610904e8b28a76fcd9db1b83814f264ef09a3531dc6f96344caae66c2818f3635f67adc67e35293feb0da7bc1d2d5740693b7e84ba32240a3e6d0d408e80b3ae1357d47dd420897a964d1b8a683105c6b94005e48631cc5049168ee7d42fef05d901aedfe41dd9d4390cdbd45d7f4d327040eec78bbbf23de4590b32c5b964ab441552780cc41f4de97198be093cfdb52c53a1defdaee36eab99362dc22785dd54837e7d0e6c7c29b448575abc2a5130776141e8766283ad11370e0b85d045012a0e0c359e5d67019c1f2866869b3b2abd647d3047c88d96bd40b63e9efe6ba687d94bd42c72e14f055dc0ae8d0f90c048779f31585d29f38ee34118c346e3c3b00d6a12e6d8e409ae8b1d9d90bce6eeb4a6ed8357cb5fe8cee9089738a5352bd26bc2437ae74a0d48e8906f78b3473ede88bcf783f7c2d9ce0597e3fb9badca65c3973ae2a29a2c18e6019f23af887dc5ec7a68bb8e9d4314f0540025374933c998433f6173fe0986d9b1d2722d5de797a9aa9ffdeaa4a7f1dd2a36824c79c718cc6f40ca2f9ed8c3a4fd868312104b42a16ba487ec14d49e066a6b5df245413b3fda323245d1b3c665e6298488d836b230de37f1490d47586498e3778152365a43476026d6c82f4e88bac9c9a47ed949441b3a9292d87ccec28bf4ecc974e96a2e8f66c23c31529d78c1c53751c90c9368d1700dae1370f8c849e46e9d89d210871de6dcf621e971f4bae4f1d2fb71ffc91c9117f94908f467a42966ec8fbdefe4374ae9312e23679891d30e985252f07d3dbd1fabc559cddb26d254383a9a500d294aede9eafc3c8e6d5ec96cd909e5bb63d46f412c07511bfd79710f1ee986cac52ce3228b771e2083e55f5b8639cdfeda1faef7a84aa46d45d9fb7580bd5f356028c5272a8fb599993763e99ce2f287411982ee39dd45c0e58c1736b02393272f4fd51166bb21a980d29c63c8fe8131245063fea61ada455dca49739eb1386110c255db2d46443438e652b4c3c277490ac31c2904bc8859cb70733e5fc2ee9bbc180ea1e0b1ee67708531ea8e913d0c0d7d05a59adcfbc39693eccd2f1d8011e5dfec89c7d7b94012f60ecfcdf133527f9459609343107ff030b546e4158ffbfeaafe7efad5181cce3ab492074d225d247f0376c7eb742dd730d16a3eda2c4c516a2000eacaa79e89b3d1e5087301ef4e819817dd79df8d9720a5ad3089175fde4aad534aca926eb99e3657edd380645e1cf8331b4a5026c7bc8a8477689590424506e904f12344dcbe8d32a46f360c2ce4108800e8954d7d94d301b3f2a699b233bc1d1a42b34760192b9fb476101d8fdace62548bbb75b9b619d5978296c47085d462082cf48c27cfe7a76b265ad2f11ebcfa731f237e7acb32dc7bdc8ed689c4f2baf1d85175e04e82938992645a30340413867eb858c2de87772bb9d1173e3fc2d7696142d1fd2b1cc4f3e15e6e59d718f9c1203c42339a8750f618448ab2966b218fe1dbdb49c9e534102d699b36914dc6ebc9a7a401baf4397b616ba1b3e6bb34c9656445e31e929a76d242fdcc5f084371e382e172e8416bb7190a2fd61b87c9f14f6e8a6298f3912f205223e0e643e65c3f323698107ac605cdb7c7bf375e266682e2e209c654dcd777d5d35d61f0cc32d2cc5a2720f6b7dcf46c6f571ace0b743d76f2ac4701ac0b99be1a6e2174e8146b6ea0b0d1184a793b40d54a630d49d972ac3f5b0901901f658160e41f8d8cacbc9a3a5613457854ba6bcafbc635d78a28b8ccb5dea4cfbf7e63dff00ca32c9847994702078542c72cb9839a15557adea828492b6f424075bcfaf577922e68f233a6909c46aebb762c526f20afa2463015547538865f4b236d614f4ddecf7fde084b974bccf845070eb925a335432e88da312829439572dab86d691ec99c5611b528fad9dfdbb1a7f6e428dda8e8d01b2b23a5e781a81f6cfa7b79c42f7c1b0d11cf6ecb27efe7b6af2c50dedf554ecb745c00614ca27203282adc46c2ae1611daa0ba22db3083b703b4274d8d62eb86ea61560df905ff3aeee3bae0ef22ab7553bb0e1351e4323522f98c651b84bfa2a6da184ef739061e09af9ee23296189429a963ebe59d8908b4f5c3b5eb08827ddff176f8d355f9d79ac688af1c4e36c01f76365198e068c266182603bc29cd6f4b8f09502d9739c8d73a496e6877b9f68a1de20f3544d9d30c716b8b5c042695e6cfde5083ee09d1d10f438ddd9a25656383cf406b62db27b243eb044099c1482f8e3bd5de5071d77b68f969b758c9ad412303f6b0bac13cbbcfab98e1a0f5b754972625f694cfa2f6553dfff692a9f0577d67307ee2ae37a1753e003f410c0cd8ed1928b06bf005203a52e21ca6411863185dbb65861de36ed9eeb30207777b761093d8b575b755fa01708645c0e4cf19dbd43e5f64cd18350eb9c668b923fad3ee2da716e313528746da62a901d0fee4ed6228b9bd3ec3d5d"}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.864022996s ago: executing program 2 (id=1472): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x543c, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3, 0x10a5, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) io_uring_enter(r0, 0x81e, 0xfffffff9, 0x1, 0x0, 0x0) io_uring_enter(r0, 0xde5, 0x0, 0x0, 0x0, 0x0) 1.488299728s ago: executing program 2 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800010000000000000000000a03000000000000000000000c00160008000100030000", @ANYRES32, @ANYBLOB="060015"], 0x38}}, 0x0) 1.45387195s ago: executing program 2 (id=1498): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x2c000011) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.257243654s ago: executing program 0 (id=1506): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x543c, &(0x7f00000008c0), 0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3, 0x10a5, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) io_uring_enter(r0, 0x81e, 0xfffffff9, 0x1, 0x0, 0x0) io_uring_enter(r0, 0xde5, 0x0, 0x0, 0x0, 0x0) 1.241186805s ago: executing program 4 (id=1507): r0 = syz_open_dev$usbfs(0x0, 0x80000000003, 0x301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 1.188058239s ago: executing program 0 (id=1508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800010000000000000000000a03000000000000000000000c00160008000100030000000800", @ANYRES32, @ANYBLOB="060015"], 0x38}}, 0x0) 1.17013954s ago: executing program 4 (id=1509): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"/89], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmsg$802154_dgram(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00000000eaff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) 1.092503985s ago: executing program 0 (id=1511): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x301) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000018110000000000010000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) 1.049063018s ago: executing program 3 (id=1512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01070000000000000000679ac50008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800c300000000000800c4"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000008274b27b42f79716d500"/37], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64], 0x0, 0x0, 0xfffffd3c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095", @ANYRESOCT=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r9}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r1, 0x200, 0x3ff, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x33}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4b}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x6d}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd1c4, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x20000005) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") 979.912933ms ago: executing program 0 (id=1513): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000175ff8fe004000"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000008579000000000000000000010500000010000000000000000000000a02"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) 893.376789ms ago: executing program 1 (id=1515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01070000000000000000679ac50008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800c300000000000800c4"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000008274b27b42f79716d500"/37], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64], 0x0, 0x0, 0xfffffd3c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095", @ANYRESOCT=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r10}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r1, 0x200, 0x3ff, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x33}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4b}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x6d}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd1c4, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x20000005) syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs27+KJFUUB+BfVXdXdYNLa2KoDZsYuYHxsKOyOywYLIKZoKmJiGAgKFONookamRj4AptMIBgZD6IvIMIwBoJmIgZq4Fyp/jc1YySNqPB9QXHuufeccxuqwwr/b2U+SkbXkuO6rrbx/I9k+dLTSbtYrSebfH/ghQd37t5b3K+aXa5KfuqSetOnfzTJY7vGWWyiL8b58MHR+x99/FaTLt35cZJPky4p7fZqq9p80vzl0r9V2+b8u564tq52j16XhzNdRbeyectGq3TaPmre23v+ycHp8nYflPXQWXM5Pcnh1dN1jm+uo0l+vsikXuy2Nm/T7fX1rmqTUspk0Gb7L5gMpj315XfHWTbrndGgtnc2S147e/7JatADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nrKxWhzmkWlSJeN+9dkzVbc+NF5nnm3G6/Xvw6L9nByczt959/U6bx688s2rb39/9OP0lySj3Dp6qLTt7tzLaQdV46S+SPLobN/5Zdv2jReH6UWW+ermt4/Xo5Qyv8xPqv75edLluctaAAAAAAAAAAAAAAAAAAAA2NOdu/cW9+vZ9uv6epsvmSbVtQ/cy6+llMOU5kp2luTr81RJfkiphltNMr+RpP2gyWajS0q5Mf3nfhF/x58BAAD//++eW/s=") 870.184941ms ago: executing program 0 (id=1516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r0, 0x680}], 0x1, 0x800) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f9104", 0xa2, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) 766.865368ms ago: executing program 3 (id=1517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_clone(0x4023480, 0x0, 0x8637, 0x0, 0x0, 0x0) 724.62551ms ago: executing program 3 (id=1518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000002c0), &(0x7f00000003c0)={'L+', 0xd44d}, 0x16, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='filemap_set_wb_err\x00', r5}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x7ffff000) 643.973086ms ago: executing program 3 (id=1519): r0 = syz_open_dev$usbfs(0x0, 0x80000000003, 0x301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 643.575016ms ago: executing program 3 (id=1520): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier}, {@nojournal_checksum}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x58f, &(0x7f0000000c80)="$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") utime(&(0x7f0000000280)='./file1\x00', 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004a40)=[{{&(0x7f00000017c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r3, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x50, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="97", 0x1, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r7}) 639.395586ms ago: executing program 1 (id=1521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800010000000000000000000a03000000000000000000000c00160008000100030000000800", @ANYRES32, @ANYBLOB="060015"], 0x38}}, 0x0) 590.33549ms ago: executing program 2 (id=1522): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1600"/20, @ANYRES32=0x1, @ANYBLOB="c8b9ffff7000005f04c08e479442e738261f7b2ccd3e000000004d360ab434836ca3b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000500), 0x20000000}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048001}, 0x40014) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f000009e080)='<', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="7cffa9061b", 0x5, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r5, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) epoll_create1(0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x102, 0xffffffffffffffff, 0x4e7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x3d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) unshare(0x20000400) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f00000003c0)={0x1, 0x1, 0x7, 0x400, {0x5, 0x6, 0x7f, 0x9eb3, 0x1}, [0x4]}}, @name="fb41d0bccf751a0046c50e2c9d5552e4e556499e39cacaf9f03a1a9467e9b51ccb457ef7ce9abc7fe03af496ff80bb548428563d69d839869323b9fa1108daea698ceba38a1bd7680ffeee4f104da9dcfdf21f51feecfb505161309ffe71772da089dad4e773734455322d7ee92d3c9b08de4d49dc2db3e0721c4259b9cfde2634b85a447cc0199eb9dad7c70482e1591d2e92f0ce7d522703d29d0244114e4643557bd58b8c7b4db792b0d830fb80677f4938bb722da1624ee444eec7dc100efa7a4f9357346a2945fb56815b27378a4095feb395e45c9c2f6fe7c082ea8e4b7cd66106469bf166c721acb4c1369c2ab3aecdc4fa2e85b382f9350e28bf059c2d8c42982d176c72066a5be9cde486e805cdd19c368a7de425fc347fecbe09ad1aa668158290f0fb406b84ec2d9059954c658bf755be9fa196efdac11b40879f66b4a1a72550657a652c99ed108e39468113cb2ae00d43771aaf99c7c72a2014fe394ae10251d82365f8eb73571bf0c1d443b1cf76b7319e18e2fbcf21e8099d9e47709c580d6e25ec39f9ded643855fb9e16eea85e74263898510248d06fef434fe2890b29e0a68aa2071c4d89b74b5a66fe252824923e4b1eb544e42735f52f0ac1889a1bee6abb0013a89f88096e9a67f1e7491e8af0ccbf930bf9992fac3eb188ce38f57fa995f5b486e25005b1d527400bcbe73fe19ddcd1e48a1e587e81207912a054a0359a19927baf13c49c529f2e06b3a1fa2d7d427e5292d517b647656283384923bcaa8081194252f1aebfeaba627350c61b2802b4c9010f5eb3f7071b2ae51eac7524412c184bfa55b4bf97afe34e32aa9c10aefa0a3fcd9db348752d09b9ffb0e8a3c29dc361d1a0f066a47d883accd4bc95e7f8d525c0d37bc06523a806a333711d80d79fb50dc3c8dc5f485da7592930148a6330be6b02deeeca484f8065c50516278d5217136e3fce6534f277dadef5bc9dbc070354fc9143e8044cac5f68e7917de6a3e7c7f0e68303df6f4b7549e58c8f25af459d6a6caa201c49a34aa8769e7a2c035417aeb18f17e085a61e27efd6bfd5e8d7f74479e73cd4a8b493ac1b6ac8ea54f44214d06324bc30457a7ac523ee688ee97024b433f788538a0a548e7d22aa9405165dbbbfa7509bd18e02e6a398fc8937eb47b97c160b2edc3277229d32de00ec7ac1f9fee3d35adddd69d4a4c7920e943c44288d83b122b4c509db02c66d86e8782c1e10259ee06251cdf338670a8c8f526c729add35d5b149cc88b34e36cbbe3b6a38421924a8f3e09d4ce00b3cf943bd77ca342679cab2adb0df82ee294439a1ff6af02b7cf65064ad36a01fb409c4b924ae1363035527855d15454b54f178b26119d58f04fba81f695a75c12ae8b26851cacb0a1d94e0125798b91c1d03137df3660ac10ec4982770d11eff8c74d3c406e1f17190ebaf96b4a281eddc23629f429ee0e561fccd56c1e72a200dce8c2a3733db34ad564c23e525c53786f816f2debf2c35ded162150b214e103ea42d24b28c7d48658991412798ec682feee94dad1cd0bc11c7060c1404ff6f27581f44e9532a780683bf7e02f3ee4733412268d8a6b7ab9a74c4aee2772d8119006bf03e738382a8d729860e6873b9704cef81011c6d553fa9367764f49b781737cb0cff613f5d4419b7a065b19e0c1378e3a9623751d409c7fd6d49c18e8ce85901d76547d01d2526f6014d41094de325db75a98b5290eb4e120c31e2fd4e208ab25c3e217f09270baedb9076eb4d50efe686313e2a1357b4ee19527c231c5cdb7e165ce22053009f3a5d2c86f8ac41938841f3c557366418c68e8c71404de4df886f209676e5220e4c363e536500d3e5967d00ca47aaa3f8cb960961a4fad6dc95816f88df387f822c1a8b99ab7a2392bbcbe641945dde1b97b9310e58c240f7e62dc79449a554d65ab2178ecdd9b41b9a34155c77d6a84bfe2a3326e256d62cb1471d1c9e400f147f293d6fa9c8152e16b9abfe1ad42e8a552c7cb2017042b838373a7d3268740bebbd99f2276978f3b28d06fe5512b821e711750a79301ab7b537c1efbb12f6be8cf7385c97ec13d0d12de5756d7efd9778b40485a813da628837f844588876ac97ee84f5313409eeb62c84804aa3a22aec3c1870821836a49d6e407554a3de1a529ee8e55a4c50967d7d814d0dad4960f3d793dca6bca6164cbce017286a8b9b9e13a3d1cc953f6d91e978f6158be0ca2db580a4249fe9965df847dbc4554f840b133ec28dc20dfa5a88f76a49ee0d07b99cebaa9927ef0756b2bde7b335498da24c6bb2ec34e5b38738bca879aba2222d2ca941aecba84035d177f081252cf47fd350086e694eed1f8ff639527d1171297a5a8b7fe87c4252d9361936805dcfdb8cc5692a216f2bf5e5440b39543f8a17ffb299515eb188489bd021665b96679fea156341ac713d209dde799b4587cb6d7f6e55ddb0ec7fc10fa179081646271d872c884f1860b9e3895465999831bd13fcd3106d486bc4fba59db3dd9ebd69cb41eda68c95912a4dff95a2496e6bdb77ac60676242a5626dd2b5616a32d43f6241189d1a89d2818bf64842b813b8ad97dff6a11fed2ff1b9d01af7ff4c878fa5be2c6bf1757fd01c8f2661ef2c0a3dad6d8f61deda9d7c00a76b27bd5a8d3764e623e446dabb77495a88151e274e001c3ecdac00d1147e12a7cf339d9ba9fe586b800e4282b14ebd46abbfab251de89a894504f33545d47e7f18d571c20f3d8bb513f5f5937b381e491ada77149bf5790c9b2e3b7b295549bd798db09e2a9a3c3f8e8073156a5bcc6de858080ea79481d310f7ba27c922843daa6cb99a5a06f4aadf082df2ef03397cfdcc4d26909b539a493df881c098e12e0686ce1da41d6abdff0a79e64c1e51f293e2d695b0a47b405c66d6975d46521fef50b5401cf8c2aff9085386137690535822d067ca4cf366c6b0a0e4ec5ab9744aa0cb2eb0509c2cc537d529dbd62e3e50559ba16773cbbe2eae84382a0d3e6d048b05cd366cdc8642e9be3f711ae981f468c506bb810ef8b2caa0fce108243971a08fa9c2ec23b0108a41403ea6579badd4bf7e65d7a3e91fa49e3c190f36f5126014fab9290bc94bd2c7013f906d65d962c37ed9b8da775fad1dd49ad1fadc20de0fb0924e41e4cf7753212ea08df665f33952b057c6e5713d5c2b55a03d345e797d25031777e1eb7f610904e8b28a76fcd9db1b83814f264ef09a3531dc6f96344caae66c2818f3635f67adc67e35293feb0da7bc1d2d5740693b7e84ba32240a3e6d0d408e80b3ae1357d47dd420897a964d1b8a683105c6b94005e48631cc5049168ee7d42fef05d901aedfe41dd9d4390cdbd45d7f4d327040eec78bbbf23de4590b32c5b964ab441552780cc41f4de97198be093cfdb52c53a1defdaee36eab99362dc22785dd54837e7d0e6c7c29b448575abc2a5130776141e8766283ad11370e0b85d045012a0e0c359e5d67019c1f2866869b3b2abd647d3047c88d96bd40b63e9efe6ba687d94bd42c72e14f055dc0ae8d0f90c048779f31585d29f38ee34118c346e3c3b00d6a12e6d8e409ae8b1d9d90bce6eeb4a6ed8357cb5fe8cee9089738a5352bd26bc2437ae74a0d48e8906f78b3473ede88bcf783f7c2d9ce0597e3fb9badca65c3973ae2a29a2c18e6019f23af887dc5ec7a68bb8e9d4314f0540025374933c998433f6173fe0986d9b1d2722d5de797a9aa9ffdeaa4a7f1dd2a36824c79c718cc6f40ca2f9ed8c3a4fd868312104b42a16ba487ec14d49e066a6b5df245413b3fda323245d1b3c665e6298488d836b230de37f1490d47586498e3778152365a43476026d6c82f4e88bac9c9a47ed949441b3a9292d87ccec28bf4ecc974e96a2e8f66c23c31529d78c1c53751c90c9368d1700dae1370f8c849e46e9d89d210871de6dcf621e971f4bae4f1d2fb71ffc91c9117f94908f467a42966ec8fbdefe4374ae9312e23679891d30e985252f07d3dbd1fabc559cddb26d254383a9a500d294aede9eafc3c8e6d5ec96cd909e5bb63d46f412c07511bfd79710f1ee986cac52ce3228b771e2083e55f5b8639cdfeda1faef7a84aa46d45d9fb7580bd5f356028c5272a8fb599993763e99ce2f287411982ee39dd45c0e58c1736b02393272f4fd51166bb21a980d29c63c8fe8131245063fea61ada455dca49739eb1386110c255db2d46443438e652b4c3c277490ac31c2904bc8859cb70733e5fc2ee9bbc180ea1e0b1ee67708531ea8e913d0c0d7d05a59adcfbc39693eccd2f1d8011e5dfec89c7d7b94012f60ecfcdf133527f9459609343107ff030b546e4158ffbfeaafe7efad5181cce3ab492074d225d247f0376c7eb742dd730d16a3eda2c4c516a2000eacaa79e89b3d1e5087301ef4e819817dd79df8d9720a5ad3089175fde4aad534aca926eb99e3657edd380645e1cf8331b4a5026c7bc8a8477689590424506e904f12344dcbe8d32a46f360c2ce4108800e8954d7d94d301b3f2a699b233bc1d1a42b34760192b9fb476101d8fdace62548bbb75b9b619d5978296c47085d462082cf48c27cfe7a76b265ad2f11ebcfa731f237e7acb32dc7bdc8ed689c4f2baf1d85175e04e82938992645a30340413867eb858c2de87772bb9d1173e3fc2d7696142d1fd2b1cc4f3e15e6e59d718f9c1203c42339a8750f618448ab2966b218fe1dbdb49c9e534102d699b36914dc6ebc9a7a401baf4397b616ba1b3e6bb34c9656445e31e929a76d242fdcc5f084371e382e172e8416bb7190a2fd61b87c9f14f6e8a6298f3912f205223e0e643e65c3f323698107ac605cdb7c7bf375e266682e2e209c654dcd777d5d35d61f0cc32d2cc5a2720f6b7dcf46c6f571ace0b743d76f2ac4701ac0b99be1a6e2174e8146b6ea0b0d1184a793b40d54a630d49d972ac3f5b0901901f658160e41f8d8cacbc9a3a5613457854ba6bcafbc635d78a28b8ccb5dea4cfbf7e63dff00ca32c9847994702078542c72cb9839a15557adea828492b6f424075bcfaf577922e68f233a6909c46aebb762c526f20afa2463015547538865f4b236d614f4ddecf7fde084b974bccf845070eb925a335432e88da312829439572dab86d691ec99c5611b528fad9dfdbb1a7f6e428dda8e8d01b2b23a5e781a81f6cfa7b79c42f7c1b0d11cf6ecb27efe7b6af2c50dedf554ecb745c00614ca27203282adc46c2ae1611daa0ba22db3083b703b4274d8d62eb86ea61560df905ff3aeee3bae0ef22ab7553bb0e1351e4323522f98c651b84bfa2a6da184ef739061e09af9ee23296189429a963ebe59d8908b4f5c3b5eb08827ddff176f8d355f9d79ac688af1c4e36c01f76365198e068c266182603bc29cd6f4b8f09502d9739c8d73a496e6877b9f68a1de20f3544d9d30c716b8b5c042695e6cfde5083ee09d1d10f438ddd9a25656383cf406b62db27b243eb044099c1482f8e3bd5de5071d77b68f969b758c9ad412303f6b0bac13cbbcfab98e1a0f5b754972625f694cfa2f6553dfff692a9f0577d67307ee2ae37a1753e003f410c0cd8ed1928b06bf005203a52e21ca6411863185dbb65861de36ed9eeb30207777b761093d8b575b755fa01708645c0e4cf19dbd43e5f64cd18350eb9c668b923fad3ee2da716e313528746da62a901d0fee4ed6228b9bd3ec3d5d"}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 568.190831ms ago: executing program 0 (id=1523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01070000000000000000679ac50008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800c300000000000800c4"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000008274b27b42f79716d500"/37], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64], 0x0, 0x0, 0xfffffd3c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 567.805771ms ago: executing program 1 (id=1524): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000001640)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/149, 0x95}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000001340)=""/104, 0x68}, {&(0x7f00000013c0)=""/230, 0xe6}, {&(0x7f00000014c0)=""/207, 0xcf}, {&(0x7f00000015c0)=""/103, 0x67}], 0x9, &(0x7f0000001700)=""/244, 0xf4}, 0x66a4}, {{&(0x7f0000001800)=@caif=@util, 0x80, &(0x7f0000001980)=[{&(0x7f0000001880)=""/244, 0xf4}], 0x1, &(0x7f00000019c0)=""/222, 0xde}, 0x401}], 0x2, 0x0, 0x0) 506.239766ms ago: executing program 1 (id=1526): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000150, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004"], 0xfe44, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_enter(r2, 0x70f7, 0x2806, 0x25, &(0x7f0000000040)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000177b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000280)="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", 0x1000}], 0x2) 404.113253ms ago: executing program 3 (id=1527): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0x0, 0x80, 0x0, 0x0, 0x20, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x101c00, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x401, 0x57) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)="a6", 0x1) sendfile(r3, r2, 0x0, 0x3ffff) read(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) r6 = gettid() rt_sigqueueinfo(r6, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 372.603945ms ago: executing program 1 (id=1528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01070000000000000000679ac50008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800c300000000000800c4"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000008274b27b42f79716d500"/37], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64], 0x0, 0x0, 0xfffffd3c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095", @ANYRESOCT=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r9}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r1, 0x200, 0x3ff, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x33}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x4b}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x6d}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd1c4, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x20000005) syz_read_part_table(0x5c0, &(0x7f0000000000)="$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") 158.11581ms ago: executing program 4 (id=1529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_clone(0x4023480, 0x0, 0x8637, 0x0, 0x0, 0x0) 110.449343ms ago: executing program 4 (id=1530): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, 0x0) 80.797275ms ago: executing program 4 (id=1531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000002c0), &(0x7f00000003c0)={'L+', 0xd44d}, 0x16, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='filemap_set_wb_err\x00', r5}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x7ffff000) 79.968355ms ago: executing program 1 (id=1532): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000740)='./file0\x00', 0x8102, &(0x7f0000000080), 0x7, 0x50a, &(0x7f00000001c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000840)='ext4_ext_handle_unwritten_extents\x00', r0, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@acl}, {@debug}]}, 0xfc, 0x564, &(0x7f0000000940)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000ec0)='qgroup_meta_free_all_pertrans\x00'}, 0x18) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, r2, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 0s ago: executing program 4 (id=1533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r0, 0x680}], 0x1, 0x800) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f9104", 0xa2, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) kernel console output (not intermixed with test programs): recommended to keep mac addresses unique to avoid problems! [ 190.213172][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.223642][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.233498][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.243940][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.253802][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.264260][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.274093][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.284579][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.294408][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.304860][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.315990][T11111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.335952][T11173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.373229][T11111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.382256][T11111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.391301][T11111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.400479][T11111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.421528][T11219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.428525][T11219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.454500][T11219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.491942][T11173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.516811][T11219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.523864][T11219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.549860][T11219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.584938][T11219] hsr_slave_0: entered promiscuous mode [ 190.591799][T11219] hsr_slave_1: entered promiscuous mode [ 190.598198][T11219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.605861][T11219] Cannot create hsr debugfs directory [ 190.617528][T11173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.643348][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 190.643364][ T29] audit: type=1400 audit(2000000155.890:2843): avc: denied { mounton } for pid=11111 comm="syz-executor" path="/root/syzkaller.LY6RPO/syz-tmp" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 190.676643][ T29] audit: type=1400 audit(2000000155.910:2844): avc: denied { mount } for pid=11111 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.698866][ T29] audit: type=1400 audit(2000000155.910:2845): avc: denied { mount } for pid=11111 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 190.736246][ T29] audit: type=1400 audit(2000000155.920:2846): avc: denied { mounton } for pid=11111 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 190.775154][T11369] loop4: detected capacity change from 0 to 512 [ 190.782587][ T29] audit: type=1400 audit(2000000156.030:2847): avc: denied { write } for pid=11173 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.803252][ T29] audit: type=1400 audit(2000000156.030:2848): avc: denied { read } for pid=11173 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.828770][T11173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.836200][T11369] EXT4-fs (loop4): filesystem is read-only [ 190.852602][T11369] loop4: detected capacity change from 0 to 1024 [ 190.856127][T11173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.883403][T11173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.894017][T11173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.901215][T11369] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 190.909640][T11369] System zones: 0-1, 3-12 [ 190.919740][T11369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.937566][ T29] audit: type=1326 audit(2000000156.180:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d151bdef9 code=0x7ffc0000 [ 190.985490][ T29] audit: type=1326 audit(2000000156.210:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d151bdef9 code=0x7ffc0000 [ 191.009708][ T29] audit: type=1326 audit(2000000156.210:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d151bdef9 code=0x7ffc0000 [ 191.033862][ T29] audit: type=1326 audit(2000000156.210:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11368 comm="syz.4.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d151bdef9 code=0x7ffc0000 [ 191.059514][T11111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.102408][T11173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.117062][T11173] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.127708][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.134821][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.164689][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.171815][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.197776][T11173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.208199][T11173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.264053][T11219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.274686][T11219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.294212][T11219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.317244][T11219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.334550][T11173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.413012][T11219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.432442][T11219] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.445232][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.452371][ T3273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.489741][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.496851][ T3273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.547962][T11173] veth0_vlan: entered promiscuous mode [ 191.568233][T11173] veth1_vlan: entered promiscuous mode [ 191.599674][T11173] veth0_macvtap: entered promiscuous mode [ 191.612284][T11173] veth1_macvtap: entered promiscuous mode [ 191.634933][T11219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.647320][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.658629][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.668594][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.679270][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.689561][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.700398][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.710275][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.720991][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.730922][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.741558][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.751442][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.762064][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.772003][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.782637][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.792560][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.803014][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.812937][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.823411][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.833248][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.843755][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.855895][T11173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.881475][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.892119][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.901998][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.912578][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.922521][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.933106][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.942975][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.953479][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.963416][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.973881][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.983869][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.994360][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.004209][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.014844][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.025161][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.035648][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.045490][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.055953][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.065825][T11173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.076294][T11173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.091004][T11173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.100452][T11173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.109320][T11173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.118028][T11173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.126804][T11173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.162292][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 192.294850][T11219] veth0_vlan: entered promiscuous mode [ 192.313443][T11219] veth1_vlan: entered promiscuous mode [ 192.398827][T11219] veth0_macvtap: entered promiscuous mode [ 192.423765][T11219] veth1_macvtap: entered promiscuous mode [ 192.465888][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.476474][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.486501][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.496345][T11490] loop1: detected capacity change from 0 to 2048 [ 192.497138][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.513256][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.523733][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.533586][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.544134][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.554015][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.564580][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.574536][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.585062][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.595001][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.605468][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.615379][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.625952][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.635854][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.646462][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.656571][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.667190][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.677116][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.687741][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.701458][T11219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.710330][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.720836][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.730880][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.741442][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.754076][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.764599][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.774536][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.779535][T11490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.785037][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.807589][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.818077][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.828144][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.838704][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.848556][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.859063][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.869104][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.880448][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.890320][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.900790][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.910676][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.921181][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.931086][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.941632][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.960645][T11219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.971501][T11492] loop4: detected capacity change from 0 to 512 [ 192.987201][T11219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.996123][T11219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.005061][T11219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.013957][T11219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.068184][T11492] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1345: bg 0: block 248: padding at end of block bitmap is not set [ 193.085096][T11490] pim6reg1: entered promiscuous mode [ 193.090498][T11490] pim6reg1: entered allmulticast mode [ 193.106164][T11492] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.1345: Failed to acquire dquot type 1 [ 193.132354][T11492] EXT4-fs (loop4): 1 truncate cleaned up [ 193.154579][T11492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.191698][T11492] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.206929][T11173] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.230999][T11111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.320299][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 193.331284][T11504] loop1: detected capacity change from 0 to 512 [ 193.363135][T11504] EXT4-fs (loop1): filesystem is read-only [ 193.390121][T11504] loop1: detected capacity change from 0 to 1024 [ 193.421930][T11509] pim6reg1: entered promiscuous mode [ 193.424742][T11504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 193.427300][T11509] pim6reg1: entered allmulticast mode [ 193.441757][T11504] System zones: 0-1, 3-12 [ 193.446807][T11504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.504070][T11173] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.584437][T11518] loop2: detected capacity change from 0 to 8192 [ 193.591927][T11518] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.697453][T11528] loop2: detected capacity change from 0 to 2048 [ 193.724882][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 193.749791][T11528] loop2: p3 < > p4 < > [ 193.753986][T11528] loop2: partition table partially beyond EOD, truncated [ 193.761408][T11528] loop2: p3 start 4284289 is beyond EOD, truncated [ 193.801958][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1356'. [ 193.810974][T11537] tipc: Started in network mode [ 193.815910][T11537] tipc: Node identity 40060020000000006e, cluster identity 8 [ 194.062126][T11539] loop2: detected capacity change from 0 to 512 [ 194.104173][T11539] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1357: bg 0: block 248: padding at end of block bitmap is not set [ 194.120411][T11539] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1357: Failed to acquire dquot type 1 [ 194.134670][T11539] EXT4-fs (loop2): 1 truncate cleaned up [ 194.143146][T11539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.157252][T11539] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.187005][T11539] syz.2.1357 (11539) used greatest stack depth: 8400 bytes left [ 194.201563][T10864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.225997][T11545] loop2: detected capacity change from 0 to 512 [ 194.236012][T11545] EXT4-fs (loop2): filesystem is read-only [ 194.252045][T11545] loop2: detected capacity change from 0 to 1024 [ 194.291092][T11545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 194.299543][T11545] System zones: 0-1, 3-12 [ 194.304444][T11545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.369712][T10864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.448798][T11553] loop3: detected capacity change from 0 to 1024 [ 194.457818][T11553] EXT4-fs: Ignoring removed orlov option [ 194.463629][T11553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.481375][T11553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.527725][T11219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.079998][T11561] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1363'. [ 195.089607][T11561] netlink: 'syz.4.1363': attribute type 10 has an invalid length. [ 195.108977][T11561] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 195.145737][T11563] loop4: detected capacity change from 0 to 1024 [ 195.152893][T11563] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.164005][T11563] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 195.172577][T11563] EXT4-fs (loop4): too many log groups per flexible block group [ 195.180305][T11563] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 195.187104][T11563] EXT4-fs (loop4): mount failed [ 195.227106][T11566] loop4: detected capacity change from 0 to 1024 [ 195.234249][T11566] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.245413][T11566] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 195.254335][T11566] EXT4-fs (loop4): too many log groups per flexible block group [ 195.262196][T11566] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 195.271189][T11566] EXT4-fs (loop4): mount failed [ 195.302577][T11569] loop2: detected capacity change from 0 to 1024 [ 195.317530][T11569] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.331564][T11569] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 195.345200][T11569] EXT4-fs (loop2): too many log groups per flexible block group [ 195.353088][T11569] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 195.360063][T11569] EXT4-fs (loop2): mount failed [ 195.519176][T11580] loop3: detected capacity change from 0 to 512 [ 195.526971][T11580] EXT4-fs (loop3): filesystem is read-only [ 195.545155][T11580] loop3: detected capacity change from 0 to 1024 [ 195.564020][T11580] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 195.572370][T11580] System zones: 0-1, 3-12 [ 195.577377][T11580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.637756][T11219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.661076][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 195.661094][ T29] audit: type=1400 audit(2000000160.910:3100): avc: denied { create } for pid=11583 comm="syz.3.1371" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.689300][ T29] audit: type=1400 audit(2000000160.910:3101): avc: denied { map } for pid=11583 comm="syz.3.1371" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.713711][ T29] audit: type=1400 audit(2000000160.910:3102): avc: denied { read write } for pid=11583 comm="syz.3.1371" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.742135][ T29] audit: type=1326 audit(2000000160.930:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11573 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d151bdef9 code=0x7ffc0000 [ 195.765995][ T29] audit: type=1326 audit(2000000160.960:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11573 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d151bdef9 code=0x7ffc0000 [ 195.793302][ T29] audit: type=1400 audit(2000000161.020:3105): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 195.815714][ T29] audit: type=1400 audit(2000000161.020:3106): avc: denied { search } for pid=2943 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.837709][ T29] audit: type=1400 audit(2000000161.020:3107): avc: denied { open } for pid=2943 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.860574][ T29] audit: type=1400 audit(2000000161.020:3108): avc: denied { getattr } for pid=2943 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.893460][ T29] audit: type=1400 audit(2000000161.040:3109): avc: denied { unmount } for pid=11111 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 195.897280][T11588] loop4: detected capacity change from 0 to 1024 [ 195.920607][T11588] EXT4-fs: Ignoring removed orlov option [ 195.926346][T11588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.940742][T11588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.969954][T11111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.294386][T11596] loop2: detected capacity change from 0 to 512 [ 196.324852][T11596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.337689][T11596] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.358117][T11596] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.1374: Directory hole found for htree leaf block 0 [ 196.385050][T10864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.423924][T11600] loop2: detected capacity change from 0 to 1024 [ 196.431860][T11600] EXT4-fs: Ignoring removed orlov option [ 196.437679][T11600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.461705][T11600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.523769][T10864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.564473][T11604] loop3: detected capacity change from 0 to 2048 [ 196.596272][T11604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.609028][T11604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.622255][T11604] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 196.629873][T11604] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 196.766201][T11611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1378'. [ 196.778840][T11611] team_slave_0: entered promiscuous mode [ 196.784537][T11611] team_slave_1: entered promiscuous mode [ 196.795004][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 197.124684][T11622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1381'. [ 197.138545][T11622] team_slave_0: entered promiscuous mode [ 197.144331][T11622] team_slave_1: entered promiscuous mode [ 197.155856][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'. [ 197.345566][T11629] loop1: detected capacity change from 0 to 1024 [ 197.359917][T11629] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.373219][T11629] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 197.392279][T11629] EXT4-fs (loop1): too many log groups per flexible block group [ 197.400075][T11629] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 197.407304][T11629] EXT4-fs (loop1): mount failed [ 197.472780][T11632] loop2: detected capacity change from 0 to 512 [ 197.501473][T11632] EXT4-fs (loop2): filesystem is read-only [ 197.508199][T11634] loop1: detected capacity change from 0 to 512 [ 197.547316][T11634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 197.550020][T11632] loop2: detected capacity change from 0 to 1024 [ 197.560264][T11634] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.591961][T11632] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 197.601376][T11632] System zones: 0-1, 3-12 [ 197.606620][T11632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.637385][T11173] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 197.674394][T10864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.007947][T11660] loop1: detected capacity change from 0 to 512 [ 198.027872][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 198.059204][T11660] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1394: bg 0: block 248: padding at end of block bitmap is not set [ 198.075875][T11660] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.1394: Failed to acquire dquot type 1 [ 198.108226][T11660] EXT4-fs (loop1): 1 truncate cleaned up [ 198.120475][T11660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.140210][T11660] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.165224][T11173] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.214133][T11670] loop1: detected capacity change from 0 to 1024 [ 198.222449][T11670] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 198.243366][T11670] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 198.251922][T11670] EXT4-fs (loop1): too many log groups per flexible block group [ 198.259624][T11670] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 198.266473][T11670] EXT4-fs (loop1): mount failed [ 198.379418][T11674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.407418][T11674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.410529][T11676] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1398'. [ 198.428621][T11676] netlink: 'syz.4.1398': attribute type 10 has an invalid length. [ 198.526233][T11676] loop4: detected capacity change from 0 to 2048 [ 198.579225][T11676] loop4: p3 < > p4 < > [ 198.583577][T11676] loop4: partition table partially beyond EOD, truncated [ 198.591227][T11676] loop4: p3 start 4284289 is beyond EOD, truncated [ 198.601425][ T2961] loop4: p3 < > p4 < > [ 198.605602][ T2961] loop4: partition table partially beyond EOD, truncated [ 198.615194][ T2961] loop4: p3 start 4284289 is beyond EOD, truncated [ 198.639026][ T3462] udevd[3462]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 198.658340][ T3462] udevd[3462]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 198.662310][T11680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1399'. [ 198.687184][T11680] netlink: 'syz.4.1399': attribute type 10 has an invalid length. [ 198.747988][T11680] loop4: detected capacity change from 0 to 2048 [ 198.791640][T11680] loop4: p3 < > p4 < > [ 198.796054][T11680] loop4: partition table partially beyond EOD, truncated [ 198.807088][T11680] loop4: p3 start 4284289 is beyond EOD, truncated [ 198.822093][ T2961] loop4: p3 < > p4 < > [ 198.826309][ T2961] loop4: partition table partially beyond EOD, truncated [ 198.856164][ T2961] loop4: p3 start 4284289 is beyond EOD, truncated [ 198.890693][ T3462] udevd[3462]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 198.909070][ T3462] udevd[3462]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 198.921775][T11704] FAULT_INJECTION: forcing a failure. [ 198.921775][T11704] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 198.923903][T11701] loop4: detected capacity change from 0 to 1024 [ 198.936223][T11704] CPU: 1 UID: 0 PID: 11704 Comm: syz.2.1404 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 198.955336][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 198.966045][T11704] Call Trace: [ 198.969343][T11704] [ 198.972399][T11704] dump_stack_lvl+0xf2/0x150 [ 198.974309][T11701] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 198.977051][T11704] dump_stack+0x15/0x20 [ 198.992254][T11704] should_fail_ex+0x229/0x230 [ 198.997135][T11704] should_fail_alloc_page+0xfd/0x110 [ 199.002655][T11704] __alloc_pages_noprof+0x109/0x360 [ 199.008227][T11704] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 199.013664][T11704] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 199.019080][T11704] handle_mm_fault+0xdca/0x2a30 [ 199.023970][T11704] exc_page_fault+0x3b9/0x650 [ 199.028771][T11704] asm_exc_page_fault+0x26/0x30 [ 199.033910][T11704] RIP: 0033:0x7f4eb122b22b [ 199.038910][T11704] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 199.060405][T11704] RSP: 002b:00007f4eafeb2e10 EFLAGS: 00010246 [ 199.067355][T11704] RAX: 00007f4eafeb4f30 RBX: 00007f4eb140b620 RCX: 0000000000000000 [ 199.076956][T11704] RDX: 00007f4eafeb4f78 RSI: 00007f4eb12dc900 RDI: 00007f4eafeb2e30 [ 199.085049][T11704] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 199.093576][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.101552][T11704] R13: 0000000000000000 R14: 00007f4eb1436130 R15: 00007ffe3944ec48 [ 199.109539][T11704] [ 199.112786][T11704] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 199.133329][T11708] loop3: detected capacity change from 0 to 512 [ 199.134080][T11701] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 199.148224][T11701] EXT4-fs (loop4): too many log groups per flexible block group [ 199.155944][T11701] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 199.165569][T11701] EXT4-fs (loop4): mount failed [ 199.183640][T11708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.200298][T11708] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.220635][T11708] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1406: Directory hole found for htree leaf block 0 [ 199.236145][T11714] loop2: detected capacity change from 0 to 1024 [ 199.254871][T11714] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 199.268218][T11692] chnl_net:caif_netlink_parms(): no params data found [ 199.281302][T11714] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 199.290177][T11714] EXT4-fs (loop2): too many log groups per flexible block group [ 199.298115][T11714] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 199.305681][T11714] EXT4-fs (loop2): mount failed [ 199.307504][T11219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.365908][T11692] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.373616][T11692] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.383620][T11692] bridge_slave_0: entered allmulticast mode [ 199.391813][T11692] bridge_slave_0: entered promiscuous mode [ 199.401006][T11692] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.408277][T11692] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.416856][T11692] bridge_slave_1: entered allmulticast mode [ 199.426107][T11692] bridge_slave_1: entered promiscuous mode [ 199.489466][T11692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.498893][T11730] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 199.508742][T11692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.537982][T11692] team0: Port device team_slave_0 added [ 199.547756][T11692] team0: Port device team_slave_1 added [ 199.578006][T11692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.585115][T11692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.611684][T11692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.627863][T11692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.636420][T11692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.663759][T11692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.745563][T11692] hsr_slave_0: entered promiscuous mode [ 199.762215][T11692] hsr_slave_1: entered promiscuous mode [ 199.778085][T11692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.798162][T11692] Cannot create hsr debugfs directory [ 199.804047][T11737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1413'. [ 199.972042][T11692] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.062375][T11692] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.140697][T11692] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.216620][T11742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1415'. [ 200.253466][T11692] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.304820][T11742] team_slave_0: entered promiscuous mode [ 200.310743][T11742] team_slave_1: entered promiscuous mode [ 200.346429][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'. [ 200.416950][T11692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.435906][T11692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.471333][T11692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.493579][T11692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.555727][T11748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1417'. [ 200.581430][T11692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.595020][T11748] team_slave_0: entered promiscuous mode [ 200.600735][T11748] team_slave_1: entered promiscuous mode [ 200.607208][T11735] syz.3.1413 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 200.618237][T11735] CPU: 1 UID: 0 PID: 11735 Comm: syz.3.1413 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 200.629021][T11735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 200.639169][T11735] Call Trace: [ 200.642530][T11735] [ 200.645529][T11735] dump_stack_lvl+0xf2/0x150 [ 200.650304][T11735] dump_stack+0x15/0x20 [ 200.654591][T11735] dump_header+0x83/0x2d0 [ 200.658940][T11735] oom_kill_process+0x341/0x4c0 [ 200.663898][T11735] out_of_memory+0x9af/0xbe0 [ 200.668563][T11735] ? __rcu_read_unlock+0x4e/0x70 [ 200.673516][T11735] mem_cgroup_out_of_memory+0x13e/0x190 [ 200.679260][T11735] try_charge_memcg+0x51b/0x810 [ 200.684128][T11735] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 200.690217][T11735] __read_swap_cache_async+0x2b7/0x520 [ 200.695965][T11735] swap_cluster_readahead+0x276/0x3f0 [ 200.701395][T11735] swapin_readahead+0xe4/0x760 [ 200.706253][T11735] ? __filemap_get_folio+0x420/0x5b0 [ 200.712081][T11735] ? swap_cache_get_folio+0x77/0x210 [ 200.717426][T11735] do_swap_page+0x3da/0x1ef0 [ 200.722113][T11735] ? cgroup_rstat_updated+0x99/0x550 [ 200.727564][T11735] ? __rcu_read_lock+0x36/0x50 [ 200.732343][T11735] ? pte_offset_map_nolock+0x124/0x1d0 [ 200.737902][T11735] handle_mm_fault+0x8cb/0x2a30 [ 200.742940][T11735] exc_page_fault+0x3b9/0x650 [ 200.747640][T11735] asm_exc_page_fault+0x26/0x30 [ 200.752605][T11735] RIP: 0033:0x7fd9eb2aff93 [ 200.757021][T11735] Code: 83 07 00 48 8d 3d 36 83 07 00 e8 48 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 9e c5 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 200.776750][T11735] RSP: 002b:00007ffeaa267638 EFLAGS: 00010293 [ 200.782909][T11735] RAX: 00000000fffffffa RBX: 00007fd9eb435f80 RCX: 0000000000000000 [ 200.791565][T11735] RDX: 00007ffeaa267650 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.799977][T11735] RBP: 00007fd9eb437a80 R08: 000000001a3fb74b R09: 7fffffffffffffff [ 200.807954][T11735] R10: 0000000000000000 R11: 00007fd9eb0fa080 R12: 0000000000030f46 [ 200.816138][T11735] R13: 00007ffeaa267780 R14: 0000000000000032 R15: ffffffffffffffff [ 200.824150][T11735] [ 200.827877][T11735] memory: usage 307200kB, limit 307200kB, failcnt 479 [ 200.834893][T11735] memory+swap: usage 305208kB, limit 9007199254740988kB, failcnt 0 [ 200.842816][T11735] kmem: usage 290500kB, limit 9007199254740988kB, failcnt 0 [ 200.850231][T11735] Memory cgroup stats for /syz3: [ 200.859995][T11735] cache 163840 [ 200.868512][T11735] rss 0 [ 200.871443][T11735] shmem 0 [ 200.875315][T11735] mapped_file 163840 [ 200.879399][T11735] dirty 163840 [ 200.882864][T11735] writeback 8192 [ 200.886418][T11735] workingset_refault_anon 25 [ 200.891138][T11735] workingset_refault_file 22 [ 200.895739][T11735] swap 356352 [ 200.899095][T11735] swapcached 28672 [ 200.902826][T11735] pgpgin 54580 [ 200.906259][T11735] pgpgout 54533 [ 200.909761][T11735] pgfault 77981 [ 200.913315][T11735] pgmajfault 14 [ 200.916838][T11735] inactive_anon 0 [ 200.920598][T11735] active_anon 28672 [ 200.924498][T11735] inactive_file 0 [ 200.928184][T11735] active_file 163840 [ 200.932296][T11735] unevictable 0 [ 200.935760][T11735] hierarchical_memory_limit 314572800 [ 200.941226][T11735] hierarchical_memsw_limit 9223372036854771712 [ 200.947405][T11735] total_cache 163840 [ 200.951361][T11735] total_rss 0 [ 200.954705][T11735] total_shmem 0 [ 200.958171][T11735] total_mapped_file 163840 [ 200.962635][T11735] total_dirty 163840 [ 200.966540][T11735] total_writeback 8192 [ 200.970892][T11735] total_workingset_refault_anon 25 [ 200.976094][T11735] total_workingset_refault_file 22 [ 200.981675][T11735] total_swap 356352 [ 200.985665][T11735] total_swapcached 28672 [ 200.990060][T11735] total_pgpgin 54580 [ 200.994052][T11735] total_pgpgout 54533 [ 200.998096][T11735] total_pgfault 77981 [ 201.002127][T11735] total_pgmajfault 14 [ 201.006120][T11735] total_inactive_anon 0 [ 201.010307][T11735] total_active_anon 28672 [ 201.014714][T11735] total_inactive_file 0 [ 201.018898][T11735] total_active_file 163840 [ 201.023364][T11735] total_unevictable 0 [ 201.027347][T11735] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1413,pid=11735,uid=0 [ 201.042392][T11735] Memory cgroup out of memory: Killed process 11735 (syz.3.1413) total-vm:87116kB, anon-rss:720kB, file-rss:16164kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 201.065121][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1417'. [ 201.100616][T11751] loop1: detected capacity change from 0 to 512 [ 201.113229][T11692] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.128426][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.134069][T11751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.135613][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.150933][T11751] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.171459][T11751] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.1418: Directory hole found for htree leaf block 0 [ 201.177549][T11755] loop3: detected capacity change from 0 to 2048 [ 201.194279][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.201386][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.249388][T11173] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.263360][T11757] FAULT_INJECTION: forcing a failure. [ 201.263360][T11757] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 201.276546][T11757] CPU: 0 UID: 0 PID: 11757 Comm: syz.2.1421 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 201.287343][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 201.297477][T11757] Call Trace: [ 201.300777][T11757] [ 201.303746][T11757] dump_stack_lvl+0xf2/0x150 [ 201.306754][T11692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.308356][T11757] dump_stack+0x15/0x20 [ 201.319340][T11757] should_fail_ex+0x229/0x230 [ 201.324109][T11757] should_fail+0xb/0x10 [ 201.328307][T11757] should_fail_usercopy+0x1a/0x20 [ 201.333383][T11757] _copy_from_user+0x1e/0xd0 [ 201.338012][T11757] move_addr_to_kernel+0x82/0x120 [ 201.340427][T11755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.343075][T11757] __sys_sendto+0x16b/0x260 [ 201.359561][T11757] __x64_sys_sendto+0x78/0x90 [ 201.364278][T11757] x64_sys_call+0x2959/0x2d60 [ 201.369029][T11757] do_syscall_64+0xc9/0x1c0 [ 201.373550][T11757] ? clear_bhb_loop+0x55/0xb0 [ 201.378330][T11757] ? clear_bhb_loop+0x55/0xb0 [ 201.383057][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.389222][T11757] RIP: 0033:0x7f4eb127def9 [ 201.393741][T11757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.413366][T11757] RSP: 002b:00007f4eafef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 201.421938][T11757] RAX: ffffffffffffffda RBX: 00007f4eb1435f80 RCX: 00007f4eb127def9 [ 201.430110][T11757] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 201.438102][T11757] RBP: 00007f4eafef7090 R08: 0000000020000000 R09: 000000000000001c [ 201.446128][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.454993][T11757] R13: 0000000000000000 R14: 00007f4eb1435f80 R15: 00007ffe3944ec48 [ 201.463217][T11757] [ 201.492209][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 201.492225][ T29] audit: type=1400 audit(2000000166.740:3408): avc: denied { create } for pid=11754 comm="syz.3.1419" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 201.518950][ T29] audit: type=1400 audit(2000000166.740:3409): avc: denied { write open } for pid=11754 comm="syz.3.1419" path="/17/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 201.561598][ T29] audit: type=1400 audit(2000000166.790:3410): avc: denied { mounton } for pid=11754 comm="syz.3.1419" path="/17/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 201.590055][T11755] loop3: detected capacity change from 2048 to 0 [ 201.597306][T11755] bio_check_eod: 25 callbacks suppressed [ 201.597323][T11755] syz.3.1419: attempt to access beyond end of device [ 201.597323][T11755] loop3: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 201.645778][T11755] syz.3.1419: attempt to access beyond end of device [ 201.645778][T11755] loop3: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 201.662314][T11755] syz.3.1419: attempt to access beyond end of device [ 201.662314][T11755] loop3: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 201.676602][T11755] syz.3.1419: attempt to access beyond end of device [ 201.676602][T11755] loop3: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 201.694732][T11755] syz.3.1419: attempt to access beyond end of device [ 201.694732][T11755] loop3: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 201.715480][T11755] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.3.1419: unable to read itable block [ 201.744703][T11755] syz.3.1419: attempt to access beyond end of device [ 201.744703][T11755] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 201.758071][T11755] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 201.763462][T11755] EXT4-fs (loop3): I/O error while writing superblock [ 201.770669][T11692] veth0_vlan: entered promiscuous mode [ 201.777200][T11755] syz.3.1419: attempt to access beyond end of device [ 201.777200][T11755] loop3: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 201.794074][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 201.803084][T11755] syz.3.1419: attempt to access beyond end of device [ 201.803084][T11755] loop3: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 201.810116][T11785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.822038][T11755] syz.3.1419: attempt to access beyond end of device [ 201.822038][T11755] loop3: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 201.853968][ T29] audit: type=1400 audit(2000000167.100:3411): avc: denied { read } for pid=11780 comm="syz.4.1425" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 201.874369][T11755] syz.3.1419: attempt to access beyond end of device [ 201.874369][T11755] loop3: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 201.877026][ T29] audit: type=1400 audit(2000000167.100:3412): avc: denied { open } for pid=11780 comm="syz.4.1425" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 201.913989][ T29] audit: type=1400 audit(2000000167.100:3413): avc: denied { ioctl } for pid=11780 comm="syz.4.1425" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 201.932099][T11755] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.3.1419: unable to read itable block [ 201.941731][T11785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.965594][T11755] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 201.976608][T11755] EXT4-fs (loop3): I/O error while writing superblock [ 201.978168][T11692] veth1_vlan: entered promiscuous mode [ 201.983545][T11755] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: IO failure [ 202.001677][T11755] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 202.010196][T11755] EXT4-fs (loop3): I/O error while writing superblock [ 202.011722][ T29] audit: type=1326 audit(2000000167.260:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d151bdef9 code=0x7ffc0000 [ 202.016987][T11755] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #18: comm syz.3.1419: mark_inode_dirty error [ 202.040452][ T29] audit: type=1326 audit(2000000167.260:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d151bdef9 code=0x7ffc0000 [ 202.056660][T11755] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 202.075381][ T29] audit: type=1326 audit(2000000167.260:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3d151bdef9 code=0x7ffc0000 [ 202.088058][T11692] veth0_macvtap: entered promiscuous mode [ 202.107177][ T29] audit: type=1326 audit(2000000167.260:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.4.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d151bdef9 code=0x7ffc0000 [ 202.146582][T11755] EXT4-fs (loop3): I/O error while writing superblock [ 202.158192][T11692] veth1_macvtap: entered promiscuous mode [ 202.177350][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.187860][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.197809][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.208304][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.218276][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.228909][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.239124][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.249855][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.259685][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.270277][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.280193][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.290681][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.300579][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.311096][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.321157][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.331783][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.341752][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.352654][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.362523][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.372973][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.382912][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.393365][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.399168][T11712] EXT4-fs error (device loop3): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 202.403221][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.421506][T11712] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 202.428008][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.448814][T11692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.456796][T11712] EXT4-fs (loop3): I/O error while writing superblock [ 202.469267][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.480022][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.489916][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.500526][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.510463][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.520978][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.530829][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.541531][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.551381][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.561831][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.572542][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.583462][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.593486][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.604096][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.614040][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.624690][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.634613][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.645150][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.655059][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.665491][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.675351][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.677346][T11794] loop1: detected capacity change from 0 to 1024 [ 202.685816][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.685839][T11692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.685859][T11692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.716730][T11794] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.725728][T11692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.740678][T11794] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 202.746549][T11219] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #2: block 4: comm syz-executor: unable to read itable block [ 202.748691][T11794] EXT4-fs (loop1): too many log groups per flexible block group [ 202.769471][T11794] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 202.788216][T11219] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 202.799902][T11794] EXT4-fs (loop1): mount failed [ 202.805548][T11219] EXT4-fs (loop3): I/O error while writing superblock [ 202.812444][T11219] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: IO failure [ 202.827884][T11692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.832313][T11219] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 202.836893][T11692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.845451][T11219] EXT4-fs (loop3): I/O error while writing superblock [ 202.853966][T11692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.860551][T11219] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 202.861540][T11219] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 202.869345][T11692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.887023][T11797] loop2: detected capacity change from 0 to 1024 [ 202.916305][T11797] EXT4-fs: Ignoring removed orlov option [ 202.922103][T11797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.937348][T11219] EXT4-fs (loop3): I/O error while writing superblock [ 202.945462][ T28] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4559: inode #18: block 6: comm kworker/u8:1: unable to read itable block [ 202.963317][ T28] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 202.973457][T11797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.985883][ T28] EXT4-fs (loop3): I/O error while writing superblock [ 202.995743][ T28] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4559: inode #2: block 4: comm kworker/u8:1: unable to read itable block [ 203.045503][ T28] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 203.252807][T11812] 9pnet_fd: Insufficient options for proto=fd [ 203.352642][ T3351] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.378648][T11815] netlink: 'syz.1.1433': attribute type 10 has an invalid length. [ 203.415432][T11815] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 203.431061][ T3351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.523480][ T3351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.565182][T11827] loop1: detected capacity change from 0 to 2048 [ 203.590929][ T3351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.603053][T11827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.678174][T10864] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 203.689307][T10864] CPU: 1 UID: 0 PID: 10864 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 203.700293][T10864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 203.710375][T10864] Call Trace: [ 203.713715][T10864] [ 203.716665][T10864] dump_stack_lvl+0xf2/0x150 [ 203.721286][T10864] dump_stack+0x15/0x20 [ 203.725635][T10864] dump_header+0x83/0x2d0 [ 203.730051][T10864] oom_kill_process+0x341/0x4c0 [ 203.734962][T10864] out_of_memory+0x9af/0xbe0 [ 203.739577][T10864] ? __rcu_read_unlock+0x4e/0x70 [ 203.744537][T10864] mem_cgroup_out_of_memory+0x13e/0x190 [ 203.750120][T10864] try_charge_memcg+0x51b/0x810 [ 203.755008][T10864] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 203.761109][T10864] __read_swap_cache_async+0x2b7/0x520 [ 203.766695][T10864] swap_cluster_readahead+0x276/0x3f0 [ 203.772247][T10864] swapin_readahead+0xe4/0x760 [ 203.777109][T10864] ? __filemap_get_folio+0x420/0x5b0 [ 203.782439][T10864] ? swap_cache_get_folio+0x77/0x210 [ 203.787862][T10864] do_swap_page+0x3da/0x1ef0 [ 203.792511][T10864] ? __do_wait+0x4c8/0x500 [ 203.796967][T10864] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 203.802367][T10864] ? __rcu_read_lock+0x36/0x50 [ 203.807159][T10864] ? pte_offset_map_nolock+0x124/0x1d0 [ 203.812716][T10864] handle_mm_fault+0x8cb/0x2a30 [ 203.817721][T10864] exc_page_fault+0x3b9/0x650 [ 203.822441][T10864] asm_exc_page_fault+0x26/0x30 [ 203.827333][T10864] RIP: 0033:0x7f4eb1f77e69 [ 203.831767][T10864] Code: 48 89 5d d0 31 c0 48 81 fb 00 ca 9a 3b 72 18 48 81 c3 00 36 65 c4 48 89 5d d0 ff c0 48 81 fb ff c9 9a 3b 77 ea 89 c0 48 01 c8 <48> 89 06 48 89 5e 08 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f [ 203.851937][T10864] RSP: 002b:00007ffe3944ef78 EFLAGS: 00010202 [ 203.858065][T10864] RAX: 00000000000000cb RBX: 000000001c92ac16 RCX: 00000000000000cb [ 203.866141][T10864] RDX: 0000000000000069 RSI: 00007ffe3944f060 RDI: 0000000000000001 [ 203.874202][T10864] RBP: 00007ffe3944efc0 R08: 000000001c92ac16 R09: 7fffffffffffffff [ 203.882344][T10864] R10: 00007f4eb1f730b8 R11: 00007f4eb1f73080 R12: 0000000000000032 [ 203.890337][T10864] R13: 0000000000000010 R14: 0000000000008e44 R15: 00007ffe3944f060 [ 203.898426][T10864] [ 203.902308][T10864] memory: usage 307200kB, limit 307200kB, failcnt 679 [ 203.909424][T10864] memory+swap: usage 309336kB, limit 9007199254740988kB, failcnt 0 [ 203.917498][T10864] kmem: usage 307012kB, limit 9007199254740988kB, failcnt 0 [ 203.924828][T10864] Memory cgroup stats for /syz2: [ 203.939495][T10864] cache 184320 [ 203.939534][T11827] loop1: detected capacity change from 2048 to 0 [ 203.944475][T10864] rss 0 [ 203.957052][T10864] shmem 0 [ 203.957541][ T3351] bridge_slave_1: left allmulticast mode [ 203.960186][T10864] mapped_file 167936 [ 203.965706][ T3351] bridge_slave_1: left promiscuous mode [ 203.969592][T10864] dirty 180224 [ 203.969602][T10864] writeback 4096 [ 203.975224][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.978486][T10864] workingset_refault_anon 15 [ 203.993883][T10864] workingset_refault_file 0 [ 203.998464][T10864] swap 2187264 [ 203.999535][T11833] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.1.1437: unable to read itable block [ 204.001861][T10864] swapcached 8192 [ 204.018210][T10864] pgpgin 69310 [ 204.021615][T10864] pgpgout 69263 [ 204.025126][T10864] pgfault 84362 [ 204.028666][T10864] pgmajfault 13 [ 204.032163][T10864] inactive_anon 8192 [ 204.036061][T10864] active_anon 0 [ 204.039570][T10864] inactive_file 180224 [ 204.043669][T10864] active_file 4096 [ 204.047419][T10864] unevictable 0 [ 204.050951][T10864] hierarchical_memory_limit 314572800 [ 204.056387][T10864] hierarchical_memsw_limit 9223372036854771712 [ 204.062721][T10864] total_cache 184320 [ 204.066884][T10864] total_rss 0 [ 204.070218][T10864] total_shmem 0 [ 204.074164][T10864] total_mapped_file 167936 [ 204.078858][T10864] total_dirty 180224 [ 204.082917][T10864] total_writeback 4096 [ 204.086998][T10864] total_workingset_refault_anon 15 [ 204.091949][T11833] EXT4-fs (loop1): I/O error while writing superblock [ 204.092147][T10864] total_workingset_refault_file 0 [ 204.104133][T10864] total_swap 2187264 [ 204.108049][T10864] total_swapcached 8192 [ 204.112272][T10864] total_pgpgin 69310 [ 204.116193][T10864] total_pgpgout 69263 [ 204.120239][T10864] total_pgfault 84362 [ 204.120986][T11833] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.1.1437: unable to read itable block [ 204.124218][T10864] total_pgmajfault 13 [ 204.124231][T10864] total_inactive_anon 8192 [ 204.145547][T10864] total_active_anon 0 [ 204.149597][T10864] total_inactive_file 180224 [ 204.154304][T10864] total_active_file 4096 [ 204.158571][T10864] total_unevictable 0 [ 204.162667][T10864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.52,pid=3544,uid=0 [ 204.175602][T11833] EXT4-fs (loop1): I/O error while writing superblock [ 204.177457][T10864] Memory cgroup out of memory: Killed process 3553 (syz.2.52) total-vm:89180kB, anon-rss:716kB, file-rss:16168kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 204.184121][T11833] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 204.219458][ T3351] bridge_slave_0: left allmulticast mode [ 204.225151][ T3351] bridge_slave_0: left promiscuous mode [ 204.230881][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.259144][T11833] EXT4-fs (loop1): I/O error while writing superblock [ 204.265941][T11833] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #18: comm syz.1.1437: mark_inode_dirty error [ 204.300296][T11848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.319577][T11848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.367553][T11833] EXT4-fs (loop1): I/O error while writing superblock [ 204.400212][T11833] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.1.1437: unable to read itable block [ 204.434325][T11833] EXT4-fs (loop1): I/O error while writing superblock [ 204.441173][T11833] EXT4-fs error (device loop1): ext4_get_max_inline_size:116: inode #18: comm syz.1.1437: can't get inode location 18 [ 204.467620][T11833] EXT4-fs (loop1): I/O error while writing superblock [ 204.478447][T11833] EXT4-fs error (device loop1): ext4_get_inode_loc:4574: inode #18: block 6: comm syz.1.1437: unable to read itable block [ 204.499952][T11833] EXT4-fs (loop1): I/O error while writing superblock [ 204.507193][T11833] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: IO failure [ 204.519184][T11833] EXT4-fs (loop1): I/O error while writing superblock [ 204.526512][T11833] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #18: comm syz.1.1437: mark_inode_dirty error [ 204.538528][ T3351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.547368][T11833] EXT4-fs (loop1): I/O error while writing superblock [ 204.556726][ T3351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.565445][T11833] EXT4-fs error (device loop1): ext4_wait_block_bitmap:584: comm syz.1.1437: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 204.582673][ T3351] bond0 (unregistering): Released all slaves [ 204.607768][T11816] chnl_net:caif_netlink_parms(): no params data found [ 204.659462][ T3553] bridge0: port 3(syz_tun) entered disabled state [ 204.697878][ T3553] syz_tun (unregistering): left allmulticast mode [ 204.704374][ T3553] syz_tun (unregistering): left promiscuous mode [ 204.710785][ T3553] bridge0: port 3(syz_tun) entered disabled state [ 204.732116][ T3351] hsr_slave_0: left promiscuous mode [ 204.738391][ T3351] hsr_slave_1: left promiscuous mode [ 204.749798][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.757662][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.769682][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.777249][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.790037][T10864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.805340][ T3351] team_slave_0: left promiscuous mode [ 204.810776][ T3351] team_slave_1: left promiscuous mode [ 204.816270][ T3351] veth1_macvtap: left promiscuous mode [ 204.821826][ T3351] veth0_macvtap: left promiscuous mode [ 204.827404][ T3351] veth1_vlan: left promiscuous mode [ 204.832352][T11855] loop4: detected capacity change from 0 to 512 [ 204.832774][ T3351] veth0_vlan: left promiscuous mode [ 204.846294][T11855] EXT4-fs: Ignoring removed i_version option [ 204.853125][T11855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.875777][T11855] EXT4-fs (loop4): 1 truncate cleaned up [ 204.885542][T11855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.989248][ T3351] team0 (unregistering): Port device team_slave_1 removed [ 205.002367][ T3351] team0 (unregistering): Port device team_slave_0 removed [ 205.080492][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1440'. [ 205.133803][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.141035][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.148213][T11816] bridge_slave_0: entered allmulticast mode [ 205.155467][T11816] bridge_slave_0: entered promiscuous mode [ 205.174254][T11867] pim6reg1: entered promiscuous mode [ 205.179764][T11867] pim6reg1: entered allmulticast mode [ 205.189736][T11816] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.196876][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.209241][T11816] bridge_slave_1: entered allmulticast mode [ 205.220242][T11816] bridge_slave_1: entered promiscuous mode [ 205.278386][T11816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.294466][T11816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.340045][T11816] team0: Port device team_slave_0 added [ 205.371349][T11816] team0: Port device team_slave_1 added [ 205.434708][T11816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.441768][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.467890][T11816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.515693][T11816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.522723][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.548885][T11816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.663431][T11816] hsr_slave_0: entered promiscuous mode [ 205.677209][T11816] hsr_slave_1: entered promiscuous mode [ 205.687021][T11111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.698965][T11816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.708478][T11816] Cannot create hsr debugfs directory [ 205.721284][ T3351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.723151][T11908] loop2: detected capacity change from 0 to 512 [ 205.768689][T11908] EXT4-fs (loop2): filesystem is read-only [ 205.797387][ T3351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.812549][T11908] loop2: detected capacity change from 0 to 1024 [ 205.841690][T11908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 205.853655][T11908] System zones: 0-1, 3-12 [ 205.858467][T11908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.885884][ T3351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.934981][ T3351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.951401][T10864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.062157][ T3351] bridge_slave_1: left allmulticast mode [ 206.067855][ T3351] bridge_slave_1: left promiscuous mode [ 206.073552][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.082097][ T3351] bridge_slave_0: left allmulticast mode [ 206.087789][ T3351] bridge_slave_0: left promiscuous mode [ 206.093520][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.105669][ T3351] bridge_slave_1: left allmulticast mode [ 206.111420][ T3351] bridge_slave_1: left promiscuous mode [ 206.117299][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.126088][ T3351] bridge_slave_0: left allmulticast mode [ 206.131820][ T3351] bridge_slave_0: left promiscuous mode [ 206.137593][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.294842][T11947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.315915][T11947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.384024][ T3351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.399521][ T3351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.419833][ T3351] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 206.437578][ T3351] bond0 (unregistering): Released all slaves [ 206.455933][ T3351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.476846][ T3351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.493902][ T3351] bond0 (unregistering): Released all slaves [ 206.519558][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 206.519575][ T29] audit: type=1400 audit(2000000171.770:3741): avc: denied { read } for pid=2999 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 206.566021][ T29] audit: type=1400 audit(2000000171.800:3742): avc: denied { module_request } for pid=11889 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 206.612335][T11889] chnl_net:caif_netlink_parms(): no params data found [ 206.620457][ T29] audit: type=1400 audit(2000000171.870:3743): avc: denied { search } for pid=2999 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.641875][ T29] audit: type=1400 audit(2000000171.870:3744): avc: denied { read } for pid=2999 comm="dhcpcd" name="n278" dev="tmpfs" ino=10344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 206.663912][ T29] audit: type=1400 audit(2000000171.870:3745): avc: denied { open } for pid=2999 comm="dhcpcd" path="/run/udev/data/n278" dev="tmpfs" ino=10344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 206.687247][ T29] audit: type=1400 audit(2000000171.870:3746): avc: denied { getattr } for pid=2999 comm="dhcpcd" path="/run/udev/data/n278" dev="tmpfs" ino=10344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 206.733453][T11951] loop4: detected capacity change from 0 to 1024 [ 206.741773][ T29] audit: type=1400 audit(2000000171.990:3747): avc: denied { mounton } for pid=11950 comm="syz.4.1453" path="/28/file1" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 206.760991][T11951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.768486][ T29] audit: type=1400 audit(2000000172.010:3748): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 206.798343][ T29] audit: type=1400 audit(2000000172.010:3749): avc: denied { search } for pid=2943 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.820246][ T29] audit: type=1400 audit(2000000172.010:3750): avc: denied { open } for pid=2943 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 206.862768][T11951] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: inode #11: comm syz.4.1453: missing EA_INODE flag [ 206.879660][T11951] EXT4-fs (loop4): Remounting filesystem read-only [ 206.882419][T11971] loop0: detected capacity change from 0 to 512 [ 206.922606][ T3351] hsr_slave_0: left promiscuous mode [ 206.928365][ T3351] hsr_slave_1: left promiscuous mode [ 206.940258][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.947712][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.963570][T11971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.976606][T11971] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.976915][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.994820][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.003762][T11971] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.1454: Directory hole found for htree leaf block 0 [ 207.004941][T11111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.026158][ T3351] hsr_slave_0: left promiscuous mode [ 207.034221][ T3351] hsr_slave_1: left promiscuous mode [ 207.041409][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.042353][T11692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.048903][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.068292][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.075946][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.090646][ T3351] team_slave_0: left promiscuous mode [ 207.096110][ T3351] team_slave_1: left promiscuous mode [ 207.101595][ T3351] veth1_macvtap: left promiscuous mode [ 207.107153][ T3351] veth0_macvtap: left promiscuous mode [ 207.112065][T11977] loop0: detected capacity change from 0 to 512 [ 207.112779][ T3351] veth1_vlan: left promiscuous mode [ 207.124180][ T3351] veth0_vlan: left promiscuous mode [ 207.133288][ T3351] veth1_macvtap: left promiscuous mode [ 207.138806][ T3351] veth0_macvtap: left promiscuous mode [ 207.144359][ T3351] veth1_vlan: left promiscuous mode [ 207.149920][ T3351] veth0_vlan: left promiscuous mode [ 207.160516][T11977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 207.168074][T11981] loop4: detected capacity change from 0 to 512 [ 207.173260][T11977] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.183151][T11981] EXT4-fs: Ignoring removed i_version option [ 207.198230][T11981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 207.223760][T11692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 207.234876][T11981] EXT4-fs (loop4): 1 truncate cleaned up [ 207.242582][T11981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.430861][ T3351] team0 (unregistering): Port device team_slave_1 removed [ 207.441953][ T3351] team0 (unregistering): Port device team_slave_0 removed [ 207.542344][ T3351] team0 (unregistering): Port device team_slave_1 removed [ 207.553194][ T3351] team0 (unregistering): Port device team_slave_0 removed [ 207.614779][T11889] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.621987][T11889] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.629494][T11889] bridge_slave_0: entered allmulticast mode [ 207.636666][T11889] bridge_slave_0: entered promiscuous mode [ 207.673147][T11986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1458'. [ 207.685350][T11987] team_slave_0: entered promiscuous mode [ 207.691312][T11987] team_slave_1: entered promiscuous mode [ 207.700221][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1458'. [ 207.722275][T11889] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.729494][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.737067][T11889] bridge_slave_1: entered allmulticast mode [ 207.744050][T11889] bridge_slave_1: entered promiscuous mode [ 207.764015][T11889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.782039][T11889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.821163][T11889] team0: Port device team_slave_0 added [ 207.833600][T11889] team0: Port device team_slave_1 added [ 207.849493][T11816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.869896][T11889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.876858][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.902894][T11889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.916198][T11993] syz.0.1459[11993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.916272][T11993] syz.0.1459[11993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.969487][T11816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.002293][T11816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.020342][T11816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.037656][T11111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.052031][T11889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.059043][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.085050][T11889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.098375][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1460'. [ 208.232941][T11816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.262987][T11816] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.315866][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.323054][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.342172][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.349342][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.396191][T11816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.406795][T11816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.423816][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1460'. [ 208.454970][T11889] hsr_slave_0: entered promiscuous mode [ 208.465913][T11889] hsr_slave_1: entered promiscuous mode [ 208.485117][T11889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.492858][T11889] Cannot create hsr debugfs directory [ 208.647514][T11816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.838372][T12030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.865892][T12030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.900674][T12034] loop2: detected capacity change from 0 to 512 [ 208.907283][T12034] EXT4-fs: Ignoring removed i_version option [ 208.914377][T12034] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.957227][T11816] veth0_vlan: entered promiscuous mode [ 208.974177][T12034] EXT4-fs (loop2): 1 truncate cleaned up [ 208.986753][T11816] veth1_vlan: entered promiscuous mode [ 208.993202][T12034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.015688][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 209.070003][T11889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.097690][T11816] veth0_macvtap: entered promiscuous mode [ 209.126812][T11889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.147807][T11889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.179282][T11816] veth1_macvtap: entered promiscuous mode [ 209.204269][T11889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.237210][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.247747][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.257587][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.268686][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.278616][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.289192][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.299020][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.309506][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.319378][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.329862][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.339704][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.350201][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.360048][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.370566][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.380427][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.390977][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.400843][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.411405][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.421288][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.431785][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.444118][T11816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.452761][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 209.461919][T12076] tipc: Started in network mode [ 209.466799][T12076] tipc: Node identity 40060020000000006e, cluster identity 8 [ 209.490652][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.501156][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.511006][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.521558][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.531460][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.541997][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.551943][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.562425][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.572435][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.582937][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.592861][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.603335][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.613629][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.624313][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.634166][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.644778][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.654824][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.665354][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.675210][T11816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.685655][T11816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.698739][T11816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.707796][T11816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.716989][T11816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.726201][T11816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.735092][T11816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.758634][T10864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.835951][T11889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.856675][T12105] loop2: detected capacity change from 0 to 512 [ 209.867650][T12103] loop4: detected capacity change from 0 to 512 [ 209.877767][T11889] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.891873][T12110] FAULT_INJECTION: forcing a failure. [ 209.891873][T12110] name failslab, interval 1, probability 0, space 0, times 0 [ 209.904619][T12110] CPU: 0 UID: 0 PID: 12110 Comm: syz.3.1435 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 209.915415][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 209.917787][T12103] EXT4-fs: Ignoring removed i_version option [ 209.925492][T12110] Call Trace: [ 209.925505][T12110] [ 209.925515][T12110] dump_stack_lvl+0xf2/0x150 [ 209.932266][T12103] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.934797][T12110] dump_stack+0x15/0x20 [ 209.956336][T12110] should_fail_ex+0x229/0x230 [ 209.961124][T12110] ? bpf_test_init+0xc7/0x170 [ 209.965836][T12110] should_failslab+0x8f/0xb0 [ 209.970644][T12110] __kmalloc_noprof+0xa5/0x370 [ 209.975719][T12110] bpf_test_init+0xc7/0x170 [ 209.980305][T12110] bpf_prog_test_run_xdp+0x321/0x890 [ 209.985620][T12110] ? __fget_files+0x1da/0x210 [ 209.990336][T12110] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 209.996225][T12110] bpf_prog_test_run+0x26d/0x3e0 [ 210.001224][T12110] __sys_bpf+0x400/0x7a0 [ 210.005582][T12110] __x64_sys_bpf+0x43/0x50 [ 210.010032][T12110] x64_sys_call+0x2625/0x2d60 [ 210.014855][T12110] do_syscall_64+0xc9/0x1c0 [ 210.019411][T12110] ? clear_bhb_loop+0x55/0xb0 [ 210.024199][T12110] ? clear_bhb_loop+0x55/0xb0 [ 210.028948][T12110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.034883][T12110] RIP: 0033:0x7faa7073def9 [ 210.039312][T12110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.058943][T12110] RSP: 002b:00007faa6f3b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.067482][T12110] RAX: ffffffffffffffda RBX: 00007faa708f5f80 RCX: 00007faa7073def9 [ 210.070122][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.075459][T12110] RDX: 0000000000000048 RSI: 0000000020000340 RDI: 000000000000000a [ 210.075478][T12110] RBP: 00007faa6f3b1090 R08: 0000000000000000 R09: 0000000000000000 [ 210.082821][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.090725][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.090744][T12110] R13: 0000000000000000 R14: 00007faa708f5f80 R15: 00007ffcfb982ae8 [ 210.102048][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.105877][T12110] [ 210.130269][T12103] EXT4-fs (loop4): 1 truncate cleaned up [ 210.132036][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.138152][T12103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.203107][T12105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 210.216520][T11889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.227012][T11889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.254427][T12105] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.420588][T11889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.531040][T12136] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 210.547949][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 210.606029][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.639996][T11889] veth0_vlan: entered promiscuous mode [ 210.655126][T11889] veth1_vlan: entered promiscuous mode [ 210.674164][T11889] veth0_macvtap: entered promiscuous mode [ 210.684638][T11889] veth1_macvtap: entered promiscuous mode [ 210.691732][T11111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.697236][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.711364][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.721327][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.731830][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.741898][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.752469][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.762361][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.772826][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.782898][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.793372][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.803227][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.813794][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.823706][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.834219][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.844078][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.854559][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.864401][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.874953][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.884879][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.895582][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.905510][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.915965][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.929412][T11889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.945242][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.956805][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 210.968962][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.979630][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.989468][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.000006][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.009845][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.020347][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.030207][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.040664][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.050549][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.061000][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.070838][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.081374][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.091271][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.101764][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.111583][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.122014][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.131844][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.142331][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.152198][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.162627][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.172533][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.183028][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.195782][T11889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.206895][T11889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.216395][T11889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.225199][T11889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.234005][T11889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.263126][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.344040][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.390743][T12186] loop1: detected capacity change from 0 to 1024 [ 211.427638][T12186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.454030][T12186] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.1478: missing EA_INODE flag [ 211.466040][T12186] EXT4-fs (loop1): Remounting filesystem read-only [ 211.492575][T11889] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.513315][T12195] syz.0.1481[12195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.513394][T12195] syz.0.1481[12195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.586899][ T36] bridge_slave_1: left allmulticast mode [ 211.604129][ T36] bridge_slave_1: left promiscuous mode [ 211.609837][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.628157][ T36] bridge_slave_0: left allmulticast mode [ 211.634077][ T36] bridge_slave_0: left promiscuous mode [ 211.634736][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 211.634751][ T29] audit: type=1400 audit(2000000176.880:3950): avc: denied { create } for pid=12198 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.639835][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.650785][ T29] audit: type=1400 audit(2000000176.900:3951): avc: denied { bind } for pid=12198 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.682514][T12199] syz.1.1482[12199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.697149][T12199] syz.1.1482[12199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.832640][ T29] audit: type=1400 audit(2000000176.930:3952): avc: denied { write } for pid=12198 comm="syz.1.1482" path="socket:[47749]" dev="sockfs" ino=47749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.868057][ T29] audit: type=1326 audit(2000000177.020:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.1.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e6e6def9 code=0x7ffc0000 [ 211.891610][ T29] audit: type=1326 audit(2000000177.020:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.1.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e6e6def9 code=0x7ffc0000 [ 211.915233][ T29] audit: type=1326 audit(2000000177.020:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.1.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd9e6e6def9 code=0x7ffc0000 [ 211.939150][ T29] audit: type=1326 audit(2000000177.020:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.1.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e6e6def9 code=0x7ffc0000 [ 211.962951][ T29] audit: type=1326 audit(2000000177.020:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.1.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fd9e6e6def9 code=0x7ffc0000 [ 211.986537][ T29] audit: type=1326 audit(2000000177.020:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.1.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e6e6def9 code=0x7ffc0000 [ 212.010213][ T29] audit: type=1326 audit(2000000177.020:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.1.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e6e6def9 code=0x7ffc0000 [ 212.144827][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.156141][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.167399][ T36] bond0 (unregistering): Released all slaves [ 212.183842][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 212.216570][ T36] tipc: Left network mode [ 212.232560][T12162] chnl_net:caif_netlink_parms(): no params data found [ 212.282741][T12162] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.289966][T12162] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.300290][T12162] bridge_slave_0: entered allmulticast mode [ 212.306901][T12162] bridge_slave_0: entered promiscuous mode [ 212.316354][T12162] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.323508][T12162] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.334204][T12162] bridge_slave_1: entered allmulticast mode [ 212.361241][T12162] bridge_slave_1: entered promiscuous mode [ 212.422055][T12162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.435600][ T36] hsr_slave_0: left promiscuous mode [ 212.445435][ T36] hsr_slave_1: left promiscuous mode [ 212.452329][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.459913][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.471753][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.479312][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.491985][ T36] team_slave_0: left promiscuous mode [ 212.497414][ T36] team_slave_1: left promiscuous mode [ 212.502930][ T36] veth1_macvtap: left promiscuous mode [ 212.508418][ T36] veth0_macvtap: left promiscuous mode [ 212.513968][ T36] veth1_vlan: left promiscuous mode [ 212.519286][ T36] veth0_vlan: left promiscuous mode [ 212.662279][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.671982][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.681835][ T36] team0 (unregistering): Port device team_slave_1 removed [ 212.694519][ T36] team0 (unregistering): Port device team_slave_0 removed [ 212.745791][T12162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.780871][T12239] syzkaller0: entered promiscuous mode [ 212.786444][T12239] syzkaller0: entered allmulticast mode [ 212.813580][T12162] team0: Port device team_slave_0 added [ 212.823742][T12162] team0: Port device team_slave_1 added [ 212.843420][T12162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.850455][T12162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.876542][T12162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.893440][T12237] loop4: detected capacity change from 0 to 512 [ 212.905198][T12162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.912210][T12162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.938289][T12162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.962458][T12237] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1488: corrupted in-inode xattr: invalid ea_ino [ 212.984820][T12237] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1488: couldn't read orphan inode 15 (err -117) [ 212.997250][T12237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.012335][T12162] hsr_slave_0: entered promiscuous mode [ 213.019235][T12162] hsr_slave_1: entered promiscuous mode [ 213.025339][T12162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.033027][T12162] Cannot create hsr debugfs directory [ 213.467476][T12162] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.478449][T12162] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.490354][T12162] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.495924][T11111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.512427][T12162] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.532622][T12308] netlink: 'syz.3.1492': attribute type 22 has an invalid length. [ 213.540547][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 213.579332][T12310] loop4: detected capacity change from 0 to 1024 [ 213.616413][T12310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.622179][T12162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.641645][T12162] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.656299][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.663615][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.668306][T12310] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: inode #11: comm syz.4.1491: missing EA_INODE flag [ 213.685633][T12310] EXT4-fs (loop4): Remounting filesystem read-only [ 213.706595][T12321] loop3: detected capacity change from 0 to 1024 [ 213.708296][T11111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.718426][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.729120][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.740770][T12321] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.778664][T12162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.789412][T12321] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 213.803293][T12326] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1494'. [ 213.812932][T12321] EXT4-fs (loop3): too many log groups per flexible block group [ 213.820848][T12321] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 213.828079][T12321] EXT4-fs (loop3): mount failed [ 213.835643][T12326] netlink: 'syz.4.1494': attribute type 10 has an invalid length. [ 213.905067][T12162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.914931][T12339] syz.4.1495[12339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.915014][T12339] syz.4.1495[12339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.308316][T12162] veth0_vlan: entered promiscuous mode [ 214.336180][T12162] veth1_vlan: entered promiscuous mode [ 214.366761][T12162] veth0_macvtap: entered promiscuous mode [ 214.376159][T12162] veth1_macvtap: entered promiscuous mode [ 214.396787][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.407405][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.417491][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.428105][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.438057][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.448551][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.458391][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.468868][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.478714][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.489252][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.499149][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.509689][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.519659][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.530155][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.540292][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.550812][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.560789][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.571473][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.581792][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.592931][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.602866][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.613415][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.628523][T12162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.638125][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.648899][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.658804][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.669251][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.679102][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.689675][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.699525][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.709985][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.719879][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.733182][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.743140][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.753713][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.763581][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.774032][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.783879][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.794342][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.804173][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.814828][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.824739][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.835230][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.845148][T12162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.855587][T12162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.867259][T12162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.890662][T12162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.899753][T12162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.908495][T12162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.917501][T12162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.991306][T12374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1473'. [ 215.159936][T12389] 9pnet_fd: Insufficient options for proto=fd [ 215.195779][T12395] pim6reg1: entered promiscuous mode [ 215.201249][T12395] pim6reg1: entered allmulticast mode [ 215.248666][T12394] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1505'. [ 215.258556][T12394] netlink: 'syz.3.1505': attribute type 10 has an invalid length. [ 215.306368][T12394] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 215.324121][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 215.453867][T12410] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1512'. [ 215.485214][T12410] netlink: 'syz.3.1512': attribute type 10 has an invalid length. [ 215.495544][T12412] loop0: detected capacity change from 0 to 512 [ 215.554017][T12410] loop3: detected capacity change from 0 to 2048 [ 215.561307][T12412] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.590848][T12421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1515'. [ 215.600625][T12421] netlink: 'syz.1.1515': attribute type 10 has an invalid length. [ 215.609836][T12410] loop3: p3 < > p4 < > [ 215.614046][T12410] loop3: partition table partially beyond EOD, truncated [ 215.626797][T12421] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 215.628852][T12410] loop3: p3 start 4284289 is beyond EOD, truncated [ 215.713739][T12421] loop1: detected capacity change from 0 to 2048 [ 215.749455][T12421] loop1: p3 < > p4 < > [ 215.751007][T12426] 9pnet_fd: Insufficient options for proto=fd [ 215.753671][T12421] loop1: partition table partially beyond EOD, truncated [ 215.771650][T12421] loop1: p3 start 4284289 is beyond EOD, truncated [ 215.784497][ T2961] loop1: p3 < > p4 < > [ 215.788676][ T2961] loop1: partition table partially beyond EOD, truncated [ 215.796368][ T2961] loop1: p3 start 4284289 is beyond EOD, truncated [ 215.831614][ T3462] udevd[3462]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 215.844372][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 215.863224][ T3351] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.883991][T12430] loop3: detected capacity change from 0 to 1024 [ 215.902039][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 215.932410][T12430] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.1520: missing EA_INODE flag [ 215.973191][ T3351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.995796][T12430] EXT4-fs (loop3): Remounting filesystem read-only [ 216.061395][ T3351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.096167][ T3351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.118441][T12454] loop3: detected capacity change from 0 to 512 [ 216.139029][T12454] EXT4-fs: Ignoring removed i_version option [ 216.145606][T12456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1528'. [ 216.154775][T12454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.167586][T12454] EXT4-fs (loop3): 1 truncate cleaned up [ 216.168847][T12456] netlink: 'syz.1.1528': attribute type 10 has an invalid length. [ 216.213603][T12456] loop1: detected capacity change from 0 to 2048 [ 216.243604][ T3351] bridge_slave_1: left allmulticast mode [ 216.249598][ T3351] bridge_slave_1: left promiscuous mode [ 216.255316][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.263809][T12456] loop1: p3 < > p4 < > [ 216.268002][T12456] loop1: partition table partially beyond EOD, truncated [ 216.276057][ T3351] bridge_slave_0: left allmulticast mode [ 216.282065][ T3351] bridge_slave_0: left promiscuous mode [ 216.287816][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.298586][T12456] loop1: p3 start 4284289 is beyond EOD, truncated [ 216.394194][T12464] 9pnet_fd: Insufficient options for proto=fd [ 216.433856][T12466] loop1: detected capacity change from 0 to 512 [ 216.451427][T12466] EXT4-fs (loop1): filesystem is read-only [ 216.474676][T12466] loop1: detected capacity change from 0 to 1024 [ 216.481790][ T2961] ================================================================== [ 216.489998][ T2961] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 216.498894][ T2961] [ 216.501691][ T2961] read-write to 0xffff8881004c11f0 of 8 bytes by task 12466 on cpu 0: [ 216.509851][ T2961] __filemap_add_folio+0x439/0x710 [ 216.514986][ T2961] filemap_add_folio+0x9c/0x1b0 [ 216.519891][ T2961] __filemap_get_folio+0x2f1/0x5b0 [ 216.525054][ T2961] bdev_getblk+0x173/0x3b0 [ 216.529482][ T2961] __ext4_sb_bread_gfp+0x46/0x180 [ 216.534606][ T2961] ext4_fill_super+0x456/0x39e0 [ 216.539492][ T2961] get_tree_bdev+0x256/0x2e0 [ 216.544098][ T2961] ext4_get_tree+0x1c/0x30 [ 216.548541][ T2961] vfs_get_tree+0x56/0x1e0 [ 216.553149][ T2961] do_new_mount+0x227/0x690 [ 216.557665][ T2961] path_mount+0x49b/0xb30 [ 216.562089][ T2961] __se_sys_mount+0x27c/0x2d0 [ 216.566924][ T2961] __x64_sys_mount+0x67/0x80 [ 216.571846][ T2961] x64_sys_call+0x203e/0x2d60 [ 216.576977][ T2961] do_syscall_64+0xc9/0x1c0 [ 216.581491][ T2961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.587410][ T2961] [ 216.589789][ T2961] read to 0xffff8881004c11f0 of 8 bytes by task 2961 on cpu 1: [ 216.597561][ T2961] filemap_write_and_wait_range+0x58/0x1f0 [ 216.603386][ T2961] bdev_release+0xf6/0x430 [ 216.607810][ T2961] blkdev_release+0x15/0x20 [ 216.612415][ T2961] __fput+0x192/0x6f0 [ 216.616404][ T2961] __fput_sync+0x44/0x60 [ 216.620839][ T2961] __se_sys_close+0x101/0x1b0 [ 216.625524][ T2961] __x64_sys_close+0x1f/0x30 [ 216.630128][ T2961] x64_sys_call+0x25cb/0x2d60 [ 216.634847][ T2961] do_syscall_64+0xc9/0x1c0 [ 216.639444][ T2961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.645358][ T2961] [ 216.647678][ T2961] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 216.654785][ T2961] [ 216.657154][ T2961] Reported by Kernel Concurrency Sanitizer on: [ 216.663391][ T2961] CPU: 1 UID: 0 PID: 2961 Comm: udevd Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 216.673764][ T2961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.684001][ T2961] ================================================================== [ 216.701147][ T3351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.710400][T12469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.712573][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 216.712589][ T29] audit: type=1400 audit(2000000181.960:4237): avc: denied { read write } for pid=12467 comm="syz.4.1533" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.732219][T12466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 216.748680][ T29] audit: type=1400 audit(2000000181.960:4238): avc: denied { open } for pid=12467 comm="syz.4.1533" path="/dev/raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.780694][ T29] audit: type=1400 audit(2000000181.960:4239): avc: denied { ioctl } for pid=12467 comm="syz.4.1533" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.784909][T12466] System zones: 0-1, 3-12 [ 216.814065][ T29] audit: type=1400 audit(2000000182.010:4240): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 216.836440][ T29] audit: type=1400 audit(2000000182.010:4241): avc: denied { search } for pid=2943 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.858174][ T29] audit: type=1400 audit(2000000182.010:4242): avc: denied { open } for pid=2943 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.880901][ T29] audit: type=1400 audit(2000000182.010:4243): avc: denied { getattr } for pid=2943 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.904134][ T29] audit: type=1326 audit(2000000182.140:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12465 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e6e6def9 code=0x7ffc0000 [ 216.904448][T12469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.927841][ T29] audit: type=1326 audit(2000000182.140:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12465 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e6e6def9 code=0x7ffc0000 [ 216.959497][ T29] audit: type=1326 audit(2000000182.140:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12465 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fd9e6e6def9 code=0x7ffc0000 [ 216.987327][ T3351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.002952][ T3351] bond0 (unregistering): Released all slaves [ 217.095991][T12442] chnl_net:caif_netlink_parms(): no params data found [ 217.145729][ T3351] hsr_slave_0: left promiscuous mode [ 217.154303][ T3351] hsr_slave_1: left promiscuous mode [ 217.160802][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.168344][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.179153][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.186750][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.197107][ T3351] team_slave_0: left promiscuous mode [ 217.202513][ T3351] team_slave_1: left promiscuous mode [ 217.208084][ T3351] veth1_macvtap: left promiscuous mode [ 217.213624][ T3351] veth0_macvtap: left promiscuous mode [ 217.219166][ T3351] veth1_vlan: left promiscuous mode [ 217.224402][ T3351] veth0_vlan: left promiscuous mode [ 217.333378][ T3351] team0 (unregistering): Port device team_slave_1 removed [ 217.345709][ T3351] team0 (unregistering): Port device team_slave_0 removed [ 217.392720][T12442] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.399988][T12442] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.407502][T12442] bridge_slave_0: entered allmulticast mode [ 217.414339][T12442] bridge_slave_0: entered promiscuous mode [ 217.422005][T12442] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.429205][T12442] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.436396][T12442] bridge_slave_1: entered allmulticast mode [ 217.443152][T12442] bridge_slave_1: entered promiscuous mode [ 217.468788][T12442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.480106][T12442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.501254][T12442] team0: Port device team_slave_0 added [ 217.507928][T12442] team0: Port device team_slave_1 added [ 217.525862][T12442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.533015][T12442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.559077][T12442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.570526][T12442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.577532][T12442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.605302][T12442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.634843][T12442] hsr_slave_0: entered promiscuous mode [ 217.641093][T12442] hsr_slave_1: entered promiscuous mode [ 217.647541][T12442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.655381][T12442] Cannot create hsr debugfs directory [ 218.051982][T12442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.061297][T12442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.070754][T12442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.082371][T12442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.148866][T12442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.166983][T12442] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.180512][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.187688][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.212001][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.219210][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.301758][T12442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.404135][T12442] veth0_vlan: entered promiscuous mode [ 218.414505][T12442] veth1_vlan: entered promiscuous mode [ 218.437859][T12442] veth0_macvtap: entered promiscuous mode [ 218.449860][T12442] veth1_macvtap: entered promiscuous mode [ 218.467905][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.478540][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.488539][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.499103][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.508928][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.519497][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.529333][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.539809][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.549656][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.560311][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.571345][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.582034][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.591973][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.602498][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.612499][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.622967][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.633092][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.643571][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.653401][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.663837][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.673677][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.684174][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.695571][T12442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.709900][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.720611][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.730591][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.741085][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.750933][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.761502][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.771338][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.781902][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.791764][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.802231][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.812152][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.822583][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.832418][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.842891][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.852773][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.863301][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.873320][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.883889][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.893979][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.904431][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.914290][T12442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.924756][T12442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.936064][T12442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.946778][T12442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.955702][T12442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.964482][T12442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.973403][T12442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0