last executing test programs: 12.98392534s ago: executing program 3 (id=6594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x44}}, 0x20008000) 12.94160256s ago: executing program 3 (id=6595): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x4) getrusage(0xffffffffffffffff, &(0x7f0000000440)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fsopen(&(0x7f0000000140)='qnx6\x00', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x10000, 0xa) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000e40)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) 12.654546985s ago: executing program 3 (id=6601): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 12.600932315s ago: executing program 3 (id=6603): socket$netlink(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) 12.544987056s ago: executing program 3 (id=6604): socket$netlink(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) (fail_nth: 1) 12.186528122s ago: executing program 3 (id=6606): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x7, 0x80, 0x5, 0x0, 0x7, 0xa, 0x0, 0x6, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x767d, 0x2, @perf_config_ext={0x6, 0x7}, 0x100090, 0x3, 0xfffffffd, 0x0, 0x8, 0x1, 0x401, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001540)=@newtaction={0x88c, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8, 0xa, 0x6, 0x200, 0x1, 0x3, 0xcc37, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x6, 0xfb1, 0x3, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0xc3a0, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x4, 0x6, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020003, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0x7fffffff, 0x200, 0x1, 0x7309, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d0, 0x226, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x0, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4e, 0xa158, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x80000008, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x8, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0x1001, 0x5, 0x1, 0x3, 0x4003, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x7, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x20009, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x4943, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x6, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0xb, 0xff, 0x5, 0x1, 0x7, 0x9, 0x5, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xe74, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x7, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x2, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0xfffffffe, 0x10001, 0xa, 0xfffff000, 0x7f, 0x4, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0xfffc, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92e, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0xe6, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x6, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x3, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x9f3, 0x3, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0xffffffff, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0xf4, 0x401, 0x401, 0x9, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25c, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0xfffffff8, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4eedcacd, 0x1, 0x4, 0x9df4, 0xffffffff, 0x7, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0xcf6, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffa, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x1401, 0xa, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x81, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef2, 0x300000, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0xc01, 0x400, 0x436, 0x3, 0x205, 0x0, 0x0, 0x0, 0xbc, 0x8, 0x0, 0x900, 0x7, 0x1, 0x81, 0x3, 0x2, 0x7, 0x4, 0x4, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x2, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x10000003]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x7, 0x2, 0x7ff, 0x6, {0x9, 0x1, 0x8, 0xef3, 0x9, 0x1}, {0x2, 0x1, 0x2, 0x827, 0x29a, 0x100}, 0x3, 0x9, 0x7}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000008c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x28, 0x3f7, 0x300, 0x70bd27, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x9375e16ff7609617) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000003b8c9a0f2b7ff98a3da71c0dc9e4000000a166c080961bad515ed739255bb276241c5e93c921443606ca1ebe85b0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="0000000000000000180000040000000000000000000000009500000000000000d50a00000000000095000000000061f6a4978b49e2400d6c0000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000680)=""/258, 0x0, 0x102, 0x6, 0x6, 0x0, @void, @value}, 0x28) socketpair(0x10, 0x3, 0x4, &(0x7f00000002c0)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) syz_clone(0x62008011, 0x0, 0x0, 0x0, 0x0, 0x0) 2.686792749s ago: executing program 2 (id=6722): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@nombcache}, {@nojournal_checksum}, {@resuid}, {@stripe}], [{@euid_eq}, {@fsmagic={'fsmagic', 0x3d, 0x45}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fowner_lt}, {@permit_directio}, {@euid_lt}, {@uid_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x64, 0x39, 0x57, 0x63, 0x33, 0x61, 0x32], 0x2d, [0x62, 0x62, 0x31, 0x32], 0x2d, [0x66, 0x0, 0x39, 0x37], 0x2d, [0x39, 0x38, 0x63, 0x39], 0x2d, [0x31, 0x61, 0x35, 0x33, 0x33, 0x65, 0x66, 0x38]}}}, {@permit_directio}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") setreuid(0xee00, 0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff00080003400000002858"], 0xec}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) 1.375238889s ago: executing program 4 (id=6731): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 1.340965569s ago: executing program 4 (id=6733): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000400000008fcff002a5d7cce6c50d02bdd48020000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000ec0)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x40080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r1, @ANYRES8=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000000)=[{r5, 0x2000}, {r4, 0x4}], 0x2, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000084000000840000000300000001000000000000090000000084030000000500000003000000000001000f000000050000000c000000040000000000000604000000000c040000000000000003000004000000000000000004000000060000000900000002000000008000000e000000000000000300000000300000000000000000"], &(0x7f0000000340)=""/103, 0x9f, 0x67, 0x1, 0x800, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13b4ce91934f8909, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r9, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='module_request\x00', r10}, 0x18) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) r11 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x7, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r11, 0xc0305302, &(0x7f0000000400)={0x100, 0xe, 0x1ff, 0x3d2, 0x400, 0x879}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@resuid}, {@quota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) 1.339921829s ago: executing program 2 (id=6734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x6132}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/207, 0xcf}], 0x2, &(0x7f0000000380)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x40002161) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000680)='\x00\x00\x00\xda\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x03\xc6\xe5\t\xf16:\x9dXQ7xzb\x19x|\xee.\xa9\xfe\x99{\xe5\xd7\xf5\xe5\x0e\xf7l\xbc\xd2\xe7\x9e\xb0\x9f\x9c\xc4\xa4\xde\xa4\x81Eq\xcaK\xe2\x80\xd79\xd5\xa2\xe1q\xfc,\x00\x00\x00\x00\x00\x00\x00\x9d9x\x12^o\b\xa5\xba\xb5^8w\x18\\\x8c\xe7\xe8\x84[\xb8\x9d3\xe3\x80\xe7>&G\x0eM\x9eSg\xd2,\x17\xc1\xa3\xc7\xe3q\x99Jy\xb34\xc8C\x83\x81\x05\xdd\x8e\xb4\xa6j!\xce\x12\xd3\xd3\xc8T\x9em\xf5{\xe619\x8b\x8av\'sL\xb2\xa87(\xb3\xbbkOz') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) setsockopt(r6, 0x0, 0x3fc, &(0x7f0000000100)="a7184a8089ea5acf4180589105b67dd6dfe73f79bb39f51b6a2cfb268d6d03e1bc739f0971f2bf4de5e4d6cb2a128426f112ecc92c33d7571668925cd519a5ceac3184431581528ac9cc1d057e74b21b7c56584aa76adc1ff36e20631da0a1a47ae016f4229cc890fe1f1dc240b3ff9aa0b1327fab0d", 0x76) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x400) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) inotify_rm_watch(r8, 0x0) getsockopt$inet6_int(r6, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1.30749621s ago: executing program 1 (id=6735): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x4718a05f20824a9e}, 0x0) 1.2553655s ago: executing program 1 (id=6736): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000008000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) munlockall() 1.254546s ago: executing program 1 (id=6737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) umount2(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8000000000000001}, 0x5f) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) unshare(0x40020000) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x1, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xffffff13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 989.293315ms ago: executing program 1 (id=6738): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) mbind(&(0x7f00004fa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1ff, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000092d000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x454}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) 838.560787ms ago: executing program 0 (id=6740): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x158, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xb}, [@IFLA_AF_SPEC={0x138, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x74, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x158}}, 0x0) r5 = inotify_init1(0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="000057567a809b2ac90b0000db0b160000000000083e2ebb460cca346e06374967786bbc9cc8a2608bae04abe21610976667294b8c349f2363473ba96b79451fff5adab80789ac508e3056ee90fffffae00c69b2be0ac2fc68218f72bb29f4c2987f2673379a5be7b601fb4366", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='test_pages_isolated\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) ptrace(0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f0000001180), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) 628.57642ms ago: executing program 0 (id=6741): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) 597.518041ms ago: executing program 0 (id=6742): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 596.464571ms ago: executing program 0 (id=6743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='host1x_wait_cdma\x00', r0, 0x0, 0x101}, 0xffffffffffffff38) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe22, 0x37, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2ac}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x4}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="1748000040000028001280e79c01f2e30900616e05000000000000000001051d52fbaa3c88b7ec6bb4e91b0000000017ee30eb00", @ANYRES32=r3, @ANYBLOB="6d82000020800600"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) memfd_secret(0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}, 0x1, 0x0, 0x0, 0x4800}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 500.904742ms ago: executing program 4 (id=6744): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 470.015493ms ago: executing program 4 (id=6745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) (fail_nth: 5) 206.764737ms ago: executing program 2 (id=6746): r0 = getpid() syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090322bd700005dcdf2501000000180001801400020076657468300000000000000000000000200002801c0001800800010a"], 0x4c}}, 0x24040804) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10162, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7040000080000008500000078000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffec) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000010000000000000000008510000006000000180000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a", @ANYRES64=r3], 0x0, 0xa, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180fdc603f26bd228eb34cffb02bdc7d00004400", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 206.311987ms ago: executing program 4 (id=6747): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000008000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) munlockall() 205.608957ms ago: executing program 4 (id=6748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="480040000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x34, 0x0, 0x400, 0x70bd2b, 0x9, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffc0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1546010000000000240012800b00010065727370616e000014000280060003000800000006000200"], 0x44}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x4200, {0x0, 0x0, 0x0, r7, {0xffe0}, {}, {0x8, 0x10}}}, 0x24}}, 0x4814) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 205.174587ms ago: executing program 2 (id=6749): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES8=r1], 0x3c}}, 0x893) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x44}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe800000000000d021fc345a89809b4dc5bd211d1a1ff9460000bbfe8000"/71, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r3) 85.159769ms ago: executing program 1 (id=6750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r1, &(0x7f0000000480)=[{0x0}], 0x1) 84.328739ms ago: executing program 2 (id=6751): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x7, 0x3, 0x0, 0xfffffffa, 0x0, 0x10001, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x7fff, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x2, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x407f, 0x4, 0x2, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x206, 0x9, 0x4, 0x7, 0x7, 0x0, 0x4, 0x100002, 0x8, 0x754, 0x1, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffd, 0x2, 0x80000002, 0x84, 0x100, 0x5, 0x252, 0x7e, 0xc, 0x5, 0x20006, 0x5, 0x3ff, 0xb, 0x2, 0xd9a, 0xd, 0x2a0, 0xfffffffd, 0x200003, 0x0, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0x8f, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x30000001}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) 24.108629ms ago: executing program 1 (id=6752): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x158, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xb}, [@IFLA_AF_SPEC={0x138, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x74, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x158}}, 0x0) r5 = inotify_init1(0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="000057567a809b2ac90b0000db0b160000000000083e2ebb460cca346e06374967786bbc9cc8a2608bae04abe21610976667294b8c349f2363473ba96b79451fff5adab80789ac508e3056ee90fffffae00c69b2be0ac2fc68218f72bb29f4c2987f2673379a5be7b601fb4366", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='test_pages_isolated\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) ptrace(0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x47, &(0x7f0000001180), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) 23.34218ms ago: executing program 0 (id=6753): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) 15.39183ms ago: executing program 2 (id=6754): r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x3, 0x8000) r1 = syz_open_dev$vcsu(0x0, 0x3, 0x414002) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, 0x0, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xaf}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x2}, 0x1c) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5416, 0xffffffffffffffff) listen(r3, 0x9) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000580)={0x6, 0x6, 0x68, 0x7, 0x81, 0x5, 0x3a0f9f6}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000300000008"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 0s ago: executing program 0 (id=6755): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") (async) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r4], 0x4c}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000000380)=""/166, 0xa6, 0x0, &(0x7f0000000600)=""/207, 0xcf}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}}, &(0x7f00000001c0)) (async) r7 = openat2(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x14202, 0x100, 0x3a}, 0x18) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r7, 0x2, &(0x7f0000000300)={{r8, r9+60000000}}, &(0x7f0000000340)) writev(r0, &(0x7f0000000480)=[{&(0x7f0000002640)="91eb51a7914356", 0x7}], 0x1) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) (async) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) (async) r10 = socket$inet(0x2, 0x2, 0x5eab) getsockopt$inet_mreqsrc(r10, 0x0, 0x28, &(0x7f0000000740)={@remote, @dev, @loopback}, &(0x7f0000000780)=0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f9ffffff000000001100000018110000", @ANYRES32, @ANYBLOB="0000000000000060b70200001400"], 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[], 0x381, 0x2) kernel console output (not intermixed with test programs): 2/0x200 [ 296.046093][T19837] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 296.046235][T19837] ? clear_bhb_loop+0x40/0x90 [ 296.046256][T19837] ? clear_bhb_loop+0x40/0x90 [ 296.046278][T19837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.046299][T19837] RIP: 0033:0x7f48b97be929 [ 296.046378][T19837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.046397][T19837] RSP: 002b:00007f48b7e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.046417][T19837] RAX: ffffffffffffffda RBX: 00007f48b99e5fa0 RCX: 00007f48b97be929 [ 296.046433][T19837] RDX: 0000000000000800 RSI: 0000200000000600 RDI: 0000000000000003 [ 296.046446][T19837] RBP: 00007f48b7e27090 R08: 0000000000000000 R09: 0000000000000000 [ 296.046458][T19837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.046471][T19837] R13: 0000000000000000 R14: 00007f48b99e5fa0 R15: 00007fffb0875c78 [ 296.046519][T19837] [ 296.048444][T19835] vhci_hcd: invalid port number 0 [ 296.450646][T19854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.451418][T19857] 9pnet_fd: Insufficient options for proto=fd [ 296.459506][T19854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.501222][T19861] netlink: 'syz.0.6028': attribute type 1 has an invalid length. [ 296.557621][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x1 [ 296.565171][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.572596][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.580031][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.587554][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.595142][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.602555][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x2 [ 296.610118][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.617670][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.625692][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.633185][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.640600][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.648052][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x2 [ 296.655465][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.662830][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.666230][T19874] vhci_hcd: invalid port number 0 [ 296.670300][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.682788][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.690343][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.694479][T19876] netlink: 'syz.1.6033': attribute type 10 has an invalid length. [ 296.697882][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.713101][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.720578][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.727958][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.735361][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.742731][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.750213][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.757808][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.765198][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.772645][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.780041][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.787425][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.794836][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.802210][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x0 [ 296.809659][ T36] hid-generic 0000:0003:0000.0024: unknown main item tag 0x1 [ 296.817209][T19876] macvlan1: entered promiscuous mode [ 296.818292][ T36] hid-generic 0000:0003:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 296.822528][T19876] macvlan1: entered allmulticast mode [ 296.858820][T19876] veth1_vlan: entered allmulticast mode [ 296.866129][T19876] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 296.897747][T19880] hub 1-0:1.0: USB hub found [ 296.902449][T19880] hub 1-0:1.0: 8 ports detected [ 296.965180][T19891] pim6reg1: entered promiscuous mode [ 296.970504][T19891] pim6reg1: entered allmulticast mode [ 296.991261][T19891] lo speed is unknown, defaulting to 1000 [ 297.018418][T19894] 9pnet_fd: Insufficient options for proto=fd [ 297.043695][T19896] netlink: 'syz.1.6041': attribute type 1 has an invalid length. [ 297.097577][T19900] vhci_hcd: invalid port number 0 [ 297.122004][T19912] 9pnet_fd: Insufficient options for proto=fd [ 297.256687][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x4 [ 297.261406][T19911] lo speed is unknown, defaulting to 1000 [ 297.264481][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x2 [ 297.280231][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.287925][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.295692][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.303493][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.311244][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.319038][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.326820][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.334699][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.342346][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.350196][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.357905][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.365669][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.373534][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.381384][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x0 [ 297.415422][T19926] 9pnet_fd: Insufficient options for proto=fd [ 297.429187][ T36] hid-generic 0000:3000000:0000.0025: hidraw0: HID v0.00 Device [sy] on syz0 [ 297.456018][T19929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19929 comm=syz.2.6052 [ 297.468647][T19929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19929 comm=syz.2.6052 [ 297.477673][T19933] netlink: 'syz.1.6054': attribute type 1 has an invalid length. [ 297.515404][T19932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.526502][T19932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.544351][T19935] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 297.544351][T19935] program syz.1.6055 not setting count and/or reply_len properly [ 297.586779][T19937] vhci_hcd: invalid port number 0 [ 297.652617][T19943] hsr0: entered promiscuous mode [ 297.657866][T19943] vlan3: entered promiscuous mode [ 297.774572][T19949] lo speed is unknown, defaulting to 1000 [ 297.829511][T19951] 9pnet_fd: Insufficient options for proto=fd [ 297.866330][T19953] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 297.903582][T19959] netlink: 'syz.3.6065': attribute type 1 has an invalid length. [ 297.929128][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x4 [ 297.929569][T19955] lo speed is unknown, defaulting to 1000 [ 297.936861][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x2 [ 297.950985][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 297.958731][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 297.966456][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 297.974111][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 297.981792][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 297.989499][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 297.997286][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 298.004997][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 298.012755][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 298.020499][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 298.028276][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 298.035984][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 298.043689][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 298.051442][ T9] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x0 [ 298.064980][ T9] hid-generic 0000:3000000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 298.089510][T19965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.110594][T19970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.119113][T19970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.120624][T19965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.135256][T19970] FAULT_INJECTION: forcing a failure. [ 298.135256][T19970] name failslab, interval 1, probability 0, space 0, times 0 [ 298.148090][T19970] CPU: 0 UID: 0 PID: 19970 Comm: syz.1.6068 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 298.148118][T19970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.148132][T19970] Call Trace: [ 298.148139][T19970] [ 298.148147][T19970] __dump_stack+0x1d/0x30 [ 298.148236][T19970] dump_stack_lvl+0xe8/0x140 [ 298.148259][T19970] dump_stack+0x15/0x1b [ 298.148277][T19970] should_fail_ex+0x265/0x280 [ 298.148374][T19970] should_failslab+0x8c/0xb0 [ 298.148400][T19970] kmem_cache_alloc_node_noprof+0x57/0x320 [ 298.148430][T19970] ? __alloc_skb+0x101/0x320 [ 298.148503][T19970] __alloc_skb+0x101/0x320 [ 298.148568][T19970] ? kthread_insert_work+0x104/0x1f0 [ 298.148682][T19970] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 298.148714][T19970] nfc_genl_device_removed+0x39/0x1d0 [ 298.148735][T19970] nfc_unregister_device+0x1b/0x130 [ 298.148750][T19970] nci_unregister_device+0x146/0x160 [ 298.148838][T19970] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 298.148862][T19970] virtual_ncidev_close+0x2a/0x50 [ 298.148883][T19970] __fput+0x298/0x650 [ 298.148943][T19970] ____fput+0x1c/0x30 [ 298.148986][T19970] task_work_run+0x12e/0x1a0 [ 298.149060][T19970] exit_to_user_mode_loop+0xe4/0x100 [ 298.149116][T19970] do_syscall_64+0x1d6/0x200 [ 298.149135][T19970] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 298.149163][T19970] ? clear_bhb_loop+0x40/0x90 [ 298.149261][T19970] ? clear_bhb_loop+0x40/0x90 [ 298.149285][T19970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.149307][T19970] RIP: 0033:0x7fc97373e929 [ 298.149323][T19970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.149341][T19970] RSP: 002b:00007fc971da7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 298.149363][T19970] RAX: 0000000000000000 RBX: 00007fc973965fa0 RCX: 00007fc97373e929 [ 298.149431][T19970] RDX: 0200000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 298.149444][T19970] RBP: 00007fc971da7090 R08: 0000000000000000 R09: 0000000000000000 [ 298.149457][T19970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.149469][T19970] R13: 0000000000000000 R14: 00007fc973965fa0 R15: 00007ffdff20a958 [ 298.149496][T19970] [ 298.377010][T19983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.385555][T19983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.400064][T19985] loop0: detected capacity change from 0 to 1024 [ 298.409419][T19985] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 298.418694][T19985] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.434685][T19985] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 298.437652][T19987] block device autoloading is deprecated and will be removed. [ 298.442784][T19985] EXT4-fs (loop0): orphan cleanup on readonly fs [ 298.457953][T19990] 9pnet_fd: Insufficient options for proto=fd [ 298.459748][T19985] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.6072: Freeing blocks not in datazone - block = 0, count = 4096 [ 298.477676][T19985] EXT4-fs (loop0): Remounting filesystem read-only [ 298.484237][T19985] EXT4-fs (loop0): 1 orphan inode deleted [ 298.491008][T19985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.509674][T19985] xt_TCPMSS: Only works on TCP SYN packets [ 298.527585][T19987] netlink: 'syz.1.6073': attribute type 6 has an invalid length. [ 298.546166][T19995] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 298.558292][T19482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.588702][T19999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19999 comm=syz.4.6078 [ 298.601433][T19999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19999 comm=syz.4.6078 [ 298.739453][T20006] __nla_validate_parse: 27 callbacks suppressed [ 298.739471][T20006] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6078'. [ 298.934830][T20012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6082'. [ 298.997159][T20014] vhci_hcd: invalid port number 0 [ 299.020397][T20018] 9pnet_fd: Insufficient options for proto=fd [ 299.048337][T20020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6086'. [ 299.094598][T20024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6087'. [ 299.175185][T20031] SET target dimension over the limit! [ 299.226049][T20031] loop3: detected capacity change from 0 to 8192 [ 299.287750][T20035] netlink: 'syz.2.6092': attribute type 1 has an invalid length. [ 299.295557][T20035] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6092'. [ 299.449135][T20038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6093'. [ 299.458163][T20038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6093'. [ 299.541800][T20041] lo speed is unknown, defaulting to 1000 [ 299.565222][T20038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6093'. [ 299.584712][T20038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6093'. [ 299.621330][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6095'. [ 299.726824][T20048] vhci_hcd: invalid port number 0 [ 299.759643][T20054] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 299.787035][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 299.787047][ T29] audit: type=1326 audit(2000000170.930:19853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97373e929 code=0x7ffc0000 [ 299.816513][ T29] audit: type=1326 audit(2000000170.930:19854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc97373e929 code=0x7ffc0000 [ 299.839587][ T29] audit: type=1326 audit(2000000170.930:19855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97373e929 code=0x7ffc0000 [ 299.862726][ T29] audit: type=1326 audit(2000000170.930:19856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97373e929 code=0x7ffc0000 [ 299.885935][ T29] audit: type=1326 audit(2000000170.930:19857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97373e929 code=0x7ffc0000 [ 299.909043][ T29] audit: type=1326 audit(2000000170.930:19858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc97373e929 code=0x7ffc0000 [ 299.932149][ T29] audit: type=1326 audit(2000000170.930:19859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97373e929 code=0x7ffc0000 [ 299.955290][ T29] audit: type=1326 audit(2000000170.930:19860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc97373e929 code=0x7ffc0000 [ 300.032683][T20060] lo speed is unknown, defaulting to 1000 [ 300.043696][ T29] audit: type=1400 audit(2000000171.160:19861): avc: denied { unmount } for pid=18299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 300.081719][T20064] netlink: 'syz.0.6101': attribute type 1 has an invalid length. [ 300.104911][T20065] 9pnet_fd: Insufficient options for proto=fd [ 300.116856][T20068] bridge_slave_1: left allmulticast mode [ 300.122612][T20068] bridge_slave_1: left promiscuous mode [ 300.128437][T20068] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.143821][T20068] bridge_slave_0: left allmulticast mode [ 300.149594][T20068] bridge_slave_0: left promiscuous mode [ 300.155412][T20068] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.255214][T20086] loop0: detected capacity change from 0 to 1024 [ 300.263697][T20086] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 300.274802][T20086] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 300.322905][ T29] audit: type=1326 audit(2000000171.460:19862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20090 comm="syz.3.6111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3832de929 code=0x7ffc0000 [ 300.378312][T20086] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 300.388540][T20086] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 300.458379][T20097] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 300.482400][T20086] veth1_to_bond: entered allmulticast mode [ 300.496722][T20085] veth1_to_bond: left allmulticast mode [ 300.736661][T20111] lo speed is unknown, defaulting to 1000 [ 300.780689][T20114] netlink: 'syz.2.6119': attribute type 1 has an invalid length. [ 300.954142][T20056] syz.4.6100 (20056) used greatest stack depth: 6040 bytes left [ 301.082040][T20134] lo speed is unknown, defaulting to 1000 [ 301.116453][T20132] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 301.177442][T20130] hub 1-0:1.0: USB hub found [ 301.188313][T20130] hub 1-0:1.0: 8 ports detected [ 301.621036][T20170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.631857][T20170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.851868][T20177] SELinux: failed to load policy [ 302.162417][T20200] hub 1-0:1.0: USB hub found [ 302.174391][T20200] hub 1-0:1.0: 8 ports detected [ 302.312956][T20215] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 302.337181][T20217] 9pnet_fd: Insufficient options for proto=fd [ 302.396626][T20219] lo speed is unknown, defaulting to 1000 [ 302.645380][T20231] vhci_hcd: invalid port number 0 [ 302.834033][T20245] netlink: 'syz.0.6160': attribute type 1 has an invalid length. [ 302.892689][T20254] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20254 comm=syz.0.6163 [ 302.905461][T20254] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20254 comm=syz.0.6163 [ 302.927484][T20252] hub 1-0:1.0: USB hub found [ 302.932543][T20252] hub 1-0:1.0: 8 ports detected [ 303.093842][T20261] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 303.233910][T20267] lo speed is unknown, defaulting to 1000 [ 303.249334][T20269] vhci_hcd: invalid port number 0 [ 303.614588][T20278] netlink: 'syz.2.6175': attribute type 1 has an invalid length. [ 303.670200][T20282] xt_TCPMSS: Only works on TCP SYN packets [ 303.760396][T20293] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 303.770658][T20290] __nla_validate_parse: 23 callbacks suppressed [ 303.770689][T20290] netlink: 5560 bytes leftover after parsing attributes in process `syz.2.6181'. [ 303.831616][T20297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20297 comm=syz.0.6184 [ 303.844333][T20297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20297 comm=syz.0.6184 [ 303.859456][T20297] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6184'. [ 303.904586][T20301] pim6reg1: entered promiscuous mode [ 303.909999][T20301] pim6reg1: entered allmulticast mode [ 303.926378][T20303] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6187'. [ 303.933737][T20301] lo speed is unknown, defaulting to 1000 [ 303.937052][T20303] netlink: 'syz.3.6187': attribute type 1 has an invalid length. [ 303.948871][T20303] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6187'. [ 303.998107][T20307] loop3: detected capacity change from 0 to 1024 [ 304.005262][T20307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 304.014222][T20307] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 304.025749][T20307] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 304.033881][T20307] EXT4-fs (loop3): orphan cleanup on readonly fs [ 304.035405][T20309] 9pnet_fd: Insufficient options for proto=fd [ 304.041120][T20307] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.6189: Freeing blocks not in datazone - block = 0, count = 4096 [ 304.060075][T20307] EXT4-fs (loop3): Remounting filesystem read-only [ 304.066739][T20307] EXT4-fs (loop3): 1 orphan inode deleted [ 304.072775][T20307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 304.088621][T20307] xt_TCPMSS: Only works on TCP SYN packets [ 304.110060][T18299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.165537][T20311] lo speed is unknown, defaulting to 1000 [ 304.310775][T20313] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6191'. [ 304.322191][T20313] netlink: 'syz.3.6191': attribute type 1 has an invalid length. [ 304.329984][T20313] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6191'. [ 304.378882][T20317] loop3: detected capacity change from 0 to 2048 [ 304.425153][T20317] Alternate GPT is invalid, using primary GPT. [ 304.431464][T20317] loop3: p1 p2 p3 [ 304.438824][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.447336][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.512780][T20319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6194'. [ 304.521745][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6194'. [ 304.537833][T20321] hub 1-0:1.0: USB hub found [ 304.542611][T20321] hub 1-0:1.0: 8 ports detected [ 304.543073][T20319] lo speed is unknown, defaulting to 1000 [ 304.588607][T20319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6194'. [ 304.598016][T20319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6194'. [ 304.611483][T20325] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20325 comm=syz.2.6196 [ 304.624165][T20325] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20325 comm=syz.2.6196 [ 304.665024][T20327] block device autoloading is deprecated and will be removed. [ 304.675489][T20327] netlink: 'syz.2.6197': attribute type 6 has an invalid length. [ 304.787586][T20337] netlink: 'syz.2.6199': attribute type 1 has an invalid length. [ 304.809452][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 304.809464][ T29] audit: type=1326 audit(2000000175.950:20304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20335 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 304.842993][ T29] audit: type=1326 audit(2000000175.960:20305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1c94e929 code=0x7ffc0000 [ 304.866713][ T29] audit: type=1326 audit(2000000175.960:20306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1c94e929 code=0x7ffc0000 [ 304.890443][ T29] audit: type=1326 audit(2000000175.960:20307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fbb1c94e929 code=0x7ffc0000 [ 304.914031][ T29] audit: type=1326 audit(2000000175.960:20308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1c94e929 code=0x7ffc0000 [ 304.937893][ T29] audit: type=1326 audit(2000000175.960:20309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.6201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1c94e929 code=0x7ffc0000 [ 304.943410][T20331] lo speed is unknown, defaulting to 1000 [ 304.961476][ T29] audit: type=1326 audit(2000000175.980:20310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20335 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 304.961507][ T29] audit: type=1326 audit(2000000175.980:20311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20335 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 304.961536][ T29] audit: type=1326 audit(2000000175.980:20312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20335 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 304.961586][ T29] audit: type=1326 audit(2000000175.980:20313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20335 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 305.133832][T20331] chnl_net:caif_netlink_parms(): no params data found [ 305.191798][T20356] lo speed is unknown, defaulting to 1000 [ 305.210372][T20361] netlink: 'syz.0.6205': attribute type 1 has an invalid length. [ 305.210647][T20331] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.225232][T20331] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.232533][T20331] bridge_slave_0: entered allmulticast mode [ 305.240380][T20331] bridge_slave_0: entered promiscuous mode [ 305.247370][T20331] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.254510][T20331] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.262757][T20331] bridge_slave_1: entered allmulticast mode [ 305.269351][T20331] bridge_slave_1: entered promiscuous mode [ 305.303180][T20331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.320473][T20331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.356168][T20331] team0: Port device team_slave_0 added [ 305.372507][T20331] team0: Port device team_slave_1 added [ 305.385062][T20365] lo speed is unknown, defaulting to 1000 [ 305.401771][T20368] netlink: 'syz.4.6206': attribute type 1 has an invalid length. [ 305.423948][T20367] 9pnet_fd: Insufficient options for proto=fd [ 305.437923][T20331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.444935][T20331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.471057][T20331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.533265][T20331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.540266][T20331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.566451][T20331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.691321][T20331] hsr_slave_0: entered promiscuous mode [ 305.699584][T20331] hsr_slave_1: entered promiscuous mode [ 305.724007][T20331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.748759][T20331] Cannot create hsr debugfs directory [ 305.798801][T20376] loop0: detected capacity change from 0 to 512 [ 305.860265][T20376] ext3: Unknown parameter 'euid' [ 305.953038][T20331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.001807][T20386] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 306.020261][T20331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.069335][T20390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20390 comm=syz.3.6213 [ 306.081982][T20390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20390 comm=syz.3.6213 [ 306.087678][T20392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.113591][T20392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.156255][T20331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.209390][T20331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.333088][T20331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 306.352906][T20331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 306.368661][T20331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 306.381339][T20331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.424146][T20402] hub 1-0:1.0: USB hub found [ 306.429417][T20402] hub 1-0:1.0: 8 ports detected [ 306.527028][T20331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.569210][T20331] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.592529][T10304] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.599653][T10304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.605777][T20419] block device autoloading is deprecated and will be removed. [ 306.626371][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.633472][T10304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.648070][T20419] netlink: 'syz.3.6224': attribute type 6 has an invalid length. [ 306.806196][T20331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.848086][T20421] @: renamed from vlan0 (while UP) [ 306.895663][T20445] loop3: detected capacity change from 0 to 512 [ 306.910789][T20445] ext3: Unknown parameter 'euid' [ 307.016361][T20331] veth0_vlan: entered promiscuous mode [ 307.036935][T20331] veth1_vlan: entered promiscuous mode [ 307.079263][T20331] veth0_macvtap: entered promiscuous mode [ 307.099573][T20331] veth1_macvtap: entered promiscuous mode [ 307.138995][T20331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.168239][T20331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.186448][T20331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.195266][T20331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.204000][T20331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.212758][T20331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.323945][T20458] hub 1-0:1.0: USB hub found [ 307.334428][T20458] hub 1-0:1.0: 8 ports detected [ 307.361063][T20462] lo speed is unknown, defaulting to 1000 [ 307.674127][T20475] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 307.693124][T20473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.702214][T20473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.730890][T20477] bridge_slave_1: left allmulticast mode [ 307.736762][T20477] bridge_slave_1: left promiscuous mode [ 307.742513][T20477] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.815362][T20477] bridge_slave_0: left allmulticast mode [ 307.821065][T20477] bridge_slave_0: left promiscuous mode [ 307.826913][T20477] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.032893][T20490] lo speed is unknown, defaulting to 1000 [ 308.094402][T20494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20494 comm=syz.3.6243 [ 308.107089][T20494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20494 comm=syz.3.6243 [ 308.113524][T20496] netlink: 'syz.2.6242': attribute type 1 has an invalid length. [ 308.180789][T20505] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 308.202564][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x4 [ 308.210341][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x2 [ 308.218375][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.226070][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.233730][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.241533][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.249225][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.256954][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.264647][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.272473][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.280164][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.287855][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.295532][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.303178][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.310917][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.318629][ T3392] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x0 [ 308.327130][ T3392] hid-generic 0000:3000000:0000.0027: hidraw0: HID v0.00 Device [sy] on syz0 [ 308.386209][T20513] vhci_hcd: invalid port number 0 [ 308.408627][T20515] 9pnet_fd: Insufficient options for proto=fd [ 308.442876][T20519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20519 comm=syz.3.6253 [ 308.455536][T20519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20519 comm=syz.3.6253 [ 308.490904][T20522] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 308.525373][T20525] hub 1-0:1.0: USB hub found [ 308.530109][T20525] hub 1-0:1.0: 8 ports detected [ 308.673256][T20542] lo speed is unknown, defaulting to 1000 [ 308.684082][T20544] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20544 comm=syz.3.6260 [ 308.696766][T20544] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20544 comm=syz.3.6260 [ 308.752410][T20548] loop3: detected capacity change from 0 to 2048 [ 308.787406][T20550] vhci_hcd: invalid port number 0 [ 308.795961][T20548] Alternate GPT is invalid, using primary GPT. [ 308.802454][T20548] loop3: p1 p2 p3 [ 308.810223][T20548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.813453][T20555] 9pnet_fd: Insufficient options for proto=fd [ 308.825242][T20548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.907673][T20557] lo speed is unknown, defaulting to 1000 [ 309.076533][T20573] __nla_validate_parse: 35 callbacks suppressed [ 309.076552][T20573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6270'. [ 309.115636][T20566] lo speed is unknown, defaulting to 1000 [ 309.129914][T20580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20580 comm=syz.0.6271 [ 309.142507][T20580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20580 comm=syz.0.6271 [ 309.159872][T20580] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6271'. [ 309.189314][T20566] chnl_net:caif_netlink_parms(): no params data found [ 309.203452][T20586] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20586 comm=syz.0.6274 [ 309.216278][T20586] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20586 comm=syz.0.6274 [ 309.232305][T20586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6274'. [ 309.253790][T20566] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.260928][T20566] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.269626][T20566] bridge_slave_0: entered allmulticast mode [ 309.276445][T20566] bridge_slave_0: entered promiscuous mode [ 309.283626][T20566] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.290831][T20566] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.299690][T20592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6275'. [ 309.300135][T20566] bridge_slave_1: entered allmulticast mode [ 309.315367][T20566] bridge_slave_1: entered promiscuous mode [ 309.338572][T20566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.347715][T20592] lo speed is unknown, defaulting to 1000 [ 309.349446][T20566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.368152][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6275'. [ 309.377450][T20593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6275'. [ 309.389800][T20566] team0: Port device team_slave_0 added [ 309.400639][T20566] team0: Port device team_slave_1 added [ 309.440783][T20566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.447804][T20566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.460954][T20595] hub 1-0:1.0: USB hub found [ 309.473963][T20566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.481023][T20595] hub 1-0:1.0: 8 ports detected [ 309.491472][T20566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.501236][T20566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.527296][T20566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.581066][T20566] hsr_slave_0: entered promiscuous mode [ 309.588212][T20606] netlink: 256 bytes leftover after parsing attributes in process `+}[@'. [ 309.588864][T20566] hsr_slave_1: entered promiscuous mode [ 309.603035][T20566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.611032][T20566] Cannot create hsr debugfs directory [ 309.686233][T20566] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.718360][T20611] lo speed is unknown, defaulting to 1000 [ 309.755474][T20566] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.776869][T20611] netlink: 'syz.4.6280': attribute type 1 has an invalid length. [ 309.784701][T20611] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6280'. [ 309.795884][T20615] lo speed is unknown, defaulting to 1000 [ 309.814175][T20619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6283'. [ 309.827232][T20566] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.868182][T20566] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.928556][T20566] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 309.944666][T20566] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 309.959612][T20566] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 309.970967][T20566] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 310.009436][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 310.009449][ T29] audit: type=1326 audit(2000000181.150:20630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.3.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3832de929 code=0x7ffc0000 [ 310.017223][T20566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.051449][T20566] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.072049][ T29] audit: type=1326 audit(2000000181.180:20631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.3.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fd3832de929 code=0x7ffc0000 [ 310.095595][ T29] audit: type=1326 audit(2000000181.180:20632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20628 comm="syz.3.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3832de929 code=0x7ffc0000 [ 310.125482][T20632] netlink: 'syz.3.6285': attribute type 1 has an invalid length. [ 310.133280][T20632] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6285'. [ 310.155471][T10333] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.162609][T10333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.177656][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.184763][T10333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.204066][T20631] lo speed is unknown, defaulting to 1000 [ 310.295319][T20566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.426588][T20566] veth0_vlan: entered promiscuous mode [ 310.446395][T20566] veth1_vlan: entered promiscuous mode [ 310.475165][T20566] veth0_macvtap: entered promiscuous mode [ 310.493971][T20566] veth1_macvtap: entered promiscuous mode [ 310.516748][T20566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.538715][T20566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.546357][T20653] netlink: 'syz.4.6289': attribute type 6 has an invalid length. [ 310.559467][T20566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.568245][T20566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.576978][T20566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.585729][T20566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.699269][T20651] lo speed is unknown, defaulting to 1000 [ 310.721658][ T29] audit: type=1326 audit(2000000181.860:20633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.4.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b97be929 code=0x7ffc0000 [ 310.745549][ T29] audit: type=1326 audit(2000000181.860:20634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.4.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b97be929 code=0x7ffc0000 [ 310.769887][ T29] audit: type=1326 audit(2000000181.860:20635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.4.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b97be929 code=0x7ffc0000 [ 310.793987][ T29] audit: type=1326 audit(2000000181.860:20636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.4.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b97be929 code=0x7ffc0000 [ 310.834138][ T29] audit: type=1326 audit(2000000181.960:20637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.4.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b97be929 code=0x7ffc0000 [ 310.858072][ T29] audit: type=1326 audit(2000000181.960:20638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.4.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b97be929 code=0x7ffc0000 [ 310.881687][ T29] audit: type=1326 audit(2000000181.960:20639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20656 comm="syz.4.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b97be929 code=0x7ffc0000 [ 310.972569][T20677] loop3: detected capacity change from 0 to 512 [ 310.985781][T20677] ext3: Unknown parameter 'euid' [ 311.017222][T20660] hub 1-0:1.0: USB hub found [ 311.025563][T20660] hub 1-0:1.0: 8 ports detected [ 311.332896][T20696] block device autoloading is deprecated and will be removed. [ 311.409403][T20697] lo speed is unknown, defaulting to 1000 [ 311.461974][T20708] lo speed is unknown, defaulting to 1000 [ 311.575971][T20697] chnl_net:caif_netlink_parms(): no params data found [ 311.630389][T20725] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 311.641385][T20729] loop0: detected capacity change from 0 to 512 [ 311.649221][T20729] ext3: Unknown parameter 'euid' [ 311.701745][T20697] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.709059][T20697] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.718325][T20697] bridge_slave_0: entered allmulticast mode [ 311.725302][T20697] bridge_slave_0: entered promiscuous mode [ 311.766235][T20697] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.773340][T20697] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.780795][T20697] bridge_slave_1: entered allmulticast mode [ 311.787394][T20697] bridge_slave_1: entered promiscuous mode [ 311.808432][T20697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.820024][T20697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.849703][T20697] team0: Port device team_slave_0 added [ 311.860378][T20697] team0: Port device team_slave_1 added [ 311.866276][T20736] bridge_slave_1: left allmulticast mode [ 311.871932][T20736] bridge_slave_1: left promiscuous mode [ 311.877630][T20736] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.885569][T20736] bridge_slave_0: left allmulticast mode [ 311.891228][T20736] bridge_slave_0: left promiscuous mode [ 311.897028][T20736] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.999817][T20697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.006927][T20697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.033014][T20697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.048827][T20697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.055829][T20697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.081984][T20697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.130188][T20739] lo speed is unknown, defaulting to 1000 [ 312.157991][T20697] hsr_slave_0: entered promiscuous mode [ 312.164106][T20697] hsr_slave_1: entered promiscuous mode [ 312.172100][T20697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.182945][T20697] Cannot create hsr debugfs directory [ 312.294041][T20697] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 312.304003][T20697] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 312.376680][T20746] loop1: detected capacity change from 0 to 512 [ 312.383516][T20746] ext3: Unknown parameter 'euid' [ 312.407759][T20748] lo speed is unknown, defaulting to 1000 [ 312.426367][T20697] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 312.436300][T20697] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 312.451073][T20749] netlink: 'syz.3.6312': attribute type 1 has an invalid length. [ 312.506489][T20697] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 312.516539][T20697] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 312.555444][T20697] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 312.565362][T20697] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 312.652520][T20697] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.662204][T20697] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.677677][T20697] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.695831][T20697] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.712459][T20768] loop0: detected capacity change from 0 to 2048 [ 312.745459][T20768] Alternate GPT is invalid, using primary GPT. [ 312.751854][T20768] loop0: p1 p2 p3 [ 312.761642][T20697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.769722][T20768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.787754][T20768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.796011][T20697] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.826506][T10324] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.833625][T10324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.854223][T10324] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.861348][T10324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.009545][T20697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.243756][T20697] veth0_vlan: entered promiscuous mode [ 313.262167][T20697] veth1_vlan: entered promiscuous mode [ 313.317904][T20802] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 313.335224][T20802] team0: Port device batadv1 added [ 313.359836][T20697] veth0_macvtap: entered promiscuous mode [ 313.400169][T20697] veth1_macvtap: entered promiscuous mode [ 313.453520][T20697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.497513][T20697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.527274][T20806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.551174][T20697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.559964][T20697] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.568797][T20697] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.577679][T20697] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.594577][T20806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.700322][T20813] loop3: detected capacity change from 0 to 512 [ 313.712433][T20813] ext3: Unknown parameter 'euid' [ 313.758438][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x4 [ 313.766268][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x2 [ 313.775737][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.783399][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.784082][T20811] lo speed is unknown, defaulting to 1000 [ 313.791086][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.804592][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.812288][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.819990][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.827673][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.835468][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.843135][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.850822][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.858504][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.866181][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.873847][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.881543][ T9] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x0 [ 313.891357][ T9] hid-generic 0000:3000000:0000.0028: hidraw0: HID v0.00 Device [sy] on syz0 [ 314.083344][T20834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.092561][T20834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.155601][T20836] xt_TCPMSS: Only works on TCP SYN packets [ 314.191952][T20838] selinux_netlink_send: 4 callbacks suppressed [ 314.191970][T20838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20838 comm=syz.2.6335 [ 314.210808][T20838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20838 comm=syz.2.6335 [ 314.281866][T20839] __nla_validate_parse: 27 callbacks suppressed [ 314.281911][T20839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6335'. [ 314.610216][T20842] hub 1-0:1.0: USB hub found [ 314.615190][T20842] hub 1-0:1.0: 8 ports detected [ 314.706639][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6338'. [ 314.715881][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6338'. [ 314.744008][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6338'. [ 314.756614][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6338'. [ 314.770697][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x4 [ 314.778547][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x2 [ 314.787122][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.794855][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.802523][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.810248][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.817968][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.821997][T20863] lo speed is unknown, defaulting to 1000 [ 314.825684][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.839122][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.840047][T20866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6338'. [ 314.846821][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.863490][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.871243][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.878941][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.886664][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.894477][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.896370][T20867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6338'. [ 314.902128][ T3392] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x0 [ 314.923460][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6338'. [ 314.942724][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6338'. [ 314.953703][T20869] netlink: 256 bytes leftover after parsing attributes in process `+}[@'. [ 314.963681][ T3392] hid-generic 0000:3000000:0000.0029: hidraw0: HID v0.00 Device [sy] on syz0 [ 315.005610][T20878] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20878 comm=syz.4.6344 [ 315.018207][T20878] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20878 comm=syz.4.6344 [ 315.050128][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 315.050142][ T29] audit: type=1326 audit(2000000186.190:20797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a42e929 code=0x7ffc0000 [ 315.096621][ T29] audit: type=1326 audit(2000000186.190:20798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd3a42e929 code=0x7ffc0000 [ 315.120232][ T29] audit: type=1326 audit(2000000186.190:20799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a42e929 code=0x7ffc0000 [ 315.123535][T20887] netlink: 'syz.4.6349': attribute type 1 has an invalid length. [ 315.143895][ T29] audit: type=1326 audit(2000000186.190:20800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd3a430847 code=0x7ffc0000 [ 315.175272][ T29] audit: type=1326 audit(2000000186.190:20801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdd3a4307bc code=0x7ffc0000 [ 315.198882][ T29] audit: type=1326 audit(2000000186.190:20802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdd3a4306f4 code=0x7ffc0000 [ 315.222524][ T29] audit: type=1326 audit(2000000186.190:20803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdd3a4306f4 code=0x7ffc0000 [ 315.246111][ T29] audit: type=1326 audit(2000000186.190:20804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdd3a42d58a code=0x7ffc0000 [ 315.269568][ T29] audit: type=1326 audit(2000000186.190:20805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a42e929 code=0x7ffc0000 [ 315.293212][ T29] audit: type=1326 audit(2000000186.190:20806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20876 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd3a42e929 code=0x7ffc0000 [ 315.346001][T20891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.356440][T20891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.922288][T20907] netlink: 'syz.3.6355': attribute type 1 has an invalid length. [ 315.956880][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x4 [ 315.964735][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x2 [ 315.972847][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 315.980674][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 315.988404][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 315.996088][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.003812][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.011535][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.019249][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.026946][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.034643][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.042380][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.050180][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.057914][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.065585][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.073258][ T3412] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x0 [ 316.099851][ T3412] hid-generic 0000:3000000:0000.002A: hidraw0: HID v0.00 Device [sy] on syz0 [ 316.112121][T20921] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 316.135900][T20923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20923 comm=syz.4.6359 [ 316.148480][T20923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20923 comm=syz.4.6359 [ 316.179161][T20926] netlink: 'syz.1.6360': attribute type 1 has an invalid length. [ 316.239171][T20927] lo speed is unknown, defaulting to 1000 [ 316.267384][T20935] loop1: detected capacity change from 0 to 2048 [ 316.325123][T20935] Alternate GPT is invalid, using primary GPT. [ 316.331520][T20935] loop1: p1 p2 p3 [ 316.341619][T20935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.343661][T20942] netlink: 'syz.0.6369': attribute type 6 has an invalid length. [ 316.360801][T20935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.376008][T20943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.391573][T20943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.541479][T20951] lo speed is unknown, defaulting to 1000 [ 316.744102][T20962] netlink: 'syz.2.6376': attribute type 1 has an invalid length. [ 316.832559][T20968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20968 comm=syz.0.6379 [ 316.845433][T20968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20968 comm=syz.0.6379 [ 316.937136][T20977] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 317.116688][T20986] netlink: 'syz.3.6387': attribute type 1 has an invalid length. [ 317.328696][T20998] lo speed is unknown, defaulting to 1000 [ 317.446655][T21009] loop1: detected capacity change from 0 to 2048 [ 317.496609][T21009] Alternate GPT is invalid, using primary GPT. [ 317.502940][T21009] loop1: p1 p2 p3 [ 317.512699][T21009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.522614][T21009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.771028][T21016] netlink: 'syz.0.6399': attribute type 1 has an invalid length. [ 318.122458][T21032] loop1: detected capacity change from 0 to 1024 [ 318.131213][T21032] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 318.140821][T21032] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.153808][T21032] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 318.161856][T21032] EXT4-fs (loop1): orphan cleanup on readonly fs [ 318.168560][T21032] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.6403: Freeing blocks not in datazone - block = 0, count = 4096 [ 318.182174][T21032] EXT4-fs (loop1): Remounting filesystem read-only [ 318.188773][T21032] EXT4-fs (loop1): 1 orphan inode deleted [ 318.194952][T21032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.212480][T21032] xt_TCPMSS: Only works on TCP SYN packets [ 318.220775][T21034] lo speed is unknown, defaulting to 1000 [ 318.243189][T20331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.263697][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x4 [ 318.271442][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x2 [ 318.279323][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.287115][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.291505][T21042] loop3: detected capacity change from 0 to 512 [ 318.294839][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.294865][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.303416][T21042] ext3: Unknown parameter 'euid' [ 318.308760][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.329235][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.336908][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.344576][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.352279][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.360168][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.368069][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.375899][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.383679][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.391431][ T3412] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x0 [ 318.399634][ T3412] hid-generic 0000:3000000:0000.002B: hidraw0: HID v0.00 Device [sy] on syz0 [ 318.469048][T21046] lo speed is unknown, defaulting to 1000 [ 318.754167][T21061] xt_TCPMSS: Only works on TCP SYN packets [ 319.029411][T21086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21086 comm=syz.2.6417 [ 319.042131][T21086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21086 comm=syz.2.6417 [ 319.313239][T21093] __nla_validate_parse: 43 callbacks suppressed [ 319.313257][T21093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6420'. [ 319.328576][T21093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6420'. [ 319.337556][T21093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6420'. [ 319.346669][T21093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6420'. [ 319.355738][T21093] netlink: 'syz.4.6420': attribute type 6 has an invalid length. [ 319.420159][T21099] SELinux: failed to load policy [ 319.422146][T21097] lo speed is unknown, defaulting to 1000 [ 319.456147][T21101] loop0: detected capacity change from 0 to 1024 [ 319.463334][T21101] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 319.474426][T21101] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 319.487742][T21101] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 319.495938][T21101] EXT4-fs (loop0): orphan cleanup on readonly fs [ 319.502646][T21101] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.6424: Freeing blocks not in datazone - block = 0, count = 4096 [ 319.518507][T21101] EXT4-fs (loop0): Remounting filesystem read-only [ 319.525617][T21101] EXT4-fs (loop0): 1 orphan inode deleted [ 319.531980][T21101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.550666][T21101] xt_TCPMSS: Only works on TCP SYN packets [ 319.568049][T19482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.591732][T21105] SELinux: failed to load policy [ 319.629325][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6427'. [ 319.638361][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6427'. [ 319.656629][T21114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21114 comm=syz.2.6429 [ 319.661898][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6427'. [ 319.669299][T21114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21114 comm=syz.2.6429 [ 319.694965][T21114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6429'. [ 319.696168][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6427'. [ 319.733256][T21115] lo speed is unknown, defaulting to 1000 [ 319.740460][T21119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6431'. [ 319.841677][T21122] lo speed is unknown, defaulting to 1000 [ 319.913281][T21122] netlink: 'syz.1.6432': attribute type 1 has an invalid length. [ 320.019529][T21133] lo speed is unknown, defaulting to 1000 [ 320.531192][T21144] loop0: detected capacity change from 0 to 2048 [ 320.565208][T21144] Alternate GPT is invalid, using primary GPT. [ 320.571547][T21144] loop0: p1 p2 p3 [ 320.585768][T21144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.596188][T21144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.740801][T21154] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21154 comm=syz.4.6442 [ 320.753486][T21154] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21154 comm=syz.4.6442 [ 320.770453][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x4 [ 320.775859][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 320.775914][ T29] audit: type=1326 audit(2000000191.920:21060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21153 comm="syz.4.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a42e929 code=0x7ffc0000 [ 320.778198][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x2 [ 320.786878][ T29] audit: type=1326 audit(2000000191.930:21061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21153 comm="syz.4.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd3a42e929 code=0x7ffc0000 [ 320.859404][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.867274][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.868947][ T29] audit: type=1326 audit(2000000191.990:21062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21153 comm="syz.4.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a42e929 code=0x7ffc0000 [ 320.874929][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.874952][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.874971][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.875068][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.898563][ T29] audit: type=1326 audit(2000000191.990:21063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21153 comm="syz.4.6442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3a42e929 code=0x7ffc0000 [ 320.906262][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.960472][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.968176][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.975866][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.983565][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.991299][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 320.998965][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 321.007759][ T36] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x0 [ 321.050760][ T36] hid-generic 0000:3000000:0000.002C: hidraw0: HID v0.00 Device [sy] on syz0 [ 321.070201][T21161] lo speed is unknown, defaulting to 1000 [ 321.121549][T21164] lo speed is unknown, defaulting to 1000 [ 321.158586][T21164] netlink: 'syz.3.6445': attribute type 1 has an invalid length. [ 321.229048][ T29] audit: type=1326 audit(2000000192.370:21064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3832de929 code=0x7ffc0000 [ 321.252340][ T29] audit: type=1326 audit(2000000192.370:21065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3832de929 code=0x7ffc0000 [ 321.275573][ T29] audit: type=1326 audit(2000000192.370:21066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd3832de929 code=0x7ffc0000 [ 321.298708][ T29] audit: type=1326 audit(2000000192.370:21067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3832de929 code=0x7ffc0000 [ 321.321867][ T29] audit: type=1326 audit(2000000192.370:21068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3832de929 code=0x7ffc0000 [ 321.344959][ T29] audit: type=1326 audit(2000000192.370:21069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21171 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3832de929 code=0x7ffc0000 [ 321.460664][T21176] bridge_slave_1: left allmulticast mode [ 321.466562][T21176] bridge_slave_1: left promiscuous mode [ 321.472337][T21176] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.486146][T21176] bridge_slave_0: left allmulticast mode [ 321.491900][T21176] bridge_slave_0: left promiscuous mode [ 321.497585][T21176] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.723503][T21199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21199 comm=syz.1.6455 [ 321.736270][T21199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21199 comm=syz.1.6455 [ 321.798709][T21203] loop1: detected capacity change from 0 to 2048 [ 321.840890][T21207] loop2: detected capacity change from 0 to 128 [ 321.851854][T21206] lo speed is unknown, defaulting to 1000 [ 321.856099][T21203] Alternate GPT is invalid, using primary GPT. [ 321.864035][T21203] loop1: p1 p2 p3 [ 321.879778][T21203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.891899][T21210] netlink: 'syz.3.6457': attribute type 1 has an invalid length. [ 321.892401][T21203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.016088][T21220] syz.2.6458: attempt to access beyond end of device [ 322.016088][T21220] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 322.090587][T21220] syz.2.6458: attempt to access beyond end of device [ 322.090587][T21220] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 322.117636][T21228] lo speed is unknown, defaulting to 1000 [ 322.144745][T21220] syz.2.6458: attempt to access beyond end of device [ 322.144745][T21220] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 322.193170][T21220] syz.2.6458: attempt to access beyond end of device [ 322.193170][T21220] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 322.208607][T21220] syz.2.6458: attempt to access beyond end of device [ 322.208607][T21220] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 322.233898][T21221] lo speed is unknown, defaulting to 1000 [ 322.239947][T21220] syz.2.6458: attempt to access beyond end of device [ 322.239947][T21220] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 322.269080][T21220] syz.2.6458: attempt to access beyond end of device [ 322.269080][T21220] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 322.297572][T21220] syz.2.6458: attempt to access beyond end of device [ 322.297572][T21220] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 322.313259][T21220] syz.2.6458: attempt to access beyond end of device [ 322.313259][T21220] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 322.327834][T21220] syz.2.6458: attempt to access beyond end of device [ 322.327834][T21220] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 322.403097][T21240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21240 comm=syz.4.6467 [ 322.415744][T21240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21240 comm=syz.4.6467 [ 322.512748][T21250] netlink: 'syz.4.6471': attribute type 6 has an invalid length. [ 322.570183][T21253] lo speed is unknown, defaulting to 1000 [ 322.608487][T21253] netlink: 'syz.4.6472': attribute type 1 has an invalid length. [ 322.629494][T21255] vhci_hcd: invalid port number 0 [ 322.698568][T21260] netlink: 'syz.1.6475': attribute type 1 has an invalid length. [ 322.756209][T21268] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21268 comm=syz.0.6480 [ 322.768871][T21268] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21268 comm=syz.0.6480 [ 322.796388][T21270] loop2: detected capacity change from 0 to 1024 [ 322.799722][T21266] loop1: detected capacity change from 0 to 2048 [ 322.813010][T21270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 322.833186][T21270] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.855646][T21266] Alternate GPT is invalid, using primary GPT. [ 322.862008][T21266] loop1: p1 p2 p3 [ 322.878441][T21270] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 322.880805][T21266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.894497][T21270] EXT4-fs (loop2): orphan cleanup on readonly fs [ 322.908393][T21270] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.6478: Freeing blocks not in datazone - block = 0, count = 4096 [ 322.951361][T21276] lo speed is unknown, defaulting to 1000 [ 322.961702][T21266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.973554][T21270] EXT4-fs (loop2): Remounting filesystem read-only [ 322.990485][T21270] EXT4-fs (loop2): 1 orphan inode deleted [ 323.028791][T21270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.123514][T20566] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.684448][T10313] unregister_netdevice: waiting for lo to become free. Usage count = 3 [ 323.692961][T10313] ref_tracker: lo@ffff88810a50c550 has 1/1 users at [ 323.692961][T10313] ib_device_set_netdev+0x212/0x450 [ 323.692961][T10313] siw_newlink+0x32e/0x680 [ 323.692961][T10313] nldev_newlink+0x369/0x3f0 [ 323.692961][T10313] rdma_nl_rcv+0x479/0x5a0 [ 323.692961][T10313] netlink_unicast+0x59e/0x670 [ 323.692961][T10313] netlink_sendmsg+0x58b/0x6b0 [ 323.692961][T10313] __sock_sendmsg+0x142/0x180 [ 323.692961][T10313] ____sys_sendmsg+0x31e/0x4e0 [ 323.692961][T10313] ___sys_sendmsg+0x17b/0x1d0 [ 323.692961][T10313] __x64_sys_sendmsg+0xd4/0x160 [ 323.692961][T10313] x64_sys_call+0x2999/0x2fb0 [ 323.692961][T10313] do_syscall_64+0xd2/0x200 [ 323.692961][T10313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.692961][T10313] [ 323.846702][T21307] loop1: detected capacity change from 0 to 1024 [ 323.853790][T21307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 323.864689][T21307] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.885693][T21307] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 323.894068][T21307] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.901930][T21307] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.6494: Freeing blocks not in datazone - block = 0, count = 4096 [ 323.915954][T21307] EXT4-fs (loop1): Remounting filesystem read-only [ 323.925539][T21307] EXT4-fs (loop1): 1 orphan inode deleted [ 323.934814][T21307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.969552][T20331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.029334][T21316] netlink: 'syz.1.6496': attribute type 6 has an invalid length. [ 324.071219][T21315] loop3: detected capacity change from 0 to 2048 [ 324.075654][T21312] lo speed is unknown, defaulting to 1000 [ 324.110436][T21322] loop0: detected capacity change from 0 to 2048 [ 324.185420][T21320] SELinux: failed to load policy [ 324.186864][T21325] vhci_hcd: invalid port number 0 [ 324.197814][T21322] Alternate GPT is invalid, using primary GPT. [ 324.204155][T21322] loop0: p1 p2 p3 [ 324.226239][T21322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.240600][T21322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.302504][T21333] netlink: 'syz.3.6503': attribute type 6 has an invalid length. [ 324.323742][T21335] loop1: detected capacity change from 0 to 512 [ 324.349438][T21337] __nla_validate_parse: 44 callbacks suppressed [ 324.349452][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6506'. [ 324.364859][T21337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6506'. [ 324.373847][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6506'. [ 324.385049][T21335] ext3: Unknown parameter 'euid' [ 324.414734][T21337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6506'. [ 324.423783][T21337] netlink: 'syz.3.6506': attribute type 6 has an invalid length. [ 324.580222][T21351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6509'. [ 324.589262][T21351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6509'. [ 324.598258][T21351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6509'. [ 324.609044][T21351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6509'. [ 324.618059][T21351] netlink: 'syz.3.6509': attribute type 6 has an invalid length. [ 324.674799][T21357] loop2: detected capacity change from 0 to 2048 [ 324.697872][T21357] EXT4-fs (loop2): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.713384][T21361] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6511'. [ 324.722375][T21361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6511'. [ 324.848748][T21366] FAULT_INJECTION: forcing a failure. [ 324.848748][T21366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.862567][T21366] CPU: 1 UID: 0 PID: 21366 Comm: syz.0.6512 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 324.862591][T21366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.862619][T21366] Call Trace: [ 324.862625][T21366] [ 324.862633][T21366] __dump_stack+0x1d/0x30 [ 324.862728][T21366] dump_stack_lvl+0xe8/0x140 [ 324.862753][T21366] dump_stack+0x15/0x1b [ 324.862813][T21366] should_fail_ex+0x265/0x280 [ 324.862846][T21366] should_fail+0xb/0x20 [ 324.862913][T21366] should_fail_usercopy+0x1a/0x20 [ 324.862952][T21366] _copy_from_user+0x1c/0xb0 [ 324.862979][T21366] __copy_msghdr+0x244/0x300 [ 324.863127][T21366] ___sys_sendmsg+0x109/0x1d0 [ 324.863213][T21366] __x64_sys_sendmsg+0xd4/0x160 [ 324.863249][T21366] x64_sys_call+0x2999/0x2fb0 [ 324.863287][T21366] do_syscall_64+0xd2/0x200 [ 324.863304][T21366] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 324.863330][T21366] ? clear_bhb_loop+0x40/0x90 [ 324.863436][T21366] ? clear_bhb_loop+0x40/0x90 [ 324.863461][T21366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.863607][T21366] RIP: 0033:0x7fef4098e929 [ 324.863622][T21366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.863642][T21366] RSP: 002b:00007fef3eff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.863712][T21366] RAX: ffffffffffffffda RBX: 00007fef40bb5fa0 RCX: 00007fef4098e929 [ 324.863728][T21366] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000008 [ 324.863744][T21366] RBP: 00007fef3eff7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.863760][T21366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.863775][T21366] R13: 0000000000000000 R14: 00007fef40bb5fa0 R15: 00007fff648a80b8 [ 324.863793][T21366] [ 325.133164][T21360] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 325.253254][T21370] vhci_hcd: invalid port number 0 [ 325.637551][T20566] EXT4-fs (loop2): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 325.695106][T21387] netlink: 'syz.4.6520': attribute type 1 has an invalid length. [ 325.727951][T21383] lo speed is unknown, defaulting to 1000 [ 325.747418][T21390] 9pnet_fd: Insufficient options for proto=fd [ 325.769092][T21393] lo speed is unknown, defaulting to 1000 [ 325.888886][T21396] lo speed is unknown, defaulting to 1000 [ 325.945261][T21412] selinux_netlink_send: 2 callbacks suppressed [ 325.945314][T21412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=21412 comm=syz.0.6527 [ 325.974954][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 325.974965][ T29] audit: type=1326 audit(2000000197.120:21281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21413 comm="syz.2.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd852bee929 code=0x7ffc0000 [ 325.995724][T21419] loop0: detected capacity change from 0 to 512 [ 326.014797][T21419] ext3: Unknown parameter 'euid' [ 326.030847][ T29] audit: type=1326 audit(2000000197.150:21282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21413 comm="syz.2.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd852bee929 code=0x7ffc0000 [ 326.054480][ T29] audit: type=1326 audit(2000000197.150:21283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21413 comm="syz.2.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd852bee929 code=0x7ffc0000 [ 326.078106][ T29] audit: type=1326 audit(2000000197.150:21284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21413 comm="syz.2.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd852bee929 code=0x7ffc0000 [ 326.101696][ T29] audit: type=1326 audit(2000000197.150:21285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21413 comm="syz.2.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd852bee929 code=0x7ffc0000 [ 326.126138][ T29] audit: type=1326 audit(2000000197.150:21286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21413 comm="syz.2.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd852bee929 code=0x7ffc0000 [ 326.150067][ T29] audit: type=1326 audit(2000000197.150:21287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21413 comm="syz.2.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd852bee929 code=0x7ffc0000 [ 326.173744][ T29] audit: type=1326 audit(2000000197.150:21288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21413 comm="syz.2.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd852bee929 code=0x7ffc0000 [ 326.197250][ T29] audit: type=1326 audit(2000000197.150:21289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21413 comm="syz.2.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd852bee929 code=0x7ffc0000 [ 326.220971][ T29] audit: type=1326 audit(2000000197.150:21290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21413 comm="syz.2.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd852bee929 code=0x7ffc0000 [ 326.306516][T21427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21427 comm=syz.3.6533 [ 326.319121][T21427] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21427 comm=syz.3.6533 [ 326.376797][T21424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.394524][T21424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.740794][T21421] serio: Serial port ptm0 [ 326.791932][T21435] netem: change failed [ 326.916665][T21443] loop1: detected capacity change from 0 to 2048 [ 326.926693][T21445] lo speed is unknown, defaulting to 1000 [ 326.958978][T21443] Alternate GPT is invalid, using primary GPT. [ 326.965418][T21443] loop1: p1 p2 p3 [ 327.023770][T21443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.032662][T21443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.054044][T21445] validate_nla: 1 callbacks suppressed [ 327.054084][T21445] netlink: 'syz.3.6536': attribute type 1 has an invalid length. [ 327.111379][T21449] lo speed is unknown, defaulting to 1000 [ 327.217544][T21458] netlink: 'syz.3.6540': attribute type 6 has an invalid length. [ 327.246934][T21460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.254496][T21460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.278886][T21460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.286512][T21460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.296599][T21466] atomic_op ffff88817fb22128 conn xmit_atomic 0000000000000000 [ 327.463145][T21468] hub 9-0:1.0: USB hub found [ 327.468830][T21464] infiniband syz!: set active [ 327.473665][T21464] infiniband syz!: added team_slave_0 [ 327.489408][T21468] hub 9-0:1.0: 8 ports detected [ 327.520293][T21464] RDS/IB: syz!: added [ 327.524895][T21464] smc: adding ib device syz! with port count 1 [ 327.531145][T21464] smc: ib device syz! port 1 has pnetid [ 327.618778][T21491] net_ratelimit: 41 callbacks suppressed [ 327.618792][T21491] IPv6: addrconf: prefix option has invalid lifetime [ 327.639532][T21489] lo speed is unknown, defaulting to 1000 [ 327.672265][T21496] netlink: 'syz.4.6551': attribute type 1 has an invalid length. [ 327.707326][T21498] tipc: Started in network mode [ 327.712236][T21498] tipc: Node identity 4, cluster identity 4711 [ 327.718512][T21498] tipc: Node number set to 4 [ 328.049620][T21509] netlink: 'syz.4.6557': attribute type 6 has an invalid length. [ 328.147532][T21511] netlink: 'syz.4.6558': attribute type 6 has an invalid length. [ 328.657538][T21531] vhci_hcd: invalid port number 0 [ 329.386449][T21563] __nla_validate_parse: 38 callbacks suppressed [ 329.386463][T21563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6580'. [ 329.401834][T21563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6580'. [ 329.410912][T21563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6580'. [ 329.473539][T21569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6583'. [ 329.482632][T21569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6583'. [ 329.491676][T21569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6583'. [ 329.504661][T21569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6583'. [ 329.513706][T21569] netlink: 'syz.1.6583': attribute type 6 has an invalid length. [ 329.543014][T21571] lo speed is unknown, defaulting to 1000 [ 329.606744][T21581] netlink: 'syz.1.6588': attribute type 1 has an invalid length. [ 329.614633][T21581] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6588'. [ 329.659891][T21588] 9pnet_fd: Insufficient options for proto=fd [ 329.805691][T21590] hub 1-0:1.0: USB hub found [ 329.810382][T21590] hub 1-0:1.0: 8 ports detected [ 329.899634][T21607] hub 1-0:1.0: USB hub found [ 329.904431][T21607] hub 1-0:1.0: 8 ports detected [ 330.018715][T21616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21616 comm=syz.4.6600 [ 330.031401][T21616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21616 comm=syz.4.6600 [ 330.067941][T21616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6600'. [ 330.091520][T21617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.122528][T21620] 9pnet_fd: Insufficient options for proto=fd [ 330.125205][T21617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.230764][T21627] FAULT_INJECTION: forcing a failure. [ 330.230764][T21627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.243966][T21627] CPU: 1 UID: 0 PID: 21627 Comm: syz.3.6604 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 330.244071][T21627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.244084][T21627] Call Trace: [ 330.244091][T21627] [ 330.244100][T21627] __dump_stack+0x1d/0x30 [ 330.244127][T21627] dump_stack_lvl+0xe8/0x140 [ 330.244163][T21627] dump_stack+0x15/0x1b [ 330.244180][T21627] should_fail_ex+0x265/0x280 [ 330.244261][T21627] should_fail+0xb/0x20 [ 330.244292][T21627] should_fail_usercopy+0x1a/0x20 [ 330.244361][T21627] _copy_from_user+0x1c/0xb0 [ 330.244385][T21627] __sys_bpf+0x178/0x790 [ 330.244465][T21627] __x64_sys_bpf+0x41/0x50 [ 330.244496][T21627] x64_sys_call+0x2478/0x2fb0 [ 330.244518][T21627] do_syscall_64+0xd2/0x200 [ 330.244549][T21627] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 330.244583][T21627] ? clear_bhb_loop+0x40/0x90 [ 330.244605][T21627] ? clear_bhb_loop+0x40/0x90 [ 330.244629][T21627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.244670][T21627] RIP: 0033:0x7fd3832de929 [ 330.244683][T21627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.244697][T21627] RSP: 002b:00007fd381947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.244713][T21627] RAX: ffffffffffffffda RBX: 00007fd383505fa0 RCX: 00007fd3832de929 [ 330.244723][T21627] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000009 [ 330.244738][T21627] RBP: 00007fd381947090 R08: 0000000000000000 R09: 0000000000000000 [ 330.244751][T21627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.244763][T21627] R13: 0000000000000000 R14: 00007fd383505fa0 R15: 00007ffc8813fc88 [ 330.244859][T21627] [ 330.868904][T21641] hub 9-0:1.0: USB hub found [ 330.881460][T21641] hub 9-0:1.0: 8 ports detected [ 331.350360][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 331.350380][ T29] audit: type=1400 audit(2000000202.490:21595): avc: denied { audit_write } for pid=21647 comm="syz.1.6613" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 331.351248][T21648] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=52 sclass=netlink_audit_socket pid=21648 comm=syz.1.6613 [ 331.393341][T21648] loop1: detected capacity change from 0 to 164 [ 331.401236][ T29] audit: type=1400 audit(2000000202.550:21596): avc: denied { mount } for pid=21647 comm="syz.1.6613" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 331.402719][T21648] bio_check_eod: 102 callbacks suppressed [ 331.402795][T21648] syz.1.6613: attempt to access beyond end of device [ 331.402795][T21648] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 331.446697][T21648] syz.1.6613: attempt to access beyond end of device [ 331.446697][T21648] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 331.574095][ T29] audit: type=1400 audit(2000000202.710:21597): avc: denied { unmount } for pid=20331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 331.606172][T21651] 9pnet_fd: Insufficient options for proto=fd [ 331.629856][T21653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6615'. [ 331.639177][T21653] netlink: 'syz.1.6615': attribute type 6 has an invalid length. [ 331.679779][ T29] audit: type=1326 audit(2000000202.820:21598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21656 comm="syz.1.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dddee929 code=0x7ffc0000 [ 331.721270][T21657] SELinux: failed to load policy [ 331.730852][ T29] audit: type=1326 audit(2000000202.820:21599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21656 comm="syz.1.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40dddee929 code=0x7ffc0000 [ 331.754661][ T29] audit: type=1326 audit(2000000202.820:21600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21656 comm="syz.1.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dddee929 code=0x7ffc0000 [ 331.759471][T21659] netlink: 'syz.1.6618': attribute type 1 has an invalid length. [ 331.778429][ T29] audit: type=1326 audit(2000000202.820:21601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21656 comm="syz.1.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40dddee929 code=0x7ffc0000 [ 331.809584][ T29] audit: type=1326 audit(2000000202.820:21602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21656 comm="syz.1.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dddee929 code=0x7ffc0000 [ 331.833551][ T29] audit: type=1326 audit(2000000202.820:21603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21656 comm="syz.1.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f40dddee929 code=0x7ffc0000 [ 331.857055][ T29] audit: type=1326 audit(2000000202.820:21604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21656 comm="syz.1.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dddee929 code=0x7ffc0000 [ 333.045238][T21670] loop2: detected capacity change from 0 to 1024 [ 333.052192][T21670] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 333.061126][T21670] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 333.072025][T21670] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 333.080382][T21670] EXT4-fs (loop2): orphan cleanup on readonly fs [ 333.086932][T21670] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.6622: Freeing blocks not in datazone - block = 0, count = 4096 [ 333.101720][T21670] EXT4-fs (loop2): Remounting filesystem read-only [ 333.108286][T21670] EXT4-fs (loop2): 1 orphan inode deleted [ 333.116168][T21670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.142978][T20566] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.518473][T21665] lo speed is unknown, defaulting to 1000 [ 334.534551][T21631] lo speed is unknown, defaulting to 1000 [ 334.550823][T21639] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 334.598751][T21676] loop4: detected capacity change from 0 to 512 [ 334.625622][T21676] ext3: Unknown parameter 'euid' [ 334.681048][T21687] __nla_validate_parse: 7 callbacks suppressed [ 334.681064][T21687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6627'. [ 334.696374][T21687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6627'. [ 334.705370][T21687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6627'. [ 334.725751][T21678] hub 1-0:1.0: USB hub found [ 334.731435][T21687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6627'. [ 334.740484][T21687] netlink: 'syz.1.6627': attribute type 6 has an invalid length. [ 334.740550][T21678] hub 1-0:1.0: 8 ports detected [ 334.887151][T21704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21704 comm=syz.1.6632 [ 334.899767][T21704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21704 comm=syz.1.6632 [ 334.977534][T21706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6632'. [ 335.004851][T21708] netlink: 5560 bytes leftover after parsing attributes in process `syz.0.6633'. [ 335.046983][T21712] loop2: detected capacity change from 0 to 2048 [ 335.088096][T21712] Alternate GPT is invalid, using primary GPT. [ 335.094544][T21712] loop2: p1 p2 p3 [ 335.105637][T21712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.114213][T21712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.597450][T21723] vhci_hcd: invalid port number 0 [ 335.771238][T21745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21745 comm=syz.4.6643 [ 335.771864][T21746] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 335.783856][T21745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21745 comm=syz.4.6643 [ 335.805399][T21745] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6643'. [ 335.860459][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6646'. [ 335.871242][T21756] loop1: detected capacity change from 0 to 128 [ 335.880305][T21756] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.897816][T21753] vhci_hcd: invalid port number 0 [ 335.914578][T21756] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 335.973330][T21767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6650'. [ 336.025582][T21771] netlink: 5560 bytes leftover after parsing attributes in process `syz.2.6652'. [ 336.056813][T20331] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.072149][T21769] lo speed is unknown, defaulting to 1000 [ 336.132277][T21774] lo speed is unknown, defaulting to 1000 [ 336.270663][T21787] loop1: detected capacity change from 0 to 2048 [ 336.315798][T21787] Alternate GPT is invalid, using primary GPT. [ 336.322329][T21787] loop1: p1 p2 p3 [ 336.330137][T21787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.339162][T21787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.352815][T21792] IPv6: Can't replace route, no match found [ 336.382651][T21794] loop0: detected capacity change from 0 to 1024 [ 336.389496][T21794] EXT4-fs: Ignoring removed orlov option [ 336.397416][T21794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.424108][T19482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.440763][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 336.440776][ T29] audit: type=1326 audit(2000000207.580:21865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 336.470725][ T29] audit: type=1326 audit(2000000207.580:21866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 336.494369][ T29] audit: type=1326 audit(2000000207.580:21867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 336.518077][ T29] audit: type=1326 audit(2000000207.580:21868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 336.541663][ T29] audit: type=1326 audit(2000000207.580:21869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 336.565325][ T29] audit: type=1326 audit(2000000207.580:21870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 336.588895][ T29] audit: type=1326 audit(2000000207.580:21871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 336.612638][ T29] audit: type=1326 audit(2000000207.580:21872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 336.636277][ T29] audit: type=1326 audit(2000000207.580:21873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 336.659909][ T29] audit: type=1326 audit(2000000207.580:21874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21796 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4098e929 code=0x7ffc0000 [ 336.716433][T21802] vhci_hcd: invalid port number 0 [ 336.762035][T21806] loop0: detected capacity change from 0 to 1024 [ 336.769231][T21806] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 336.778655][T21806] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 336.791112][T21806] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 336.799534][T21806] EXT4-fs (loop0): orphan cleanup on readonly fs [ 336.806216][T21806] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.6663: Freeing blocks not in datazone - block = 0, count = 4096 [ 336.819850][T21806] EXT4-fs (loop0): Remounting filesystem read-only [ 336.827382][T21806] EXT4-fs (loop0): 1 orphan inode deleted [ 336.833490][T21806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.862493][T19482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.876673][T21809] hub 1-0:1.0: USB hub found [ 336.881334][T21809] hub 1-0:1.0: 8 ports detected [ 336.939384][T21818] hub 1-0:1.0: USB hub found [ 336.944138][T21818] hub 1-0:1.0: 8 ports detected [ 336.956243][T21814] lo speed is unknown, defaulting to 1000 [ 336.977386][T21821] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 337.006881][T21825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.014326][T21825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.023713][T21825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.031471][T21825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.140582][T21831] vhci_hcd: invalid port number 0 [ 337.372466][T21853] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 337.611452][T21860] lo speed is unknown, defaulting to 1000 [ 337.800192][T21867] netlink: 'syz.0.6686': attribute type 6 has an invalid length. [ 337.966749][T21874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.974288][T21874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.981990][T21874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.989636][T21874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.163678][T21888] netlink: 'syz.2.6692': attribute type 6 has an invalid length. [ 338.208788][T21893] netlink: 'syz.2.6694': attribute type 1 has an invalid length. [ 338.222474][T21895] lo speed is unknown, defaulting to 1000 [ 338.228367][T21897] loop1: detected capacity change from 0 to 512 [ 338.240809][T21897] ext3: Unknown parameter 'euid' [ 338.270783][T21900] netlink: 'syz.4.6695': attribute type 1 has an invalid length. [ 338.317649][T21902] loop2: detected capacity change from 0 to 2048 [ 338.375264][T21902] Alternate GPT is invalid, using primary GPT. [ 338.381616][T21902] loop2: p1 p2 p3 [ 338.458809][T21908] loop4: detected capacity change from 0 to 1024 [ 338.465579][T21908] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.480505][T21908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.538785][T21912] loop2: detected capacity change from 0 to 512 [ 338.546009][T21912] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 338.682840][T21912] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.6698: bad orphan inode 15 [ 338.709276][T20697] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.722074][T21912] ext4_test_bit(bit=14, block=18) = 1 [ 338.727586][T21912] is_bad_inode(inode)=0 [ 338.731759][T21912] NEXT_ORPHAN(inode)=1023 [ 338.736177][T21912] max_ino=32 [ 338.739382][T21912] i_nlink=0 [ 338.766929][T21912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 338.801004][T21912] ext2 filesystem being mounted at /78/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 339.047460][T21925] netlink: 'syz.4.6705': attribute type 6 has an invalid length. [ 339.207538][T20566] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 339.256532][T21935] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21935 comm=syz.2.6708 [ 339.269252][T21935] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21935 comm=syz.2.6708 [ 339.357756][T21941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21941 comm=syz.2.6709 [ 339.380101][T21945] netlink: 'syz.1.6711': attribute type 6 has an invalid length. [ 339.412526][T21950] FAULT_INJECTION: forcing a failure. [ 339.412526][T21950] name failslab, interval 1, probability 0, space 0, times 0 [ 339.425301][T21950] CPU: 1 UID: 0 PID: 21950 Comm: syz.1.6713 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 339.425344][T21950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.425355][T21950] Call Trace: [ 339.425360][T21950] [ 339.425366][T21950] __dump_stack+0x1d/0x30 [ 339.425385][T21950] dump_stack_lvl+0xe8/0x140 [ 339.425448][T21950] dump_stack+0x15/0x1b [ 339.425468][T21950] should_fail_ex+0x265/0x280 [ 339.425498][T21950] ? audit_log_d_path+0x8d/0x150 [ 339.425587][T21950] should_failslab+0x8c/0xb0 [ 339.425618][T21950] __kmalloc_cache_noprof+0x4c/0x320 [ 339.425678][T21950] audit_log_d_path+0x8d/0x150 [ 339.425726][T21950] audit_log_d_path_exe+0x42/0x70 [ 339.425824][T21950] audit_log_task+0x1e9/0x250 [ 339.425857][T21950] audit_seccomp+0x61/0x100 [ 339.425886][T21950] ? __seccomp_filter+0x68c/0x10d0 [ 339.425911][T21950] __seccomp_filter+0x69d/0x10d0 [ 339.426006][T21950] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 339.426044][T21950] ? vfs_write+0x75e/0x8e0 [ 339.426162][T21950] ? __rcu_read_unlock+0x4f/0x70 [ 339.426186][T21950] ? __fget_files+0x184/0x1c0 [ 339.426211][T21950] __secure_computing+0x82/0x150 [ 339.426234][T21950] syscall_trace_enter+0xcf/0x1e0 [ 339.426321][T21950] do_syscall_64+0xac/0x200 [ 339.426340][T21950] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 339.426368][T21950] ? clear_bhb_loop+0x40/0x90 [ 339.426391][T21950] ? clear_bhb_loop+0x40/0x90 [ 339.426475][T21950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.426497][T21950] RIP: 0033:0x7f40dddee929 [ 339.426514][T21950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.426544][T21950] RSP: 002b:00007f40dc457038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e2 [ 339.426564][T21950] RAX: ffffffffffffffda RBX: 00007f40de015fa0 RCX: 00007f40dddee929 [ 339.426578][T21950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.426591][T21950] RBP: 00007f40dc457090 R08: 0000000000000000 R09: 0000000000000000 [ 339.426611][T21950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.426625][T21950] R13: 0000000000000000 R14: 00007f40de015fa0 R15: 00007ffdc4173ad8 [ 339.426646][T21950] [ 339.437385][T21948] vhci_hcd: invalid port number 0 [ 339.749564][T21959] lo speed is unknown, defaulting to 1000 [ 339.768595][T21962] loop0: detected capacity change from 0 to 512 [ 339.776227][T21957] loop4: detected capacity change from 0 to 2048 [ 339.800837][T21962] ext3: Unknown parameter 'euid' [ 339.825155][T21957] Alternate GPT is invalid, using primary GPT. [ 339.831614][T21957] loop4: p1 p2 p3 [ 339.864026][T21957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.889174][T21957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.019796][T21971] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21971 comm=syz.2.6721 [ 340.032473][T21971] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21971 comm=syz.2.6721 [ 340.050137][T21971] __nla_validate_parse: 39 callbacks suppressed [ 340.050152][T21971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6721'. [ 340.084894][T21974] loop2: detected capacity change from 0 to 512 [ 340.091690][T21974] ext3: Unknown parameter 'euid' [ 340.796818][T21986] netlink: 'syz.1.6727': attribute type 1 has an invalid length. [ 340.804605][T21986] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6727'. [ 340.878555][T21990] loop0: detected capacity change from 0 to 2048 [ 340.902167][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6728'. [ 340.946318][T21990] Alternate GPT is invalid, using primary GPT. [ 340.952624][T21990] loop0: p1 p2 p3 [ 340.978375][T21990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.987943][T21990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.049207][T21997] FAULT_INJECTION: forcing a failure. [ 341.049207][T21997] name failslab, interval 1, probability 0, space 0, times 0 [ 341.061896][T21997] CPU: 1 UID: 0 PID: 21997 Comm: syz.1.6730 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 341.061982][T21997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.061998][T21997] Call Trace: [ 341.062006][T21997] [ 341.062015][T21997] __dump_stack+0x1d/0x30 [ 341.062041][T21997] dump_stack_lvl+0xe8/0x140 [ 341.062101][T21997] dump_stack+0x15/0x1b [ 341.062178][T21997] should_fail_ex+0x265/0x280 [ 341.062218][T21997] should_failslab+0x8c/0xb0 [ 341.062307][T21997] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 341.062339][T21997] ? sidtab_sid2str_get+0xa0/0x130 [ 341.062362][T21997] ? skb_put+0xa9/0xf0 [ 341.062401][T21997] kmemdup_noprof+0x2b/0x70 [ 341.062431][T21997] sidtab_sid2str_get+0xa0/0x130 [ 341.062470][T21997] security_sid_to_context_core+0x1eb/0x2e0 [ 341.062581][T21997] security_sid_to_context+0x27/0x40 [ 341.062607][T21997] avc_audit_post_callback+0x9d/0x520 [ 341.062655][T21997] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 341.062747][T21997] common_lsm_audit+0x1bb/0x230 [ 341.062765][T21997] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 341.062789][T21997] slow_avc_audit+0x104/0x140 [ 341.062813][T21997] avc_has_perm+0x128/0x150 [ 341.062906][T21997] selinux_socket_sendmsg+0x175/0x1b0 [ 341.062943][T21997] security_socket_sendmsg+0x48/0x80 [ 341.062973][T21997] __sock_sendmsg+0x30/0x180 [ 341.063079][T21997] ____sys_sendmsg+0x31e/0x4e0 [ 341.063122][T21997] ___sys_sendmsg+0x17b/0x1d0 [ 341.063171][T21997] __x64_sys_sendmsg+0xd4/0x160 [ 341.063220][T21997] x64_sys_call+0x2999/0x2fb0 [ 341.063243][T21997] do_syscall_64+0xd2/0x200 [ 341.063260][T21997] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 341.063284][T21997] ? clear_bhb_loop+0x40/0x90 [ 341.063314][T21997] ? clear_bhb_loop+0x40/0x90 [ 341.063342][T21997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.063369][T21997] RIP: 0033:0x7f40dddee929 [ 341.063389][T21997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.063475][T21997] RSP: 002b:00007f40dc457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.063496][T21997] RAX: ffffffffffffffda RBX: 00007f40de015fa0 RCX: 00007f40dddee929 [ 341.063581][T21997] RDX: 0000000000004004 RSI: 0000200000000440 RDI: 0000000000000003 [ 341.063597][T21997] RBP: 00007f40dc457090 R08: 0000000000000000 R09: 0000000000000000 [ 341.063614][T21997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.063653][T21997] R13: 0000000000000000 R14: 00007f40de015fa0 R15: 00007ffdc4173ad8 [ 341.063677][T21997] [ 341.350957][T21999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6731'. [ 341.360026][T21999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6731'. [ 341.369072][T21999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6731'. [ 341.378427][T21999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6731'. [ 341.387466][T21999] netlink: 'syz.4.6731': attribute type 6 has an invalid length. [ 341.396490][T22001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22001 comm=syz.1.6732 [ 341.409132][T22001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=22001 comm=syz.1.6732 [ 341.426492][T22001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6732'. [ 341.469797][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 341.469809][ T29] audit: type=1400 audit(2000000212.610:22377): avc: denied { create } for pid=22002 comm="syz.4.6733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 341.500931][T22010] loop4: detected capacity change from 0 to 1024 [ 341.510246][T22010] EXT4-fs: Ignoring removed mblk_io_submit option [ 341.517124][T22010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.526743][T22010] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 341.537875][T22013] lo speed is unknown, defaulting to 1000 [ 341.538398][T22010] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.6733: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 341.562548][T22010] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6733: couldn't read orphan inode 11 (err -117) [ 341.576187][T22010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.590641][ T29] audit: type=1400 audit(2000000212.730:22378): avc: denied { mount } for pid=22002 comm="syz.4.6733" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 341.613288][T22010] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6733: Invalid block bitmap block 0 in block_group 0 [ 341.613657][ T29] audit: type=1400 audit(2000000212.730:22379): avc: denied { add_name } for pid=22002 comm="syz.4.6733" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.631038][T22010] Quota error (device loop4): write_blk: dquota write failed [ 341.648381][ T29] audit: type=1400 audit(2000000212.730:22380): avc: denied { create } for pid=22002 comm="syz.4.6733" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 341.655939][T22010] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 341.687003][T22010] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6733: Failed to acquire dquot type 0 [ 341.847923][T22023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6739'. [ 341.856967][T22023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6739'. [ 341.867644][T22023] netlink: 'syz.0.6739': attribute type 6 has an invalid length. [ 341.876294][ T29] audit: type=1400 audit(2000000213.020:22381): avc: denied { name_bind } for pid=22020 comm="syz.1.6738" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 341.901777][ T29] audit: type=1400 audit(2000000213.020:22382): avc: denied { node_bind } for pid=22020 comm="syz.1.6738" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 341.932728][ T29] audit: type=1400 audit(2000000213.070:22383): avc: denied { open } for pid=22025 comm="syz.0.6740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 341.952200][ T29] audit: type=1400 audit(2000000213.070:22384): avc: denied { kernel } for pid=22025 comm="syz.0.6740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 342.256047][T20697] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.276971][T22036] netlink: 'syz.4.6744': attribute type 6 has an invalid length. [ 342.298516][T22038] FAULT_INJECTION: forcing a failure. [ 342.298516][T22038] name failslab, interval 1, probability 0, space 0, times 0 [ 342.311169][T22038] CPU: 1 UID: 0 PID: 22038 Comm: syz.4.6745 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 342.311190][T22038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.311210][T22038] Call Trace: [ 342.311214][T22038] [ 342.311220][T22038] __dump_stack+0x1d/0x30 [ 342.311237][T22038] dump_stack_lvl+0xe8/0x140 [ 342.311251][T22038] dump_stack+0x15/0x1b [ 342.311263][T22038] should_fail_ex+0x265/0x280 [ 342.311334][T22038] should_failslab+0x8c/0xb0 [ 342.311352][T22038] __kmalloc_noprof+0xa5/0x3e0 [ 342.311444][T22038] ? cond_policydb_dup+0xa3/0x4e0 [ 342.311469][T22038] cond_policydb_dup+0xa3/0x4e0 [ 342.311565][T22038] ? __tsan_memcpy+0x38d/0x3c0 [ 342.311586][T22038] security_set_bools+0xa0/0x340 [ 342.311657][T22038] sel_commit_bools_write+0x1ea/0x270 [ 342.311681][T22038] vfs_writev+0x403/0x8b0 [ 342.311723][T22038] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 342.311752][T22038] ? mutex_lock+0xd/0x30 [ 342.311902][T22038] do_writev+0xe7/0x210 [ 342.311921][T22038] __x64_sys_writev+0x45/0x50 [ 342.311936][T22038] x64_sys_call+0x2006/0x2fb0 [ 342.312009][T22038] do_syscall_64+0xd2/0x200 [ 342.312022][T22038] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 342.312043][T22038] ? clear_bhb_loop+0x40/0x90 [ 342.312058][T22038] ? clear_bhb_loop+0x40/0x90 [ 342.312075][T22038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.312153][T22038] RIP: 0033:0x7fdd3a42e929 [ 342.312165][T22038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.312178][T22038] RSP: 002b:00007fdd38a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 342.312192][T22038] RAX: ffffffffffffffda RBX: 00007fdd3a655fa0 RCX: 00007fdd3a42e929 [ 342.312223][T22038] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000003 [ 342.312233][T22038] RBP: 00007fdd38a97090 R08: 0000000000000000 R09: 0000000000000000 [ 342.312242][T22038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.312251][T22038] R13: 0000000000000000 R14: 00007fdd3a655fa0 R15: 00007ffe2d7678f8 [ 342.312265][T22038] [ 342.538179][T22040] netlink: 'syz.2.6746': attribute type 1 has an invalid length. [ 342.767533][T22059] ================================================================== [ 342.775644][T22059] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 342.782343][T22059] [ 342.784680][T22059] write to 0xffff88810626b208 of 8 bytes by task 22060 on cpu 1: [ 342.792417][T22059] call_rcu+0x51/0x3f0 [ 342.796495][T22059] mas_replace_node+0x2e7/0x410 [ 342.801352][T22059] mas_wr_store_entry+0x2406/0x2b50 [ 342.806564][T22059] mas_store_prealloc+0x74d/0x9e0 [ 342.811604][T22059] vma_iter_store_new+0x1c5/0x200 [ 342.816636][T22059] mmap_region+0x102c/0x1580 [ 342.821271][T22059] do_mmap+0x9b3/0xbe0 [ 342.825353][T22059] vm_mmap_pgoff+0x17a/0x2e0 [ 342.829948][T22059] ksys_mmap_pgoff+0xc2/0x310 [ 342.834639][T22059] x64_sys_call+0x1602/0x2fb0 [ 342.839321][T22059] do_syscall_64+0xd2/0x200 [ 342.843832][T22059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.849736][T22059] [ 342.852061][T22059] read to 0xffff88810626b208 of 8 bytes by task 22059 on cpu 0: [ 342.859711][T22059] mas_state_walk+0x28f/0x650 [ 342.864398][T22059] mas_walk+0x30/0x120 [ 342.868473][T22059] lock_vma_under_rcu+0xa2/0x2f0 [ 342.873422][T22059] do_user_addr_fault+0x233/0x1090 [ 342.878553][T22059] exc_page_fault+0x62/0xa0 [ 342.883081][T22059] asm_exc_page_fault+0x26/0x30 [ 342.887938][T22059] [ 342.890260][T22059] value changed: 0x0000555581c83fff -> 0x0000000000000000 [ 342.897362][T22059] [ 342.899684][T22059] Reported by Kernel Concurrency Sanitizer on: [ 342.905832][T22059] CPU: 0 UID: 0 PID: 22059 Comm: syz.0.6755 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 342.916592][T22059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.926651][T22059] ==================================================================