last executing test programs: 1m20.332717145s ago: executing program 32 (id=26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000340)=0x1, 0x12) 56.642151204s ago: executing program 33 (id=445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202, r1}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) 55.49714817s ago: executing program 2 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2502000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) 55.49286787s ago: executing program 2 (id=460): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) fcntl$dupfd(r0, 0x0, r0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) 54.960132761s ago: executing program 5 (id=475): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}]}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 54.847700758s ago: executing program 5 (id=477): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000080)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 54.622110341s ago: executing program 2 (id=481): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x8, 0x0) 54.46872059s ago: executing program 2 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 54.46633864s ago: executing program 2 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}, {&(0x7f0000000300)="0109da00", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 54.29978283s ago: executing program 6 (id=446): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 54.249851772s ago: executing program 5 (id=487): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 53.990667428s ago: executing program 2 (id=491): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x2, 0xfffffffd}, 0xc) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 53.971038579s ago: executing program 34 (id=491): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x2, 0xfffffffd}, 0xc) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 53.660835707s ago: executing program 6 (id=493): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 53.659452977s ago: executing program 5 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 53.572461002s ago: executing program 5 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendfile(0xffffffffffffffff, r1, 0x0, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r3}) socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086}) 53.493867446s ago: executing program 6 (id=497): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c1f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xb, 0x7, {0x7, 0x6, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 53.389078883s ago: executing program 5 (id=498): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)='u\b', 0x2}], 0x1}}], 0x1, 0x20008000) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e40)=""/182, 0xb6}], 0x1}, 0x61}], 0x1, 0x140, 0x0) 53.388953523s ago: executing program 35 (id=498): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)='u\b', 0x2}], 0x1}}], 0x1, 0x20008000) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e40)=""/182, 0xb6}], 0x1}, 0x61}], 0x1, 0x140, 0x0) 52.92678512s ago: executing program 6 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 52.890256722s ago: executing program 6 (id=507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 49.400247935s ago: executing program 6 (id=528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x24}}, 0x0) 49.400136565s ago: executing program 36 (id=528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x24}}, 0x0) 39.826908572s ago: executing program 3 (id=592): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 39.630707014s ago: executing program 3 (id=594): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) 38.65311391s ago: executing program 3 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) dup(0xffffffffffffffff) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, &(0x7f0000000440)=0xfffffffffffffee7) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000001080)=""/5, 0x5) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) io_setup(0xd, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800008100000086dd60ff690b00482f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000800301ff000b00000800000086dd080088be00000000100000000100000000"], 0x0) 38.14898669s ago: executing program 3 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 38.110109952s ago: executing program 3 (id=609): r0 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) 37.664697708s ago: executing program 7 (id=612): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x4) 37.363008196s ago: executing program 7 (id=614): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 37.258222892s ago: executing program 7 (id=617): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000f14010025bd7000fcdbdf25080001000200000008000300040000000c00450069625f737270740008000300030000000800030001"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0xc0) 37.189205225s ago: executing program 3 (id=618): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x2, 0x4, 0x3, 0xff, 0x1, 0x4, 0xb6, 0x4, 0x2, 0x2, 0x65, 0xf1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000006c0)={r1, 0x80000000}, &(0x7f0000000640)=0x8) 37.183025596s ago: executing program 7 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 37.163239047s ago: executing program 37 (id=618): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x2, 0x4, 0x3, 0xff, 0x1, 0x4, 0xb6, 0x4, 0x2, 0x2, 0x65, 0xf1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000006c0)={r1, 0x80000000}, &(0x7f0000000640)=0x8) 37.149556188s ago: executing program 7 (id=622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x62, 0xfd4c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffff01, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000480)='nfs\x00', 0x800, 0x0) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, r0) 36.884858573s ago: executing program 7 (id=625): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x884c}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2b, 0x3c, 0x64, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010100}, @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x1, 0xa, 0x2, 0x2, 0x16, 0x0, 0x3, 0x6, 0x1, 0x2, 0xfff, 0x4, 0x3, 0x4e21, 0x4e24}, 0x4, 0x4}, 0x3, 0x3}}}}}}}}, 0x52) 36.813234927s ago: executing program 38 (id=625): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x884c}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2b, 0x3c, 0x64, 0x0, 0x3, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010100}, @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x1, 0xa, 0x2, 0x2, 0x16, 0x0, 0x3, 0x6, 0x1, 0x2, 0xfff, 0x4, 0x3, 0x4e21, 0x4e24}, 0x4, 0x4}, 0x3, 0x3}}}}}}}}, 0x52) 1.480540094s ago: executing program 0 (id=1652): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db", 0xd}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 1.352332791s ago: executing program 0 (id=1656): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0x1d}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.109042575s ago: executing program 0 (id=1665): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x20000051) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff25000080", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.075982657s ago: executing program 0 (id=1669): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c00188008000140a000000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c000280050001000000000004001640"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000010400000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000000000"], 0x119c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb724605853bfd3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 933.231725ms ago: executing program 0 (id=1678): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006) 892.703288ms ago: executing program 1 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000000c}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000884}, 0x40) 820.951432ms ago: executing program 1 (id=1687): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 694.590279ms ago: executing program 1 (id=1696): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000200)=@raw=[@tail_call], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0xe, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 658.584631ms ago: executing program 9 (id=1697): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[], 0x254}}, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x20000040) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d00001c000000000000000000050005000600000000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000200120002000200bb6b6e000000000006003200000000000000000000000000fe880000000000000000000000000001fc010000000000"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x800c054}, 0x41) mount$bpf(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x18028, &(0x7f0000000a80)={[{}, {@gid}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x80}}, {}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_lt}, {@euid_gt}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x818) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 609.063015ms ago: executing program 1 (id=1698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000000c}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000884}, 0x40) 608.663015ms ago: executing program 8 (id=1700): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 605.166295ms ago: executing program 1 (id=1701): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b02300ffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 586.300726ms ago: executing program 8 (id=1702): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r0, 0x24, 0x0, 0xda, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 520.69774ms ago: executing program 1 (id=1704): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 520.56764ms ago: executing program 8 (id=1705): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x974b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x20, 0x3fa, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x20}, 0x1, 0x0, 0x0, 0x40031}, 0x48010) 504.468821ms ago: executing program 9 (id=1706): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007e58cae52067e3835502db7f224e8b6ef27ab970f02643a2fbea980670fd6e0507456bd1e89d"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 484.844022ms ago: executing program 9 (id=1707): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xa6820000}, 0x0) 463.232383ms ago: executing program 9 (id=1708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x31}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 417.306455ms ago: executing program 9 (id=1710): socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0x80}, 0x114895, 0x4, 0xfffffffd, 0x1, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) 393.588337ms ago: executing program 8 (id=1713): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x400, 0x7, 0xffffffff, 0x3, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x1, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x14}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x2e, 0x2e, 0x1e]}}, 0x0, 0x32}, 0x28) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) 334.806761ms ago: executing program 9 (id=1715): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) 334.49833ms ago: executing program 4 (id=1716): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788", 0x14}], 0x1}, 0x0) 312.583652ms ago: executing program 4 (id=1717): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007e58cae52067e3835502db7f224e8b6ef27ab970f02643a2fbea980670fd6e0507456bd1e89d"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 277.853694ms ago: executing program 4 (id=1718): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0x9f}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}, {&(0x7f0000000300)="0109da00", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 276.978753ms ago: executing program 4 (id=1719): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/143, 0x8f}], 0x1}, 0x2) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)="43fa", 0x2}], 0x1}, 0x8801) socket$kcm(0xa, 0x1, 0x0) 263.543435ms ago: executing program 8 (id=1720): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 206.016748ms ago: executing program 8 (id=1721): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc020c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff273, 0xfffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) getpid() r7 = socket$kcm(0x2c, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(r7, 0x11b, 0x2, &(0x7f0000000900)=r6, 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0xd, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x5}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x0, 0x2, 0x5, 0x10, 0xfb, 0xd, 0x9, 0x8, 0xc, 0x5, 0xc, 0xd, 0x9, 0x4, 0x3, 0xd], 0x1, [0x1fd, 0xc, 0x97e8, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x8, 0x2e, 0x5, 0x3, 0xfffc, 0x6, 0x6, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0x614, 0x3, 0x3, 0x48a2, 0xffff, 0x7, 0x5, 0x1, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) 89.903025ms ago: executing program 4 (id=1722): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 85.622965ms ago: executing program 4 (id=1723): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x1, r0, 0xb) fstat(0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, 0x0, 0x20) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x100) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x2004c8c0) 0s ago: executing program 0 (id=1724): openat$tun(0xffffffffffffff9c, 0x0, 0x280000, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) kernel console output (not intermixed with test programs): R08: 0000000000000000 R09: 0000000000000000 [ 42.937729][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.937770][ T4055] R13: 00007f2ea4006038 R14: 00007f2ea4005fa0 R15: 00007ffc11503c68 [ 42.937843][ T4055] [ 42.937872][ T4055] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 42.960534][ T29] audit: type=1326 audit(1769603173.838:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.5.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea3d8aeb9 code=0x7ffc0000 [ 42.970133][ T4055] audit: out of memory in audit_log_start [ 42.980225][ T29] audit: type=1326 audit(1769603173.838:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.5.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea3d8aeb9 code=0x7ffc0000 [ 43.090210][ T4056] lo speed is unknown, defaulting to 1000 [ 43.093592][ T29] audit: type=1326 audit(1769603173.838:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.5.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ea3d8aeb9 code=0x7ffc0000 [ 43.258284][ T29] audit: type=1326 audit(1769603173.838:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.5.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ea3d4b78e code=0x7ffc0000 [ 43.282050][ T29] audit: type=1326 audit(1769603173.838:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.5.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2ea3d4b78e code=0x7ffc0000 [ 43.305244][ T29] audit: type=1326 audit(1769603173.838:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4054 comm="syz.5.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2ea3d8aeb9 code=0x7ffc0000 [ 43.415130][ T4037] syz.0.153 (4037) used greatest stack depth: 9944 bytes left [ 43.438892][ T4069] syz.3.162 uses obsolete (PF_INET,SOCK_PACKET) [ 43.453213][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 43.468607][ T4071] set_capacity_and_notify: 5 callbacks suppressed [ 43.468620][ T4071] loop2: detected capacity change from 0 to 1764 [ 43.490593][ T4071] process 'syz.2.161' launched '/dev/fd/4' with NULL argv: empty string added [ 43.513245][ T4075] __nla_validate_parse: 1 callbacks suppressed [ 43.513257][ T4075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.163'. [ 43.538486][ T4075] ip6tnl1: entered allmulticast mode [ 43.566085][ T4071] syz.2.161: attempt to access beyond end of device [ 43.566085][ T4071] loop2: rw=8388608, sector=6845104252, nr_sectors = 4 limit=1764 [ 43.580680][ T4071] Buffer I/O error on dev loop2, logical block 1711276063, async page read [ 43.593455][ T4071] syz.2.161: attempt to access beyond end of device [ 43.593455][ T4071] loop2: rw=8388608, sector=6845104252, nr_sectors = 4 limit=1764 [ 43.607801][ T4071] Buffer I/O error on dev loop2, logical block 1711276063, async page read [ 43.646192][ T4083] loop3: detected capacity change from 0 to 512 [ 43.663929][ T4081] loop5: detected capacity change from 0 to 512 [ 43.671847][ T4083] EXT4-fs: Invalid want_extra_isize 252 [ 43.689042][ T4081] EXT4-fs: Ignoring removed nobh option [ 43.706742][ T4081] ------------[ cut here ]------------ [ 43.712288][ T4081] EA inode 11 i_nlink=1026 [ 43.712312][ T4081] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.5.168/4081 [ 43.727386][ T4081] Modules linked in: [ 43.731361][ T4081] CPU: 1 UID: 0 PID: 4081 Comm: syz.5.168 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.741057][ T4081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.751155][ T4081] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 43.757880][ T4081] Code: c4 e7 9a ff 4c 8d 2d 5d 22 3e 05 49 8d 7e 40 e8 d4 d1 b6 ff 49 8b 6e 40 4c 89 e7 e8 08 cd b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f d3 d0 03 66 66 66 66 66 66 2e [ 43.777551][ T4081] RSP: 0018:ffffc9000127f5a8 EFLAGS: 00010246 [ 43.783656][ T4081] RAX: ffff88811b600a90 RBX: ffff888107e8f220 RCX: ffffffff81be1808 [ 43.791698][ T4081] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff86fc3a50 [ 43.799749][ T4081] RBP: 000000000000000b R08: 0001888107e8f1d3 R09: 0000000000000000 [ 43.807751][ T4081] R10: ffffc9000127f4d8 R11: 0001c9000127f4d8 R12: ffff888107e8f1d0 [ 43.815871][ T4081] R13: ffffffff86fc3a50 R14: ffff888107e8f188 R15: 0000000000000001 [ 43.823898][ T4081] FS: 00007f2ea27e76c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 43.832960][ T4081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.839565][ T4081] CR2: 00007f9acc6b6000 CR3: 000000011be1a000 CR4: 00000000003506f0 [ 43.847591][ T4081] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 43.855610][ T4081] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 43.863635][ T4081] Call Trace: [ 43.866938][ T4081] [ 43.870048][ T4081] ext4_xattr_set_entry+0x77c/0x1010 [ 43.875392][ T4081] ext4_xattr_ibody_set+0x184/0x3c0 [ 43.880671][ T4081] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 43.886545][ T4081] __ext4_expand_extra_isize+0x246/0x280 [ 43.892316][ T4081] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 43.897842][ T4081] ext4_evict_inode+0x7c3/0xd40 [ 43.903662][ T4081] ? __pfx_ext4_evict_inode+0x10/0x10 [ 43.909673][ T4081] evict+0x2af/0x510 [ 43.913631][ T4081] ? __dquot_initialize+0x146/0x7c0 [ 43.918902][ T4081] iput+0x4b9/0x650 [ 43.922740][ T4081] ext4_process_orphan+0x1a9/0x1c0 [ 43.927969][ T4081] ext4_orphan_cleanup+0x6a8/0xa00 [ 43.933223][ T4081] ext4_fill_super+0x3476/0x3800 [ 43.938282][ T4081] ? set_blocksize+0x1a3/0x310 [ 43.943123][ T4081] ? setup_bdev_super+0x30e/0x370 [ 43.948198][ T4081] ? __pfx_ext4_fill_super+0x10/0x10 [ 43.953528][ T4081] get_tree_bdev_flags+0x291/0x300 [ 43.958761][ T4081] ? __pfx_ext4_fill_super+0x10/0x10 [ 43.964093][ T4081] get_tree_bdev+0x1f/0x30 [ 43.968571][ T4081] ext4_get_tree+0x1c/0x30 [ 43.973077][ T4081] vfs_get_tree+0x57/0x1d0 [ 43.975778][ T4099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 43.977582][ T4081] do_new_mount+0x288/0x700 [ 43.991010][ T4081] path_mount+0x4d0/0xbc0 [ 43.995453][ T4081] ? user_path_at+0xbf/0x130 [ 44.000187][ T4081] __se_sys_mount+0x28c/0x2e0 [ 44.004901][ T4081] __x64_sys_mount+0x67/0x80 [ 44.009684][ T4081] x64_sys_call+0x2cca/0x3000 [ 44.014403][ T4081] do_syscall_64+0xc0/0x2a0 [ 44.019048][ T4081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.025057][ T4081] RIP: 0033:0x7f2ea3d8c14a [ 44.029541][ T4081] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.049226][ T4081] RSP: 002b:00007f2ea27e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.057686][ T4081] RAX: ffffffffffffffda RBX: 00007f2ea27e6ee0 RCX: 00007f2ea3d8c14a [ 44.065761][ T4081] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f2ea27e6ea0 [ 44.073883][ T4081] RBP: 0000200000000180 R08: 00007f2ea27e6ee0 R09: 0000000000800718 [ 44.081894][ T4081] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 44.089923][ T4081] R13: 00007f2ea27e6ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 44.097939][ T4081] [ 44.101006][ T4081] ---[ end trace 0000000000000000 ]--- [ 44.142959][ T4103] loop2: detected capacity change from 0 to 128 [ 44.145000][ T4081] EXT4-fs (loop5): 1 orphan inode deleted [ 44.162926][ T4081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.190407][ T4103] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 44.208509][ T4103] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.242081][ T3566] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.298628][ T4115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 44.318108][ T4117] loop0: detected capacity change from 0 to 128 [ 44.327359][ T4103] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.331378][ T4117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.349996][ T4117] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 44.353545][ T3304] udevd[3304]: incorrect ext4 checksum on /dev/loop0 [ 44.435028][ T4127] loop0: detected capacity change from 0 to 512 [ 44.457568][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.475408][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.488050][ T4127] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.519293][ T4140] FAULT_INJECTION: forcing a failure. [ 44.519293][ T4140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.532510][ T4140] CPU: 0 UID: 0 PID: 4140 Comm: syz.3.184 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 44.532598][ T4140] Tainted: [W]=WARN [ 44.532606][ T4140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.532759][ T4140] Call Trace: [ 44.532769][ T4140] [ 44.532779][ T4140] __dump_stack+0x1d/0x30 [ 44.532811][ T4140] dump_stack_lvl+0x95/0xd0 [ 44.532839][ T4140] dump_stack+0x15/0x1b [ 44.532865][ T4140] should_fail_ex+0x263/0x280 [ 44.532947][ T4140] should_fail+0xb/0x20 [ 44.532983][ T4140] should_fail_usercopy+0x1a/0x20 [ 44.533020][ T4140] _copy_to_user+0x20/0xa0 [ 44.533067][ T4140] simple_read_from_buffer+0xb5/0x130 [ 44.533115][ T4140] proc_fail_nth_read+0x10e/0x150 [ 44.533153][ T4140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.533242][ T4140] vfs_read+0x1ab/0x7f0 [ 44.533266][ T4140] ? __schedule+0x82d/0xc90 [ 44.533283][ T4140] ? __rcu_read_unlock+0x4e/0x70 [ 44.533315][ T4140] ? __fget_files+0x184/0x1c0 [ 44.533344][ T4140] ? mutex_lock+0x57/0x90 [ 44.533372][ T4140] ksys_read+0xdc/0x1a0 [ 44.533449][ T4140] __x64_sys_read+0x40/0x50 [ 44.533473][ T4140] x64_sys_call+0x2889/0x3000 [ 44.533504][ T4140] do_syscall_64+0xc0/0x2a0 [ 44.533533][ T4140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.533664][ T4140] RIP: 0033:0x7f37d185b78e [ 44.533681][ T4140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.533704][ T4140] RSP: 002b:00007f37d02f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.533725][ T4140] RAX: ffffffffffffffda RBX: 00007f37d02f76c0 RCX: 00007f37d185b78e [ 44.533739][ T4140] RDX: 000000000000000f RSI: 00007f37d02f70a0 RDI: 0000000000000005 [ 44.533751][ T4140] RBP: 00007f37d02f7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.533840][ T4140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.533856][ T4140] R13: 00007f37d1b16038 R14: 00007f37d1b15fa0 R15: 00007ffe951a81b8 [ 44.533962][ T4140] [ 44.751960][ T4142] loop5: detected capacity change from 0 to 1024 [ 44.776185][ T4142] EXT4-fs: inline encryption not supported [ 44.828589][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.860754][ T4142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.060413][ T3566] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.155328][ T4160] loop3: detected capacity change from 0 to 1764 [ 45.206221][ T4167] syz.0.193 (4167) used greatest stack depth: 9176 bytes left [ 45.256791][ T4176] netlink: 'syz.3.195': attribute type 4 has an invalid length. [ 45.264678][ T4176] netlink: 168 bytes leftover after parsing attributes in process `syz.3.195'. [ 45.303494][ T4176] loop3: detected capacity change from 0 to 512 [ 45.327841][ T4176] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.195: inode has both inline data and extents flags [ 45.356798][ T4176] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.195: couldn't read orphan inode 15 (err -117) [ 45.377268][ T4176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.394067][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 45.410621][ T4171] netlink: 'syz.1.196': attribute type 31 has an invalid length. [ 45.469637][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.542838][ T4185] loop1: detected capacity change from 0 to 256 [ 45.568528][ T4185] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.739280][ T4194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 45.758542][ T4196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 45.780918][ T4196] team1: entered promiscuous mode [ 45.785982][ T4196] team1: entered allmulticast mode [ 45.803551][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 45.821881][ T4196] 8021q: adding VLAN 0 to HW filter on device team1 [ 45.904015][ T4203] lo speed is unknown, defaulting to 1000 [ 45.935270][ T4208] netlink: 'syz.5.209': attribute type 4 has an invalid length. [ 45.943055][ T4208] netlink: 168 bytes leftover after parsing attributes in process `syz.5.209'. [ 45.973618][ T4208] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.209: inode has both inline data and extents flags [ 45.993886][ T4211] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=4211 comm=syz.2.210 [ 46.008265][ T4208] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.209: couldn't read orphan inode 15 (err -117) [ 46.029947][ T4208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.061440][ T4208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.209'. [ 46.129890][ T3566] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.131486][ T4215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.161181][ T4215] Illegal XDP return value 4294967274 on prog (id 83) dev N/A, expect packet loss! [ 46.209473][ T4223] FAULT_INJECTION: forcing a failure. [ 46.209473][ T4223] name failslab, interval 1, probability 0, space 0, times 0 [ 46.222296][ T4223] CPU: 1 UID: 0 PID: 4223 Comm: syz.5.212 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 46.222331][ T4223] Tainted: [W]=WARN [ 46.222340][ T4223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.222400][ T4223] Call Trace: [ 46.222406][ T4223] [ 46.222413][ T4223] __dump_stack+0x1d/0x30 [ 46.222439][ T4223] dump_stack_lvl+0x95/0xd0 [ 46.222484][ T4223] dump_stack+0x15/0x1b [ 46.222565][ T4223] should_fail_ex+0x263/0x280 [ 46.222593][ T4223] should_failslab+0x8c/0xb0 [ 46.222619][ T4223] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 46.222646][ T4223] ? security_context_to_sid_core+0x69/0x440 [ 46.222741][ T4223] kmemdup_nul+0x36/0xc0 [ 46.222761][ T4223] security_context_to_sid_core+0x69/0x440 [ 46.222784][ T4223] ? avc_has_perm_noaudit+0xab/0x130 [ 46.222891][ T4223] security_context_to_sid+0x2e/0x40 [ 46.222914][ T4223] selinux_lsm_setattr+0x2da/0x660 [ 46.222942][ T4223] selinux_setprocattr+0x4f/0x70 [ 46.223005][ T4223] security_setprocattr+0x1a7/0x1d0 [ 46.223058][ T4223] proc_pid_attr_write+0x1ea/0x220 [ 46.223125][ T4223] vfs_writev+0x42b/0x900 [ 46.223187][ T4223] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 46.223220][ T4223] do_writev+0xe9/0x210 [ 46.223246][ T4223] __x64_sys_writev+0x45/0x50 [ 46.223266][ T4223] x64_sys_call+0x1ba5/0x3000 [ 46.223314][ T4223] do_syscall_64+0xc0/0x2a0 [ 46.223342][ T4223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.223362][ T4223] RIP: 0033:0x7f2ea3d8aeb9 [ 46.223423][ T4223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.223536][ T4223] RSP: 002b:00007f2ea27e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 46.223555][ T4223] RAX: ffffffffffffffda RBX: 00007f2ea4005fa0 RCX: 00007f2ea3d8aeb9 [ 46.223567][ T4223] RDX: 0000000000000001 RSI: 00002000000009c0 RDI: 0000000000000003 [ 46.223596][ T4223] RBP: 00007f2ea27e7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.223607][ T4223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.223624][ T4223] R13: 00007f2ea4006038 R14: 00007f2ea4005fa0 R15: 00007ffc11503c68 [ 46.223642][ T4223] [ 46.487502][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.510150][ T4230] SELinux: Context ñà is not valid (left unmapped). [ 46.517396][ T4228] x_tables: duplicate underflow at hook 1 [ 46.620357][ T4234] netlink: 'syz.5.219': attribute type 13 has an invalid length. [ 46.643011][ T4238] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.221: inode has both inline data and extents flags [ 46.708145][ T4242] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 46.739571][ T4238] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.221: couldn't read orphan inode 15 (err -117) [ 46.776065][ T4242] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.222: inode has both inline data and extents flags [ 46.798038][ T4240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.816825][ T4242] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.222: couldn't read orphan inode 15 (err -117) [ 46.829514][ T4238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.850645][ T4242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.863465][ T4234] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.870810][ T4234] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.014913][ T4234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.028298][ T4234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.156904][ T37] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.165831][ T37] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.218174][ T37] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.243197][ T3566] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.275562][ T4257] bridge0: entered promiscuous mode [ 47.298889][ T4257] bridge0: port 3(vlan2) entered blocking state [ 47.305291][ T4257] bridge0: port 3(vlan2) entered disabled state [ 47.353654][ T4268] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 47.353758][ T4257] vlan2: entered allmulticast mode [ 47.366591][ T4257] bridge0: entered allmulticast mode [ 47.372303][ T4269] netlink: 'syz.5.225': attribute type 1 has an invalid length. [ 47.402173][ T4257] vlan2: left allmulticast mode [ 47.407266][ T4257] bridge0: left allmulticast mode [ 47.423744][ T4257] bridge0: left promiscuous mode [ 47.430151][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.460708][ T37] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.500612][ T4268] bond1: entered promiscuous mode [ 47.505686][ T4268] bond1: entered allmulticast mode [ 47.525908][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.556368][ T4268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.598473][ T4269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.611618][ T4276] bond1: (slave geneve2): making interface the new active one [ 47.626347][ T4276] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 47.640406][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.685182][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.708978][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.718028][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.731090][ T4292] 9pnet_fd: Insufficient options for proto=fd [ 47.882649][ T4312] netlink: 'syz.3.237': attribute type 4 has an invalid length. [ 47.899167][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 47.899184][ T29] audit: type=1400 audit(1769603178.820:1231): avc: denied { read } for pid=4313 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.944348][ T4312] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.237: inode has both inline data and extents flags [ 47.962489][ T29] audit: type=1400 audit(1769603178.820:1232): avc: denied { open } for pid=4313 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.991440][ T4312] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.237: couldn't read orphan inode 15 (err -117) [ 48.039658][ T4312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.076452][ T29] audit: type=1400 audit(1769603178.990:1233): avc: denied { create } for pid=4307 comm="dhcpcd-run-hook" name="resolv.conf.eth4.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.099186][ T29] audit: type=1400 audit(1769603178.990:1234): avc: denied { write } for pid=4307 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=2127 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.125640][ T29] audit: type=1400 audit(1769603178.990:1235): avc: denied { append } for pid=4307 comm="dhcpcd-run-hook" name="resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=2127 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.165233][ T29] audit: type=1400 audit(1769603179.080:1236): avc: denied { add_name } for pid=4309 comm="syz.3.237" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.205215][ T29] audit: type=1400 audit(1769603179.120:1237): avc: denied { unlink } for pid=4324 comm="rm" name="resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=2127 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.263990][ T29] audit: type=1400 audit(1769603179.120:1238): avc: denied { connect } for pid=4325 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.290543][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.301394][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.469305][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.503660][ T4340] IPv6: sit1: Disabled Multicast RS [ 48.518290][ T4342] bridge_slave_1: default FDB implementation only supports local addresses [ 48.537272][ T4340] FAULT_INJECTION: forcing a failure. [ 48.537272][ T4340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.550414][ T4340] CPU: 1 UID: 0 PID: 4340 Comm: syz.2.243 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 48.550502][ T4340] Tainted: [W]=WARN [ 48.550510][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.550526][ T4340] Call Trace: [ 48.550599][ T4340] [ 48.550608][ T4340] __dump_stack+0x1d/0x30 [ 48.550650][ T4340] dump_stack_lvl+0x95/0xd0 [ 48.550677][ T4340] dump_stack+0x15/0x1b [ 48.550702][ T4340] should_fail_ex+0x263/0x280 [ 48.550852][ T4340] should_fail+0xb/0x20 [ 48.550890][ T4340] should_fail_usercopy+0x1a/0x20 [ 48.550932][ T4340] _copy_from_user+0x1c/0xb0 [ 48.551004][ T4340] __sys_sendto+0x1ca/0x4d0 [ 48.551052][ T4340] __x64_sys_sendto+0x76/0x90 [ 48.551144][ T4340] x64_sys_call+0x29a7/0x3000 [ 48.551169][ T4340] do_syscall_64+0xc0/0x2a0 [ 48.551235][ T4340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.551264][ T4340] RIP: 0033:0x7f3cd92faeb9 [ 48.551284][ T4340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.551307][ T4340] RSP: 002b:00007f3cd7d57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 48.551369][ T4340] RAX: ffffffffffffffda RBX: 00007f3cd9575fa0 RCX: 00007f3cd92faeb9 [ 48.551383][ T4340] RDX: 0000000000000028 RSI: 0000200000000600 RDI: 0000000000000003 [ 48.551400][ T4340] RBP: 00007f3cd7d57090 R08: 0000200000000200 R09: 0000000000000014 [ 48.551419][ T4340] R10: 0000000000040890 R11: 0000000000000246 R12: 0000000000000001 [ 48.551504][ T4340] R13: 00007f3cd9576038 R14: 00007f3cd9575fa0 R15: 00007ffe17055dc8 [ 48.551530][ T4340] [ 48.774901][ T29] audit: type=1400 audit(1769603179.690:1239): avc: denied { bind } for pid=4352 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.003283][ T4369] netlink: 'syz.2.252': attribute type 4 has an invalid length. [ 49.011033][ T4369] __nla_validate_parse: 4 callbacks suppressed [ 49.011054][ T4369] netlink: 168 bytes leftover after parsing attributes in process `syz.2.252'. [ 49.038159][ T29] audit: type=1400 audit(1769603179.961:1240): avc: denied { append } for pid=4368 comm="syz.5.253" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.079865][ T4369] set_capacity_and_notify: 8 callbacks suppressed [ 49.079884][ T4369] loop2: detected capacity change from 0 to 512 [ 49.119697][ T4369] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.252: inode has both inline data and extents flags [ 49.214503][ T4369] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.252: couldn't read orphan inode 15 (err -117) [ 49.252532][ T4369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.538224][ T4401] loop0: detected capacity change from 0 to 736 [ 49.784336][ T4358] syz.3.249 (4358) used greatest stack depth: 6296 bytes left [ 49.853288][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.897172][ T4418] bridge_slave_1: default FDB implementation only supports local addresses [ 49.940436][ T4414] loop1: detected capacity change from 0 to 8192 [ 49.999368][ T4421] loop3: detected capacity change from 0 to 8192 [ 50.018312][ T4437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=4437 comm=syz.0.266 [ 50.057876][ T4414] FAULT_INJECTION: forcing a failure. [ 50.057876][ T4414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.071107][ T4414] CPU: 1 UID: 0 PID: 4414 Comm: syz.1.260 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 50.071217][ T4414] Tainted: [W]=WARN [ 50.071226][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.071307][ T4414] Call Trace: [ 50.071315][ T4414] [ 50.071324][ T4414] __dump_stack+0x1d/0x30 [ 50.071350][ T4414] dump_stack_lvl+0x95/0xd0 [ 50.071369][ T4414] dump_stack+0x15/0x1b [ 50.071440][ T4414] should_fail_ex+0x263/0x280 [ 50.071476][ T4414] should_fail+0xb/0x20 [ 50.071555][ T4414] should_fail_usercopy+0x1a/0x20 [ 50.071592][ T4414] strncpy_from_user+0x27/0x250 [ 50.071624][ T4414] getname_flags+0xad/0x3b0 [ 50.071653][ T4414] __x64_sys_mkdirat+0x40/0x60 [ 50.071671][ T4414] x64_sys_call+0x30c/0x3000 [ 50.071697][ T4414] do_syscall_64+0xc0/0x2a0 [ 50.071728][ T4414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.071755][ T4414] RIP: 0033:0x7f772463aeb9 [ 50.071774][ T4414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.071819][ T4414] RSP: 002b:00007f7723097028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 50.071844][ T4414] RAX: ffffffffffffffda RBX: 00007f77248b5fa0 RCX: 00007f772463aeb9 [ 50.071862][ T4414] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 50.071879][ T4414] RBP: 00007f7723097090 R08: 0000000000000000 R09: 0000000000000000 [ 50.071894][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.072026][ T4414] R13: 00007f77248b6038 R14: 00007f77248b5fa0 R15: 00007fff7f12d2c8 [ 50.072107][ T4414] [ 50.488364][ T4475] bridge_slave_1: default FDB implementation only supports local addresses [ 50.557171][ T4481] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.618886][ T4481] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.704223][ T4481] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.752850][ T4481] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.814807][ T1592] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.837883][ T1592] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.865122][ T1592] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.918720][ T4503] loop1: detected capacity change from 0 to 512 [ 50.925893][ T4503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.934644][ T1592] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.944102][ T4503] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.285: invalid indirect mapped block 4294967295 (level 1) [ 50.958348][ T4503] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.285: invalid indirect mapped block 4294967295 (level 1) [ 50.973104][ T4503] EXT4-fs (loop1): 2 truncates cleaned up [ 50.979478][ T4503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.996333][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 51.031883][ T4503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.063203][ T4514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.289'. [ 51.181765][ T4519] loop3: detected capacity change from 0 to 512 [ 51.197734][ T4519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.211524][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.237679][ T4514] loop0: detected capacity change from 0 to 512 [ 51.245865][ T4519] loop7: detected capacity change from 0 to 7 [ 51.262410][ T4519] loop7: [ 51.272409][ T4514] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.289: inode has both inline data and extents flags [ 51.294493][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.303716][ T4514] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.289: couldn't read orphan inode 15 (err -117) [ 51.318946][ T4514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.478134][ T4542] FAULT_INJECTION: forcing a failure. [ 51.478134][ T4542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.491330][ T4542] CPU: 1 UID: 0 PID: 4542 Comm: syz.5.296 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.491364][ T4542] Tainted: [W]=WARN [ 51.491374][ T4542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.491388][ T4542] Call Trace: [ 51.491394][ T4542] [ 51.491403][ T4542] __dump_stack+0x1d/0x30 [ 51.491426][ T4542] dump_stack_lvl+0x95/0xd0 [ 51.491446][ T4542] dump_stack+0x15/0x1b [ 51.491576][ T4542] should_fail_ex+0x263/0x280 [ 51.491605][ T4542] should_fail+0xb/0x20 [ 51.491631][ T4542] should_fail_usercopy+0x1a/0x20 [ 51.491712][ T4542] _copy_from_user+0x1c/0xb0 [ 51.491737][ T4542] ____sys_sendmsg+0x1e2/0x600 [ 51.491760][ T4542] ___sys_sendmsg+0x195/0x1e0 [ 51.491790][ T4542] __x64_sys_sendmsg+0xd4/0x160 [ 51.491860][ T4542] x64_sys_call+0x17ba/0x3000 [ 51.491890][ T4542] do_syscall_64+0xc0/0x2a0 [ 51.491917][ T4542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.491974][ T4542] RIP: 0033:0x7f2ea3d8aeb9 [ 51.491993][ T4542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.492013][ T4542] RSP: 002b:00007f2ea27c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.492031][ T4542] RAX: ffffffffffffffda RBX: 00007f2ea4006090 RCX: 00007f2ea3d8aeb9 [ 51.492046][ T4542] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000003 [ 51.492062][ T4542] RBP: 00007f2ea27c6090 R08: 0000000000000000 R09: 0000000000000000 [ 51.492077][ T4542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.492096][ T4542] R13: 00007f2ea4006128 R14: 00007f2ea4006090 R15: 00007ffc11503c68 [ 51.492119][ T4542] [ 51.755813][ T4557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.304'. [ 51.811125][ T4558] netlink: 'syz.3.302': attribute type 3 has an invalid length. [ 51.818884][ T4558] netlink: 22003 bytes leftover after parsing attributes in process `syz.3.302'. [ 51.829461][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.886676][ T4568] 9p: Bad value for 'wfdno' [ 51.942446][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 51.951338][ T4574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.311'. [ 52.035270][ T4582] FAULT_INJECTION: forcing a failure. [ 52.035270][ T4582] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 52.048685][ T4582] CPU: 1 UID: 0 PID: 4582 Comm: syz.2.314 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.048759][ T4582] Tainted: [W]=WARN [ 52.048769][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.048787][ T4582] Call Trace: [ 52.048795][ T4582] [ 52.048805][ T4582] __dump_stack+0x1d/0x30 [ 52.048837][ T4582] dump_stack_lvl+0x95/0xd0 [ 52.048862][ T4582] dump_stack+0x15/0x1b [ 52.048927][ T4582] should_fail_ex+0x263/0x280 [ 52.048967][ T4582] should_fail_alloc_page+0xf2/0x100 [ 52.049040][ T4582] __alloc_frozen_pages_noprof+0x108/0x350 [ 52.049102][ T4582] alloc_pages_mpol+0xb3/0x260 [ 52.049147][ T4582] alloc_pages_noprof+0x8f/0x130 [ 52.049209][ T4582] get_free_pages_noprof+0xc/0x40 [ 52.049344][ T4582] do_proc_control+0x186/0x8b0 [ 52.049463][ T4582] ? should_fail_ex+0xd9/0x280 [ 52.049501][ T4582] proc_control_compat+0xb9/0xe0 [ 52.049539][ T4582] usbdev_ioctl+0xed7/0x1750 [ 52.049587][ T4582] ? __pfx_usbdev_ioctl+0x10/0x10 [ 52.049621][ T4582] __se_sys_ioctl+0xce/0x140 [ 52.049722][ T4582] __x64_sys_ioctl+0x43/0x50 [ 52.049761][ T4582] x64_sys_call+0x14b0/0x3000 [ 52.049861][ T4582] do_syscall_64+0xc0/0x2a0 [ 52.049966][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.049996][ T4582] RIP: 0033:0x7f3cd92faeb9 [ 52.050017][ T4582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.050103][ T4582] RSP: 002b:00007f3cd7d57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.050150][ T4582] RAX: ffffffffffffffda RBX: 00007f3cd9575fa0 RCX: 00007f3cd92faeb9 [ 52.050171][ T4582] RDX: 0000200000000000 RSI: 00000000c0105500 RDI: 0000000000000003 [ 52.050228][ T4582] RBP: 00007f3cd7d57090 R08: 0000000000000000 R09: 0000000000000000 [ 52.050323][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.050341][ T4582] R13: 00007f3cd9576038 R14: 00007f3cd9575fa0 R15: 00007ffe17055dc8 [ 52.050364][ T4582] [ 52.344426][ T4590] FAULT_INJECTION: forcing a failure. [ 52.344426][ T4590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.357631][ T4590] CPU: 0 UID: 0 PID: 4590 Comm: syz.3.317 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.357715][ T4590] Tainted: [W]=WARN [ 52.357724][ T4590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.357741][ T4590] Call Trace: [ 52.357748][ T4590] [ 52.357755][ T4590] __dump_stack+0x1d/0x30 [ 52.357822][ T4590] dump_stack_lvl+0x95/0xd0 [ 52.357852][ T4590] dump_stack+0x15/0x1b [ 52.357876][ T4590] should_fail_ex+0x263/0x280 [ 52.357980][ T4590] should_fail+0xb/0x20 [ 52.358029][ T4590] should_fail_usercopy+0x1a/0x20 [ 52.358109][ T4590] _copy_from_user+0x1c/0xb0 [ 52.358136][ T4590] __sys_connect+0xd0/0x2a0 [ 52.358212][ T4590] __x64_sys_connect+0x3f/0x50 [ 52.358244][ T4590] x64_sys_call+0x2e09/0x3000 [ 52.358268][ T4590] do_syscall_64+0xc0/0x2a0 [ 52.358303][ T4590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.358392][ T4590] RIP: 0033:0x7f37d189aeb9 [ 52.358410][ T4590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.358433][ T4590] RSP: 002b:00007f37d02f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 52.358520][ T4590] RAX: ffffffffffffffda RBX: 00007f37d1b15fa0 RCX: 00007f37d189aeb9 [ 52.358535][ T4590] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 52.358551][ T4590] RBP: 00007f37d02f7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.358568][ T4590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.358583][ T4590] R13: 00007f37d1b16038 R14: 00007f37d1b15fa0 R15: 00007ffe951a81b8 [ 52.358687][ T4590] [ 52.565289][ T4594] loop2: detected capacity change from 0 to 2048 [ 52.588258][ T4594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.622721][ T4594] netlink: 256 bytes leftover after parsing attributes in process `syz.2.318'. [ 52.656585][ T4594] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.677002][ T4594] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 52.689465][ T4594] EXT4-fs (loop2): This should not happen!! Data will be lost [ 52.689465][ T4594] [ 52.699323][ T4594] EXT4-fs (loop2): Total free blocks count 0 [ 52.705402][ T4594] EXT4-fs (loop2): Free/Dirty block details [ 52.711314][ T4594] EXT4-fs (loop2): free_blocks=2415919104 [ 52.717079][ T4594] EXT4-fs (loop2): dirty_blocks=32 [ 52.722301][ T4594] EXT4-fs (loop2): Block reservation details [ 52.728390][ T4594] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 52.772390][ T4610] netlink: 'syz.0.323': attribute type 4 has an invalid length. [ 52.780188][ T4610] netlink: 168 bytes leftover after parsing attributes in process `syz.0.323'. [ 52.806031][ T4607] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 52.825486][ T4610] loop0: detected capacity change from 0 to 512 [ 52.862357][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.875013][ T4610] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.323: inode has both inline data and extents flags [ 52.888518][ T4610] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.323: couldn't read orphan inode 15 (err -117) [ 52.901408][ T4610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.967922][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 53.002671][ T4608] lo speed is unknown, defaulting to 1000 [ 53.034248][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 53.034265][ T29] audit: type=1400 audit(1769603183.953:1296): avc: denied { create } for pid=4617 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 53.060005][ T29] audit: type=1400 audit(1769603183.953:1297): avc: denied { setopt } for pid=4617 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 53.070332][ T4616] lo speed is unknown, defaulting to 1000 [ 53.079490][ T29] audit: type=1400 audit(1769603183.963:1298): avc: denied { create } for pid=4617 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 53.173271][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.254522][ T4634] netlink: 'syz.5.329': attribute type 4 has an invalid length. [ 53.323665][ T4641] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.329: inode has both inline data and extents flags [ 53.344424][ T4641] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.329: couldn't read orphan inode 15 (err -117) [ 53.389428][ T4641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.423585][ T29] audit: type=1400 audit(1769603184.343:1299): avc: denied { setattr } for pid=4648 comm="syz.2.334" name="SCTPv6" dev="sockfs" ino=9062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.637701][ T4667] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.652741][ T4667] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.707785][ T29] audit: type=1400 audit(1769603184.633:1300): avc: denied { map } for pid=4666 comm="syz.1.339" path="/61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.752524][ T29] audit: type=1400 audit(1769603184.633:1301): avc: denied { write } for pid=4666 comm="syz.1.339" path="/61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.757903][ T4670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=4670 comm=syz.3.340 [ 53.818169][ T4670] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.833239][ T3566] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.845678][ T4670] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.875165][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.890569][ T4675] ªªªªªªÎl¸ñžŽ±ø÷: renamed from lo [ 53.969364][ T29] audit: type=1400 audit(1769603184.893:1302): avc: denied { read } for pid=4680 comm="syz.1.344" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.992868][ T29] audit: type=1400 audit(1769603184.893:1303): avc: denied { open } for pid=4680 comm="syz.1.344" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.110724][ T4683] __nla_validate_parse: 6 callbacks suppressed [ 54.110738][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 54.110912][ T29] audit: type=1400 audit(1769603185.033:1304): avc: denied { nlmsg_read } for pid=4682 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.188227][ T29] audit: type=1400 audit(1769603185.113:1305): avc: denied { append } for pid=4688 comm="syz.3.347" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.214116][ T4681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.226205][ T4691] netlink: 44 bytes leftover after parsing attributes in process `syz.3.348'. [ 54.233260][ T4681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.445489][ T4710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.454716][ T4710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.468644][ T4696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.477960][ T4696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.553647][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.562255][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.987483][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.996012][ T4724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.004752][ T4724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.012751][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.030348][ T4728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.039050][ T4728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.103235][ T4732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.111977][ T4732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.204754][ T4738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.213626][ T4738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.544386][ T4740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.561178][ T4740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.614771][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 55.628808][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.674031][ T4753] syzkaller0: entered promiscuous mode [ 55.679560][ T4753] syzkaller0: entered allmulticast mode [ 55.697794][ T4756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.706434][ T4756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.777679][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.794369][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.907092][ T4776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.915959][ T4776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.137178][ T4784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.145902][ T4784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.231596][ T4786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.240299][ T4786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.407000][ T4795] tipc: Started in network mode [ 56.411921][ T4795] tipc: Node identity 4, cluster identity 4711 [ 56.418172][ T4795] tipc: Node number set to 4 [ 56.466535][ T4799] netlink: 168 bytes leftover after parsing attributes in process `syz.3.398'. [ 56.534309][ T4811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.543411][ T4811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.681637][ T4824] syzkaller1: entered promiscuous mode [ 56.687254][ T4824] syzkaller1: entered allmulticast mode [ 56.700354][ T4826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.708936][ T4826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.825268][ T4831] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 56.825268][ T4831] The task syz.5.410 (4831) triggered the difference, watch for misbehavior. [ 57.073316][ T4833] openvswitch: netlink: Key type 1542 is out of range max 32 [ 57.082043][ T10] kernel read not supported for file /mISDNtimer (pid: 10 comm: kworker/0:1) [ 57.108319][ T4835] netlink: 168 bytes leftover after parsing attributes in process `syz.0.413'. [ 57.210866][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 57.250472][ T4854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.259804][ T4854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.334422][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.343134][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.489812][ T4858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.501310][ T4858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.620967][ T4870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.629670][ T4870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.792508][ T4872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.801056][ T4872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.026679][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.035414][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.154889][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.163599][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.395615][ T4909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.442'. [ 58.572653][ T1592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.629491][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.638490][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.650188][ T1592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.709459][ T4920] lo speed is unknown, defaulting to 1000 [ 58.718687][ T1592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.768586][ T1592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.800424][ T4920] chnl_net:caif_netlink_parms(): no params data found [ 58.848970][ T1592] bridge_slave_1: left allmulticast mode [ 58.854817][ T1592] bridge_slave_1: left promiscuous mode [ 58.860518][ T1592] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.875155][ T1592] bridge_slave_0: left allmulticast mode [ 58.880850][ T1592] bridge_slave_0: left promiscuous mode [ 58.886603][ T1592] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.014183][ T1592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.024808][ T1592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.034779][ T1592] bond0 (unregistering): Released all slaves [ 59.042870][ T1592] bond1 (unregistering): Released all slaves [ 59.066193][ T4943] syzkaller0: entered promiscuous mode [ 59.071854][ T4943] syzkaller0: entered allmulticast mode [ 59.098390][ T4920] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.105612][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.114279][ T4920] bridge_slave_0: entered allmulticast mode [ 59.120960][ T4920] bridge_slave_0: entered promiscuous mode [ 59.129386][ T1592] hsr_slave_0: left promiscuous mode [ 59.138958][ T1592] hsr_slave_1: left promiscuous mode [ 59.145273][ T1592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.152834][ T1592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.161532][ T1592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.169026][ T1592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.200168][ T4960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.208938][ T1592] veth1_macvtap: left promiscuous mode [ 59.209974][ T4960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.222504][ T1592] veth0_macvtap: left promiscuous mode [ 59.228020][ T1592] veth1_vlan: left promiscuous mode [ 59.233629][ T1592] veth0_vlan: left promiscuous mode [ 59.304017][ T4969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.314612][ T4969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.344210][ T1592] team0 (unregistering): Port device team_slave_1 removed [ 59.353978][ T1592] team0 (unregistering): Port device team_slave_0 removed [ 59.391786][ T4920] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.398941][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.406110][ T4920] bridge_slave_1: entered allmulticast mode [ 59.412766][ T4920] bridge_slave_1: entered promiscuous mode [ 59.418914][ T1034] lo speed is unknown, defaulting to 1000 [ 59.424698][ T1034] infiniband syz2: ib_query_port failed (-19) [ 59.447430][ T4920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.457973][ T4920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.478760][ T4920] team0: Port device team_slave_0 added [ 59.495010][ T4920] team0: Port device team_slave_1 added [ 59.519476][ T4920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.526550][ T4920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.552604][ T4920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.601738][ T4920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.608807][ T4920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.634797][ T4920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.681703][ T4920] hsr_slave_0: entered promiscuous mode [ 59.687832][ T4920] hsr_slave_1: entered promiscuous mode [ 59.710155][ T4920] debugfs: 'hsr0' already exists in 'hsr' [ 59.716005][ T4920] Cannot create hsr debugfs directory [ 59.806994][ T5004] syzkaller0: entered promiscuous mode [ 59.812716][ T5004] syzkaller0: entered allmulticast mode [ 59.834899][ T5007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.855619][ T5007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.873353][ T4920] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.891930][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 59.891943][ T29] audit: type=1400 audit(1769603190.816:1324): avc: denied { egress } for pid=3304 comm="udevd" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 59.921278][ T29] audit: type=1400 audit(1769603190.816:1325): avc: denied { sendto } for pid=3304 comm="udevd" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 59.955516][ T4920] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.969397][ T4920] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 60.002321][ T29] audit: type=1400 audit(1769603190.926:1326): avc: denied { create } for pid=5019 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.023275][ T4920] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 60.058649][ T29] audit: type=1400 audit(1769603190.956:1327): avc: denied { write } for pid=5019 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.155600][ T4920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.209574][ T4920] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.229007][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.236206][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.253034][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.260136][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.268969][ T5052] syzkaller0: entered promiscuous mode [ 60.274664][ T5052] syzkaller0: entered allmulticast mode [ 60.305144][ T4920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.339899][ T5064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.366815][ T5064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.412177][ T4920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.636018][ T4920] veth0_vlan: entered promiscuous mode [ 60.644721][ T4920] veth1_vlan: entered promiscuous mode [ 60.689076][ T4920] veth0_macvtap: entered promiscuous mode [ 60.707268][ T4920] veth1_macvtap: entered promiscuous mode [ 60.722162][ T4920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.732848][ T4920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.744232][ T3462] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.758640][ T3462] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.783977][ T3462] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.797329][ T3462] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.799484][ T29] audit: type=1400 audit(1769603191.716:1328): avc: denied { mounton } for pid=4920 comm="syz-executor" path="/root/syzkaller.izRHEZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.835256][ T5108] syzkaller0: entered promiscuous mode [ 60.840962][ T5108] syzkaller0: entered allmulticast mode [ 60.886778][ T29] audit: type=1400 audit(1769603191.767:1329): avc: denied { mount } for pid=4920 comm="syz-executor" name="/" dev="gadgetfs" ino=3795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 60.916573][ T5112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.935317][ T5114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.951703][ T5112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.979569][ T5114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.003409][ T5118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.012494][ T5118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.023609][ T4018] syz_tun (unregistering): left allmulticast mode [ 61.357523][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 61.395567][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.402781][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.410335][ T5123] bridge_slave_0: entered allmulticast mode [ 61.416829][ T5123] bridge_slave_0: entered promiscuous mode [ 61.423842][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.430959][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.438256][ T5123] bridge_slave_1: entered allmulticast mode [ 61.445046][ T5123] bridge_slave_1: entered promiscuous mode [ 61.462691][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.473212][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.493856][ T5123] team0: Port device team_slave_0 added [ 61.500965][ T5123] team0: Port device team_slave_1 added [ 61.542131][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.549114][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.575142][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.586985][ T5140] tipc: Started in network mode [ 61.591981][ T5140] tipc: Node identity 4, cluster identity 4711 [ 61.598251][ T5140] tipc: Node number set to 4 [ 61.615103][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.617896][ T5144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.622264][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.622313][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.672320][ T5144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.695511][ T5146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.704244][ T5146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.719491][ T5123] hsr_slave_0: entered promiscuous mode [ 61.726512][ T5123] hsr_slave_1: entered promiscuous mode [ 61.732713][ T5123] debugfs: 'hsr0' already exists in 'hsr' [ 61.738586][ T5123] Cannot create hsr debugfs directory [ 61.839057][ T5123] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 61.848505][ T5123] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 61.857972][ T5123] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 61.867107][ T5123] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 61.939600][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.952880][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.970645][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.977738][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.993536][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.993575][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.049045][ T5123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.086525][ T5171] syzkaller0: entered promiscuous mode [ 62.092067][ T5171] syzkaller0: entered allmulticast mode [ 62.149219][ T5149] chnl_net:caif_netlink_parms(): no params data found [ 62.304526][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.354739][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.362077][ T5149] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.403279][ T5149] bridge_slave_0: entered allmulticast mode [ 62.415782][ T5149] bridge_slave_0: entered promiscuous mode [ 62.454712][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.462542][ T5149] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.475657][ T5149] bridge_slave_1: entered allmulticast mode [ 62.484053][ T5149] bridge_slave_1: entered promiscuous mode [ 62.595391][ T5149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.630831][ T5149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.682018][ T5123] veth0_vlan: entered promiscuous mode [ 62.695345][ T5123] veth1_vlan: entered promiscuous mode [ 62.739918][ T5149] team0: Port device team_slave_0 added [ 62.764329][ T5123] veth0_macvtap: entered promiscuous mode [ 62.775261][ T5149] team0: Port device team_slave_1 added [ 62.802526][ T5149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.809580][ T5149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.835656][ T5149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.847969][ T5123] veth1_macvtap: entered promiscuous mode [ 62.857854][ T5149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.864887][ T5149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.891000][ T5149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.921345][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.932916][ T5149] hsr_slave_0: entered promiscuous mode [ 62.939312][ T5149] hsr_slave_1: entered promiscuous mode [ 62.945206][ T5149] debugfs: 'hsr0' already exists in 'hsr' [ 62.951053][ T5149] Cannot create hsr debugfs directory [ 62.964319][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.977986][ T3462] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.995344][ T3462] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.008850][ T3462] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.050468][ T3462] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.157216][ T5149] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 63.166425][ T5149] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 63.180175][ T5149] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 63.211532][ T5149] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 63.716189][ T29] audit: type=1400 audit(1769603194.638:1330): avc: denied { setopt } for pid=5225 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.826919][ T5149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.369056][ T5242] lo speed is unknown, defaulting to 1000 [ 64.380638][ T5149] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.388009][ T5242] lo speed is unknown, defaulting to 1000 [ 64.411457][ T5149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.421908][ T5149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.496739][ T29] audit: type=1400 audit(1769603195.418:1331): avc: denied { shutdown } for pid=5241 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.519108][ T5242] lo speed is unknown, defaulting to 1000 [ 64.537625][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.544723][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.606292][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.613490][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.644417][ T5242] infiniband syz0: set active [ 64.649194][ T5242] infiniband syz0: added lo [ 64.664259][ T3401] lo speed is unknown, defaulting to 1000 [ 64.853617][ T5242] RDS/IB: syz0: added [ 64.865402][ T5242] smc: adding ib device syz0 with port count 1 [ 64.886476][ T5242] smc: ib device syz0 port 1 has no pnetid [ 64.892757][ T3401] lo speed is unknown, defaulting to 1000 [ 64.909180][ T5242] lo speed is unknown, defaulting to 1000 [ 64.962349][ T5149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.988259][ T29] audit: type=1400 audit(1769603195.909:1332): avc: denied { listen } for pid=5255 comm="syz.7.521" lport=37339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.008842][ T29] audit: type=1400 audit(1769603195.909:1333): avc: denied { accept } for pid=5255 comm="syz.7.521" lport=37339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.043241][ T5242] lo speed is unknown, defaulting to 1000 [ 65.082175][ T5242] lo speed is unknown, defaulting to 1000 [ 65.126102][ T5242] lo speed is unknown, defaulting to 1000 [ 65.209882][ T5242] lo speed is unknown, defaulting to 1000 [ 65.238234][ T5149] veth0_vlan: entered promiscuous mode [ 65.246571][ T5149] veth1_vlan: entered promiscuous mode [ 65.256679][ T5242] lo speed is unknown, defaulting to 1000 [ 65.278623][ T5149] veth0_macvtap: entered promiscuous mode [ 65.286306][ T5149] veth1_macvtap: entered promiscuous mode [ 65.297617][ T5149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.309961][ T5149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.322264][ T5242] lo speed is unknown, defaulting to 1000 [ 65.322284][ T52] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.342011][ T52] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.363008][ T52] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.373006][ T52] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.416065][ T5281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.425226][ T5281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.473766][ T5285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.482953][ T5285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.566537][ T29] audit: type=1400 audit(1769603196.489:1334): avc: denied { write } for pid=5284 comm="syz.8.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.586256][ T5296] netlink: 12 bytes leftover after parsing attributes in process `syz.8.526'. [ 65.746182][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.923241][ T5309] lo speed is unknown, defaulting to 1000 [ 66.374086][ T5325] lo speed is unknown, defaulting to 1000 [ 66.501523][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.791298][ T5334] set_capacity_and_notify: 5 callbacks suppressed [ 66.791317][ T5334] loop7: detected capacity change from 0 to 512 [ 66.843105][ T5334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.001634][ T5123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.081976][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.231521][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.456022][ T52] bridge_slave_1: left allmulticast mode [ 67.461902][ T52] bridge_slave_1: left promiscuous mode [ 67.467605][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.481077][ T52] bridge_slave_0: left allmulticast mode [ 67.487179][ T52] bridge_slave_0: left promiscuous mode [ 67.492835][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.510776][ T5370] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 67.517433][ T5370] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.525113][ T5370] vhci_hcd vhci_hcd.0: Device attached [ 67.546116][ T29] audit: type=1400 audit(1769603198.470:1335): avc: denied { ioctl } for pid=5373 comm="syz.3.547" path="socket:[13364]" dev="sockfs" ino=13364 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 67.571054][ T29] audit: type=1400 audit(1769603198.470:1336): avc: denied { write } for pid=5373 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 67.592902][ T5371] usbip_core: unknown command [ 67.597719][ T5371] vhci_hcd: unknown pdu 0 [ 67.602083][ T5371] usbip_core: unknown command [ 67.616118][ T5376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.548'. [ 67.629432][ T5239] vhci_hcd vhci_hcd.7: stop threads [ 67.634682][ T5239] vhci_hcd vhci_hcd.7: release socket [ 67.640183][ T5239] vhci_hcd vhci_hcd.7: disconnect device [ 67.680446][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.690829][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.759122][ T52] bond0 (unregistering): Released all slaves [ 67.784423][ T5380] netlink: 56 bytes leftover after parsing attributes in process `syz.8.550'. [ 67.803787][ T5380] vlan2: entered promiscuous mode [ 67.809190][ T5380] bond0: entered promiscuous mode [ 67.814406][ T5380] bond_slave_0: entered promiscuous mode [ 67.820258][ T5380] bond_slave_1: entered promiscuous mode [ 67.842218][ T5309] chnl_net:caif_netlink_parms(): no params data found [ 68.007767][ T52] tipc: Left network mode [ 68.300679][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.307922][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.323966][ T5309] bridge_slave_0: entered allmulticast mode [ 68.338273][ T5309] bridge_slave_0: entered promiscuous mode [ 68.350899][ T52] hsr_slave_0: left promiscuous mode [ 68.363758][ T52] hsr_slave_1: left promiscuous mode [ 68.398295][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.405833][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.157577][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.165031][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.345090][ T52] veth1_macvtap: left promiscuous mode [ 69.350770][ T52] veth0_macvtap: left promiscuous mode [ 69.356504][ T52] veth1_vlan: left promiscuous mode [ 69.361859][ T52] veth0_vlan: left promiscuous mode [ 69.583129][ T5418] loop1: detected capacity change from 0 to 1024 [ 69.618004][ T5418] EXT4-fs: Ignoring removed bh option [ 69.661230][ T5418] EXT4-fs: Ignoring removed nobh option [ 69.698231][ T5418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.729705][ T29] audit: type=1400 audit(1769603200.661:1337): avc: denied { append } for pid=5416 comm="syz.1.556" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.786168][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.947922][ T52] team0 (unregistering): Port device team_slave_1 removed [ 69.959042][ T52] team0 (unregistering): Port device team_slave_0 removed [ 70.048427][ T5454] netlink: 'syz.3.565': attribute type 10 has an invalid length. [ 70.078921][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.086170][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.093546][ T5309] bridge_slave_1: entered allmulticast mode [ 70.825243][ T5458] netlink: 'syz.7.567': attribute type 1 has an invalid length. [ 71.002134][ T5309] bridge_slave_1: entered promiscuous mode [ 71.014159][ T5436] syzkaller0: entered promiscuous mode [ 71.019707][ T5436] syzkaller0: entered allmulticast mode [ 71.215965][ T29] audit: type=1400 audit(1769603202.152:1338): avc: denied { unmount } for pid=5451 comm="syz.7.567" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 71.286314][ T5309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.303308][ T5309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.354438][ T5309] team0: Port device team_slave_0 added [ 71.466326][ T5309] team0: Port device team_slave_1 added [ 71.566555][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.573668][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.599678][ T5309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.032508][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.039521][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.065618][ T5309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.613218][ T5309] hsr_slave_0: entered promiscuous mode [ 72.635318][ T5496] loop7: detected capacity change from 0 to 128 [ 72.665080][ T5309] hsr_slave_1: entered promiscuous mode [ 72.717012][ T5496] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.729659][ T5309] debugfs: 'hsr0' already exists in 'hsr' [ 72.735489][ T5309] Cannot create hsr debugfs directory [ 72.751002][ T5496] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.825733][ T5503] lo speed is unknown, defaulting to 1000 [ 73.504937][ T5123] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.324576][ T5535] lo speed is unknown, defaulting to 1000 [ 74.433146][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.443143][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.476053][ T5309] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 74.508491][ T5309] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 74.562362][ T5309] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 74.596993][ T29] audit: type=1326 audit(1769603205.513:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772463aeb9 code=0x7ffc0000 [ 74.620779][ T29] audit: type=1326 audit(1769603205.513:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f772463aeb9 code=0x7ffc0000 [ 74.644213][ T29] audit: type=1326 audit(1769603205.513:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772463aeb9 code=0x7ffc0000 [ 74.667561][ T29] audit: type=1326 audit(1769603205.513:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772463aeb9 code=0x7ffc0000 [ 74.690994][ T29] audit: type=1326 audit(1769603205.523:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f772463aeb9 code=0x7ffc0000 [ 74.714464][ T29] audit: type=1326 audit(1769603205.523:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772463aeb9 code=0x7ffc0000 [ 74.737821][ T29] audit: type=1326 audit(1769603205.523:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772463aeb9 code=0x7ffc0000 [ 74.772789][ T5309] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 75.000451][ T5559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.041715][ T5559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.388518][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.587'. [ 75.497078][ T5309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.513574][ T5309] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.535076][ T2117] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.542249][ T2117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.555970][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.563215][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.111761][ T29] audit: type=1400 audit(1769603206.874:1346): avc: denied { nlmsg_write } for pid=5590 comm="syz.8.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 76.132566][ T29] audit: type=1400 audit(1769603206.874:1347): avc: denied { audit_write } for pid=5590 comm="syz.8.593" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.190656][ T5309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.429082][ T5309] veth0_vlan: entered promiscuous mode [ 76.445178][ T5309] veth1_vlan: entered promiscuous mode [ 76.464994][ T5309] veth0_macvtap: entered promiscuous mode [ 76.472791][ T5309] veth1_macvtap: entered promiscuous mode [ 76.487043][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.549113][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 76.549130][ T29] audit: type=1400 audit(1769603207.464:1349): avc: denied { read } for pid=5670 comm="syz.3.601" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.556708][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.578071][ T29] audit: type=1400 audit(1769603207.464:1350): avc: denied { open } for pid=5670 comm="syz.3.601" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.631155][ T31] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.640588][ T31] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.678542][ T31] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.725233][ T31] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.819982][ T5685] tipc: Started in network mode [ 76.824945][ T5685] tipc: Node identity 4, cluster identity 4711 [ 76.831169][ T5685] tipc: Node number set to 4 [ 77.612195][ T5714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 77.937651][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.617'. [ 77.976065][ T2117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.048146][ T5750] loop9: detected capacity change from 0 to 512 [ 78.055735][ T2117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.104837][ T2117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.125933][ T5750] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.194728][ T2117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.231583][ T29] audit: type=1400 audit(1769603209.155:1351): avc: denied { read write } for pid=5749 comm="syz.9.621" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.254294][ T29] audit: type=1400 audit(1769603209.155:1352): avc: denied { open } for pid=5749 comm="syz.9.621" path="/4/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.355743][ T5309] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.389559][ T5753] lo speed is unknown, defaulting to 1000 [ 78.395713][ T2117] bridge_slave_1: left allmulticast mode [ 78.401402][ T2117] bridge_slave_1: left promiscuous mode [ 78.407152][ T2117] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.437917][ T2117] bridge_slave_0: left allmulticast mode [ 78.443870][ T2117] bridge_slave_0: left promiscuous mode [ 78.449756][ T2117] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.586230][ T2117] gretap0 (unregistering): left promiscuous mode [ 78.672710][ T2117] bond0 (unregistering): left promiscuous mode [ 78.678927][ T2117] bond_slave_0: left promiscuous mode [ 78.684602][ T2117] bond_slave_1: left promiscuous mode [ 78.694209][ T2117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.704082][ T2117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.713771][ T2117] bond0 (unregistering): Released all slaves [ 78.726269][ T5787] tipc: Started in network mode [ 78.731229][ T5787] tipc: Node identity 4, cluster identity 4711 [ 78.737435][ T5787] tipc: Node number set to 4 [ 78.923079][ T2117] hsr_slave_0: left promiscuous mode [ 78.936433][ T2117] hsr_slave_1: left promiscuous mode [ 78.942358][ T2117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.949997][ T2117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.964620][ T2117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.972214][ T2117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.059221][ T2117] veth1_macvtap: left promiscuous mode [ 79.065269][ T2117] veth0_macvtap: left promiscuous mode [ 79.071029][ T2117] veth1_vlan: left promiscuous mode [ 79.077144][ T2117] veth0_vlan: left promiscuous mode [ 79.270715][ T2117] team0 (unregistering): Port device team_slave_1 removed [ 79.291464][ T2117] team0 (unregistering): Port device team_slave_0 removed [ 79.366283][ T5753] chnl_net:caif_netlink_parms(): no params data found [ 79.373894][ T31] smc: removing ib device syz0 [ 79.462051][ T5248] lo speed is unknown, defaulting to 1000 [ 79.468022][ T5248] syz0: Port: 1 Link DOWN [ 79.496323][ T5833] pimreg: entered allmulticast mode [ 79.526210][ T5833] pimreg: left allmulticast mode [ 79.615048][ T5847] netlink: 56 bytes leftover after parsing attributes in process `syz.9.642'. [ 79.689488][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.696643][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.734487][ T5753] bridge_slave_0: entered allmulticast mode [ 79.778274][ T5753] bridge_slave_0: entered promiscuous mode [ 79.788590][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.795782][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.844623][ T5753] bridge_slave_1: entered allmulticast mode [ 79.859671][ T5753] bridge_slave_1: entered promiscuous mode [ 79.928769][ T5854] tipc: Started in network mode [ 79.933834][ T5854] tipc: Node identity 4, cluster identity 4711 [ 79.940037][ T5854] tipc: Node number set to 4 [ 80.002794][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.9.645'. [ 80.011806][ T5853] bridge_slave_0: default FDB implementation only supports local addresses [ 80.054157][ T2117] IPVS: stop unused estimator thread 0... [ 80.102867][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.141405][ T2117] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.173527][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 80.203691][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.224130][ T5886] loop8: detected capacity change from 0 to 128 [ 80.231564][ T2117] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.253946][ T5886] syz.8.650: attempt to access beyond end of device [ 80.253946][ T5886] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 80.278295][ T5886] syz.8.650: attempt to access beyond end of device [ 80.278295][ T5886] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 80.297566][ T5886] syz.8.650: attempt to access beyond end of device [ 80.297566][ T5886] loop8: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 80.313990][ T5886] syz.8.650: attempt to access beyond end of device [ 80.313990][ T5886] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 80.348224][ T5753] team0: Port device team_slave_0 added [ 80.355972][ T2117] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.360463][ T5886] syz.8.650: attempt to access beyond end of device [ 80.360463][ T5886] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 80.380579][ T5886] syz.8.650: attempt to access beyond end of device [ 80.380579][ T5886] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 80.394088][ T5886] syz.8.650: attempt to access beyond end of device [ 80.394088][ T5886] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 80.408885][ T5886] syz.8.650: attempt to access beyond end of device [ 80.408885][ T5886] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 80.422334][ T5886] syz.8.650: attempt to access beyond end of device [ 80.422334][ T5886] loop8: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 80.426488][ T5753] team0: Port device team_slave_1 added [ 80.460900][ T5886] syz.8.650: attempt to access beyond end of device [ 80.460900][ T5886] loop8: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 80.493002][ T2117] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.548963][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.556014][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.582012][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.593025][ T5886] Buffer I/O error on dev loop8, logical block 305, async page read [ 80.593598][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.603923][ T5886] Buffer I/O error on dev loop8, logical block 306, async page read [ 80.608125][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.625476][ T5776] bridge_slave_0: entered allmulticast mode [ 80.638793][ T5886] Buffer I/O error on dev loop8, logical block 307, async page read [ 80.642255][ T5776] bridge_slave_0: entered promiscuous mode [ 80.654091][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.661164][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.667079][ T5886] Buffer I/O error on dev loop8, logical block 308, async page read [ 80.687185][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.714324][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.721523][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.728645][ T5886] Buffer I/O error on dev loop8, logical block 309, async page read [ 80.736957][ T5776] bridge_slave_1: entered allmulticast mode [ 80.744300][ T5776] bridge_slave_1: entered promiscuous mode [ 80.750348][ T5886] Buffer I/O error on dev loop8, logical block 310, async page read [ 80.786323][ T5886] Buffer I/O error on dev loop8, logical block 311, async page read [ 80.797343][ T5886] Buffer I/O error on dev loop8, logical block 312, async page read [ 80.805608][ T5886] Buffer I/O error on dev loop8, logical block 305, async page read [ 80.815765][ T5753] hsr_slave_0: entered promiscuous mode [ 80.821964][ T5753] hsr_slave_1: entered promiscuous mode [ 80.828040][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 80.833833][ T5753] Cannot create hsr debugfs directory [ 80.845727][ T5886] Buffer I/O error on dev loop8, logical block 306, async page read [ 80.854005][ T2117] bridge_slave_1: left allmulticast mode [ 80.859714][ T2117] bridge_slave_1: left promiscuous mode [ 80.865501][ T2117] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.886200][ T2117] bridge_slave_0: left allmulticast mode [ 80.892024][ T2117] bridge_slave_0: left promiscuous mode [ 80.897683][ T2117] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.064894][ T2117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.075006][ T2117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.089134][ T2117] bond0 (unregistering): Released all slaves [ 81.098297][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.125710][ T5925] netlink: 56 bytes leftover after parsing attributes in process `syz.8.653'. [ 81.145254][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.9.654'. [ 81.154191][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.9.654'. [ 81.185593][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.192872][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.253558][ T5923] hsr1: left promiscuous mode [ 81.260761][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.277416][ T2117] tipc: Left network mode [ 81.293015][ T5239] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.311539][ T2117] hsr_slave_0: left promiscuous mode [ 81.318245][ T2117] hsr_slave_1: left promiscuous mode [ 81.328465][ T2117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.335900][ T2117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.343943][ T2117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.351561][ T2117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.366798][ T2117] veth1_macvtap: left promiscuous mode [ 81.372688][ T2117] veth0_macvtap: left promiscuous mode [ 81.378238][ T2117] veth1_vlan: left promiscuous mode [ 81.383689][ T2117] veth0_vlan: left promiscuous mode [ 81.493717][ T2117] team0 (unregistering): Port device team_slave_1 removed [ 81.505802][ T2117] team0 (unregistering): Port device team_slave_0 removed [ 81.579609][ T5239] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.592689][ T5776] team0: Port device team_slave_0 added [ 81.605175][ T5239] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.615015][ T5776] team0: Port device team_slave_1 added [ 81.666152][ T5239] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.694398][ T5239] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.710492][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.717525][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.743711][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.775902][ T5239] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.789201][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.796220][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.822341][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.840516][ T5239] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.849347][ T5239] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.909601][ T5776] hsr_slave_0: entered promiscuous mode [ 81.935803][ T5776] hsr_slave_1: entered promiscuous mode [ 81.948492][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 81.954302][ T5776] Cannot create hsr debugfs directory [ 81.997266][ T5970] netlink: 56 bytes leftover after parsing attributes in process `syz.1.664'. [ 82.240093][ T5753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.249563][ T5753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.271732][ T5753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.281278][ T5753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.366725][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.396096][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.487668][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.494812][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.525907][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.533135][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.589857][ T5753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.603739][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.626822][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.664285][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.675540][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.790422][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.822943][ T29] audit: type=1400 audit(1769603213.757:1353): avc: denied { create } for pid=6046 comm="syz.8.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 82.847761][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.862168][ T6052] netlink: 56 bytes leftover after parsing attributes in process `syz.9.673'. [ 82.877688][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.892713][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.899870][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.919859][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.927025][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.073231][ T6069] loop1: detected capacity change from 0 to 256 [ 83.184350][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.272622][ T5753] veth0_vlan: entered promiscuous mode [ 83.298261][ T5753] veth1_vlan: entered promiscuous mode [ 83.366045][ T5753] veth0_macvtap: entered promiscuous mode [ 83.375072][ T5776] veth0_vlan: entered promiscuous mode [ 83.383469][ T5753] veth1_macvtap: entered promiscuous mode [ 83.393947][ T5776] veth1_vlan: entered promiscuous mode [ 83.515359][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.561680][ T5776] veth0_macvtap: entered promiscuous mode [ 83.588890][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.621784][ T5776] veth1_macvtap: entered promiscuous mode [ 83.656515][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.682035][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.703759][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.731294][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.760955][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.794263][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.821586][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.860591][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.873449][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.884484][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.127289][ T6134] netlink: 56 bytes leftover after parsing attributes in process `syz.8.682'. [ 84.152221][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 84.386696][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.9.686'. [ 85.476569][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.9.686'. [ 86.048130][ T29] audit: type=1400 audit(1769603216.989:1354): avc: denied { ioctl } for pid=6196 comm="syz.0.694" path="socket:[16337]" dev="sockfs" ino=16337 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 86.221383][ T29] audit: type=1400 audit(1769603217.159:1355): avc: denied { execute_no_trans } for pid=6160 comm="syz.1.689" path="/137/file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.307603][ T6196] delete_channel: no stack [ 86.515568][ T6271] netlink: 'syz.4.703': attribute type 39 has an invalid length. [ 86.541302][ T6271] hsr_slave_1 (unregistering): left promiscuous mode [ 86.937425][ T6324] netlink: 'syz.9.715': attribute type 5 has an invalid length. [ 87.107362][ T29] audit: type=1400 audit(1769603218.030:1356): avc: denied { create } for pid=6329 comm="syz.8.717" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.167323][ T29] audit: type=1400 audit(1769603218.090:1357): avc: denied { name_bind } for pid=6338 comm="syz.9.719" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 87.370256][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.727'. [ 87.413092][ T6364] netlink: 60 bytes leftover after parsing attributes in process `syz.9.723'. [ 87.428944][ T6354] netlink: 60 bytes leftover after parsing attributes in process `syz.9.723'. [ 87.457137][ T6361] netlink: 60 bytes leftover after parsing attributes in process `syz.9.723'. [ 87.532911][ T6370] ip6gre1: entered allmulticast mode [ 87.554482][ T6370] team0: Device ip6gre1 is of different type [ 87.624124][ T6361] netlink: 60 bytes leftover after parsing attributes in process `syz.9.723'. [ 87.635706][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 88.307949][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.741'. [ 88.317321][ T29] audit: type=1400 audit(1769603219.250:1358): avc: denied { ioctl } for pid=6421 comm="syz.0.738" path="socket:[15348]" dev="sockfs" ino=15348 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.348334][ T6431] netlink: 'syz.1.742': attribute type 10 has an invalid length. [ 88.376104][ T6431] hsr1: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 88.587199][ T6456] netlink: 'syz.1.750': attribute type 2 has an invalid length. [ 88.594947][ T6456] netlink: 720 bytes leftover after parsing attributes in process `syz.1.750'. [ 88.670199][ T29] audit: type=1400 audit(1769603219.610:1359): avc: denied { read } for pid=6477 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 88.815980][ T29] audit: type=1400 audit(1769603219.750:1360): avc: denied { write } for pid=6496 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 88.979283][ T6515] netlink: 422 bytes leftover after parsing attributes in process `syz.1.768'. [ 88.988395][ T6515] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 89.484882][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.8.777'. [ 89.733694][ T6594] netlink: 'syz.0.785': attribute type 39 has an invalid length. [ 89.755138][ T6588] netlink: 'syz.9.783': attribute type 1 has an invalid length. [ 89.763001][ T6588] netlink: 'syz.9.783': attribute type 2 has an invalid length. [ 89.962325][ T6596] pim6reg1: entered promiscuous mode [ 89.969280][ T6596] pim6reg1: entered allmulticast mode [ 90.448645][ T6681] tipc: Started in network mode [ 90.453578][ T6681] tipc: Node identity 4, cluster identity 4711 [ 90.459884][ T6681] tipc: Node number set to 4 [ 90.724063][ T6706] netlink: 'syz.1.815': attribute type 10 has an invalid length. [ 90.750865][ T6706] vlan0: entered promiscuous mode [ 90.756238][ T6706] vlan0: entered allmulticast mode [ 90.761458][ T6706] veth0_vlan: entered allmulticast mode [ 90.767203][ T6706] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 91.794563][ T29] audit: type=1400 audit(1769603222.702:1361): avc: denied { ioctl } for pid=6816 comm="syz.8.851" path="socket:[17921]" dev="sockfs" ino=17921 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.210947][ T6831] lo speed is unknown, defaulting to 1000 [ 92.243430][ T29] audit: type=1400 audit(1769603223.172:1362): avc: denied { getopt } for pid=6832 comm="syz.8.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.311078][ T6831] lo speed is unknown, defaulting to 1000 [ 92.339770][ T6823] delete_channel: no stack [ 92.362323][ T6831] lo speed is unknown, defaulting to 1000 [ 92.392533][ T6831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 92.400172][ T6836] delete_channel: no stack [ 92.445809][ T6831] lo speed is unknown, defaulting to 1000 [ 92.474905][ T6831] lo speed is unknown, defaulting to 1000 [ 92.505328][ T6831] lo speed is unknown, defaulting to 1000 [ 92.533815][ T6831] lo speed is unknown, defaulting to 1000 [ 92.554001][ T6831] lo speed is unknown, defaulting to 1000 [ 92.578890][ T6831] lo speed is unknown, defaulting to 1000 [ 92.726549][ T6831] lo speed is unknown, defaulting to 1000 [ 93.035597][ T6875] __nla_validate_parse: 10 callbacks suppressed [ 93.035614][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.9.868'. [ 93.767327][ T6945] netlink: 60 bytes leftover after parsing attributes in process `syz.9.884'. [ 93.797042][ T6945] netlink: 60 bytes leftover after parsing attributes in process `syz.9.884'. [ 94.455150][ T7006] loop8: detected capacity change from 0 to 512 [ 94.487055][ T7006] EXT4-fs (loop8): 1 orphan inode deleted [ 94.493421][ T7006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.506244][ T2117] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 94.516148][ T2117] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 94.529408][ T7006] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.568982][ T5149] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.865451][ T7044] netlink: 830 bytes leftover after parsing attributes in process `syz.8.902'. [ 95.313693][ T7074] delete_channel: no stack [ 95.363718][ T7094] nr0: port 1(hsr0) entered blocking state [ 95.370092][ T7094] nr0: port 1(hsr0) entered disabled state [ 95.376902][ T7094] hsr0: entered allmulticast mode [ 95.382047][ T7094] hsr_slave_0: entered allmulticast mode [ 95.387840][ T7094] hsr_slave_1: entered allmulticast mode [ 95.396106][ T7094] hsr0: entered promiscuous mode [ 95.447296][ T7101] netlink: 204 bytes leftover after parsing attributes in process `syz.1.921'. [ 95.765719][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.8.934'. [ 96.044722][ T7149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.518585][ T29] audit: type=1400 audit(1769603227.454:1363): avc: denied { ioctl } for pid=7202 comm="syz.8.967" path="socket:[19499]" dev="sockfs" ino=19499 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.731714][ T7236] netlink: 64 bytes leftover after parsing attributes in process `syz.0.981'. [ 96.742818][ T7236] siw: device registration error -23 [ 97.298229][ T7286] netlink: 'syz.0.1002': attribute type 9 has an invalid length. [ 97.520163][ T7302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1009'. [ 97.538735][ T29] audit: type=1400 audit(1769603228.475:1364): avc: denied { setopt } for pid=7301 comm="syz.1.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.692188][ T7317] netlink: 'syz.9.1014': attribute type 9 has an invalid length. [ 97.898851][ T7339] netlink: 'syz.8.1026': attribute type 9 has an invalid length. [ 98.174297][ T7370] netlink: 'syz.8.1039': attribute type 9 has an invalid length. [ 98.282252][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1041'. [ 98.321521][ T7350] delete_channel: no stack [ 98.340284][ T7383] netlink: 'syz.0.1045': attribute type 1 has an invalid length. [ 98.348212][ T7383] netlink: 'syz.0.1045': attribute type 4 has an invalid length. [ 98.356040][ T7383] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1045'. [ 98.651613][ T7384] delete_channel: no stack [ 98.759566][ T7408] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1055'. [ 98.776234][ T7411] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1056'. [ 98.791252][ T7408] siw: device registration error -23 [ 98.845692][ T7421] netlink: 'syz.0.1058': attribute type 9 has an invalid length. [ 99.020530][ T7449] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1068'. [ 99.054277][ T7452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7452 comm=syz.0.1066 [ 99.077672][ T7455] netlink: 'syz.4.1071': attribute type 9 has an invalid length. [ 99.085913][ T7445] netlink: 'syz.0.1066': attribute type 29 has an invalid length. [ 99.204260][ T7460] netlink: 'syz.4.1073': attribute type 1 has an invalid length. [ 99.212139][ T7460] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1073'. [ 99.265403][ T7477] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1081'. [ 99.572201][ T29] audit: type=1400 audit(1769603230.516:1365): avc: denied { read } for pid=7510 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.836092][ T7529] delete_channel: no stack [ 99.850908][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1110'. [ 99.930800][ T7561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 100.116900][ T29] audit: type=1400 audit(1769603231.056:1366): avc: denied { create } for pid=7582 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 100.381028][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1134'. [ 100.577781][ T7625] nr0: port 1(hsr0) entered blocking state [ 100.583781][ T7625] nr0: port 1(hsr0) entered disabled state [ 100.593791][ T7625] hsr0: entered allmulticast mode [ 100.598949][ T7625] hsr_slave_0: entered allmulticast mode [ 100.604764][ T7625] hsr_slave_1: entered allmulticast mode [ 100.612323][ T7625] hsr0: entered promiscuous mode [ 100.670647][ T7635] syzkaller0: entered promiscuous mode [ 100.676206][ T7635] syzkaller0: entered allmulticast mode [ 100.701861][ T29] audit: type=1400 audit(1769603231.636:1367): avc: denied { relabelfrom } for pid=7634 comm="syz.8.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 100.721867][ T29] audit: type=1400 audit(1769603231.636:1368): avc: denied { relabelto } for pid=7634 comm="syz.8.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 100.846060][ T7648] veth1_to_bond: entered allmulticast mode [ 100.998182][ T7661] bridge: RTM_NEWNEIGH with invalid ether address [ 101.272547][ T7694] bridge: RTM_NEWNEIGH with invalid ether address [ 101.979842][ T7743] delete_channel: no stack [ 101.996179][ T29] audit: type=1400 audit(1769603232.937:1369): avc: denied { write } for pid=7781 comm="syz.0.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.051010][ T7770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.190153][ T7774] delete_channel: no stack [ 102.503846][ T7850] validate_nla: 6 callbacks suppressed [ 102.503944][ T7850] netlink: 'syz.0.1237': attribute type 10 has an invalid length. [ 102.741640][ T7886] netlink: 'syz.1.1253': attribute type 9 has an invalid length. [ 102.800653][ T7847] delete_channel: no stack [ 102.911884][ T7915] netlink: 'syz.9.1267': attribute type 9 has an invalid length. [ 103.009583][ T7932] netlink: 'syz.9.1275': attribute type 1 has an invalid length. [ 103.017389][ T7932] netlink: 'syz.9.1275': attribute type 4 has an invalid length. [ 103.034656][ T7932] netlink: 'syz.9.1275': attribute type 1 has an invalid length. [ 103.042484][ T7932] netlink: 'syz.9.1275': attribute type 4 has an invalid length. [ 103.098606][ T7940] nr0: port 1(hsr0) entered blocking state [ 103.104617][ T7940] nr0: port 1(hsr0) entered disabled state [ 103.106529][ T7944] netlink: 'syz.9.1281': attribute type 9 has an invalid length. [ 103.113193][ T7940] hsr0: entered allmulticast mode [ 103.123566][ T7940] hsr_slave_0: entered allmulticast mode [ 103.133846][ T7940] hsr0: entered promiscuous mode [ 103.399451][ T7984] syzkaller0: entered promiscuous mode [ 103.404969][ T7984] syzkaller0: entered allmulticast mode [ 103.572423][ T8000] __nla_validate_parse: 12 callbacks suppressed [ 103.572444][ T8000] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1308'. [ 103.588841][ T8000] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1308'. [ 103.649547][ T8008] netlink: 'syz.0.1312': attribute type 9 has an invalid length. [ 103.680131][ T8004] netlink: 352 bytes leftover after parsing attributes in process `syz.9.1310'. [ 103.776278][ T8021] syzkaller0: entered promiscuous mode [ 103.781838][ T8021] syzkaller0: entered allmulticast mode [ 103.877713][ T8038] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1324'. [ 103.903798][ T8041] netlink: 'syz.8.1325': attribute type 9 has an invalid length. [ 104.040775][ T8053] delete_channel: no stack [ 104.045421][ T8053] delete_channel: no stack [ 104.346170][ T29] audit: type=1400 audit(1769603235.288:1370): avc: denied { create } for pid=8086 comm="syz.4.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.469023][ T8107] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1354'. [ 104.478954][ T8101] syzkaller0: entered promiscuous mode [ 104.484629][ T8101] syzkaller0: entered allmulticast mode [ 104.559175][ T8105] syzkaller0: entered promiscuous mode [ 104.564723][ T8105] syzkaller0: entered allmulticast mode [ 104.571852][ T8107] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1354'. [ 104.905227][ T8129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1362'. [ 105.507897][ T8173] delete_channel: no stack [ 105.569871][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 105.578968][ T8216] openvswitch: netlink: Flow key attr not present in new flow. [ 105.587923][ T8216] siw: device registration error -23 [ 106.289763][ T8252] syzkaller0: entered promiscuous mode [ 106.295276][ T8252] syzkaller0: entered allmulticast mode [ 106.512320][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1402'. [ 106.521330][ T8272] netlink: 348 bytes leftover after parsing attributes in process `syz.9.1402'. [ 107.832740][ T8395] delete_channel: no stack [ 107.839860][ T8416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8416 comm=syz.9.1442 [ 108.481084][ T8450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8450 comm=syz.4.1457 [ 108.824460][ T8469] validate_nla: 6 callbacks suppressed [ 108.824557][ T8469] netlink: 'syz.4.1466': attribute type 1 has an invalid length. [ 108.838026][ T8469] netlink: 'syz.4.1466': attribute type 4 has an invalid length. [ 108.845759][ T8469] __nla_validate_parse: 14 callbacks suppressed [ 108.845771][ T8469] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1466'. [ 109.024029][ T8476] netlink: 'syz.4.1466': attribute type 1 has an invalid length. [ 109.031975][ T8476] netlink: 'syz.4.1466': attribute type 4 has an invalid length. [ 109.039835][ T8476] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1466'. [ 109.338816][ T8507] netlink: 'syz.4.1480': attribute type 9 has an invalid length. [ 109.372041][ T8510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1481'. [ 109.512395][ T8475] delete_channel: no stack [ 110.034851][ T8539] netlink: 'syz.8.1491': attribute type 9 has an invalid length. [ 110.058366][ T8541] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1492'. [ 110.187971][ T8537] delete_channel: no stack [ 110.366871][ T8548] delete_channel: no stack [ 110.413713][ T8577] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1503'. [ 110.579258][ T8603] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1516'. [ 110.988288][ T8632] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1527'. [ 111.044721][ T8634] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1528'. [ 111.685088][ T8672] delete_channel: no stack [ 111.883577][ T8719] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1567'. [ 111.920839][ T8723] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1570'. [ 111.932206][ T8723] siw: device registration error -23 [ 111.979940][ T8730] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 111.990977][ T8731] nr0: port 1(hsr0) entered blocking state [ 111.996926][ T8731] nr0: port 1(hsr0) entered disabled state [ 112.003655][ T8731] hsr0: entered allmulticast mode [ 112.008827][ T8731] hsr_slave_0: entered allmulticast mode [ 112.014551][ T8731] hsr_slave_1: entered allmulticast mode [ 112.022044][ T8730] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 112.022734][ T8731] hsr0: entered promiscuous mode [ 112.120047][ T8747] syzkaller0: entered promiscuous mode [ 112.125707][ T8747] syzkaller0: entered allmulticast mode [ 112.205084][ T8751] veth1_macvtap: left promiscuous mode [ 112.281813][ T8697] delete_channel: no stack [ 112.319743][ T8763] netlink: 'syz.0.1589': attribute type 1 has an invalid length. [ 112.328001][ T8763] netlink: 'syz.0.1589': attribute type 1 has an invalid length. [ 112.669824][ T29] audit: type=1400 audit(1769603243.622:1371): avc: denied { read } for pid=8801 comm="syz.4.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.720566][ T8807] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.727083][ T8807] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 112.825426][ T8811] delete_channel: no stack [ 113.083230][ T8841] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 113.089684][ T8841] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 114.049502][ T8931] __nla_validate_parse: 12 callbacks suppressed [ 114.049523][ T8931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1665'. [ 114.139172][ T8947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1661'. [ 114.153639][ T8928] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1661'. [ 114.169207][ T8939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1661'. [ 114.213447][ T8947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1661'. [ 114.496468][ T8999] netlink: 16382 bytes leftover after parsing attributes in process `syz.4.1694'. [ 114.626671][ T9014] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1703'. [ 114.848169][ T9041] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 114.920775][ T9049] validate_nla: 4 callbacks suppressed [ 114.920787][ T9049] netlink: 'syz.8.1720': attribute type 1 has an invalid length. [ 114.934221][ T9049] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1720'. [ 114.943815][ T9049] netlink: 'syz.8.1720': attribute type 1 has an invalid length. [ 114.951554][ T9049] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1720'. [ 115.044382][ T9052] syz.8.1721: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 115.059256][ T9052] CPU: 0 UID: 0 PID: 9052 Comm: syz.8.1721 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.059328][ T9052] Tainted: [W]=WARN [ 115.059338][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.059356][ T9052] Call Trace: [ 115.059365][ T9052] [ 115.059380][ T9052] __dump_stack+0x1d/0x30 [ 115.059415][ T9052] dump_stack_lvl+0x95/0xd0 [ 115.059452][ T9052] dump_stack+0x15/0x1b [ 115.059481][ T9052] warn_alloc+0x145/0x1c0 [ 115.059578][ T9052] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 115.059618][ T9052] ? __futex_wait+0x1fd/0x260 [ 115.059685][ T9052] ? __pfx_futex_wake_mark+0x10/0x10 [ 115.059771][ T9052] ? ___slab_alloc+0xb8/0xb00 [ 115.059804][ T9052] ? avc_has_perm_noaudit+0xab/0x130 [ 115.059840][ T9052] ? xskq_create+0x36/0xe0 [ 115.059915][ T9052] vmalloc_user_noprof+0x7d/0xb0 [ 115.059945][ T9052] ? xskq_create+0x80/0xe0 [ 115.059987][ T9052] xskq_create+0x80/0xe0 [ 115.060041][ T9052] xsk_init_queue+0x91/0xe0 [ 115.060081][ T9052] xsk_setsockopt+0x477/0x640 [ 115.060255][ T9052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.060364][ T9052] __sys_setsockopt+0x184/0x200 [ 115.060411][ T9052] __x64_sys_setsockopt+0x64/0x80 [ 115.060461][ T9052] x64_sys_call+0x21d5/0x3000 [ 115.060683][ T9052] do_syscall_64+0xc0/0x2a0 [ 115.060722][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.060749][ T9052] RIP: 0033:0x7f412a49aeb9 [ 115.060797][ T9052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.060823][ T9052] RSP: 002b:00007f4128ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.060847][ T9052] RAX: ffffffffffffffda RBX: 00007f412a715fa0 RCX: 00007f412a49aeb9 [ 115.060904][ T9052] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 115.060917][ T9052] RBP: 00007f412a508c1f R08: 0000000000000004 R09: 0000000000000000 [ 115.060934][ T9052] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 115.060950][ T9052] R13: 00007f412a716038 R14: 00007f412a715fa0 R15: 00007ffe3c54a4a8 [ 115.060973][ T9052] [ 115.061011][ T9052] Mem-Info: [ 115.276940][ T9052] active_anon:11042 inactive_anon:3 isolated_anon:0 [ 115.276940][ T9052] active_file:21258 inactive_file:2528 isolated_file:0 [ 115.276940][ T9052] unevictable:0 dirty:63 writeback:0 [ 115.276940][ T9052] slab_reclaimable:3717 slab_unreclaimable:49389 [ 115.276940][ T9052] mapped:29947 shmem:188 pagetables:1667 [ 115.276940][ T9052] sec_pagetables:0 bounce:0 [ 115.276940][ T9052] kernel_misc_reclaimable:0 [ 115.276940][ T9052] free:1845563 free_pcp:7581 free_cma:0 [ 115.322181][ T9052] Node 0 active_anon:44168kB inactive_anon:12kB active_file:85032kB inactive_file:10112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119788kB dirty:252kB writeback:0kB shmem:752kB kernel_stack:4400kB pagetables:6668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.349532][ T9052] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.379276][ T9052] lowmem_reserve[]: 0 2879 7858 7858 [ 115.379503][ T2991] ================================================================== [ 115.379532][ T2991] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last [ 115.379571][ T2991] [ 115.379579][ T2991] write to 0xffffffff86a7dd38 of 8 bytes by task 9052 on cpu 0: [ 115.384936][ T9052] Node 0 [ 115.392944][ T2991] prb_reserve_in_last+0x9f1/0xb30 [ 115.392985][ T2991] vprintk_store+0x457/0x910 [ 115.400763][ T9052] DMA32 free:2944752kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948384kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 115.403052][ T2991] vprintk_emit+0x1a4/0x600 [ 115.403087][ T2991] vprintk_default+0x26/0x30 [ 115.410765][ T9052] lowmem_reserve[]: [ 115.413688][ T2991] vprintk+0x1d/0x30 [ 115.413713][ T2991] _printk+0x79/0xa0 [ 115.413733][ T2991] __show_mem+0xd28/0x1470 [ 115.418862][ T9052] 0 [ 115.423436][ T2991] warn_alloc+0x1a1/0x1c0 [ 115.423470][ T2991] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 115.423502][ T2991] vmalloc_user_noprof+0x7d/0xb0 [ 115.423535][ T2991] xskq_create+0x80/0xe0 [ 115.423572][ T2991] xsk_init_queue+0x91/0xe0 [ 115.423607][ T2991] xsk_setsockopt+0x477/0x640 [ 115.458025][ T9052] 0 [ 115.458690][ T2991] __sys_setsockopt+0x184/0x200 [ 115.458736][ T2991] __x64_sys_setsockopt+0x64/0x80 [ 115.463393][ T9052] 4978 [ 115.467163][ T2991] x64_sys_call+0x21d5/0x3000 [ 115.467201][ T2991] do_syscall_64+0xc0/0x2a0 [ 115.471265][ T9052] 4978 [ 115.475009][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.475039][ T2991] [ 115.475046][ T2991] read to 0xffffffff86a7dd30 of 16 bytes by task 2991 on cpu 1: [ 115.475068][ T2991] _prb_read_valid+0x1bc/0x950 [ 115.479488][ T9052] [ 115.481987][ T2991] prb_read_valid+0x3c/0x60 [ 115.482019][ T2991] syslog_print+0x164/0x560 [ 115.486511][ T9052] Node 0 [ 115.492177][ T2991] do_syslog+0x52b/0x7f0 [ 115.492212][ T2991] __x64_sys_syslog+0x41/0x50 [ 115.492242][ T2991] x64_sys_call+0x27ce/0x3000 [ 115.500081][ T9052] Normal free:4422140kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44168kB inactive_anon:12kB active_file:85032kB inactive_file:10112kB unevictable:0kB writepending:252kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:26688kB local_pcp:17024kB free_cma:0kB [ 115.501419][ T2991] do_syscall_64+0xc0/0x2a0 [ 115.501456][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.501480][ T2991] [ 115.506244][ T9052] lowmem_reserve[]: [ 115.510680][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 115.510701][ T2991] CPU: 1 UID: 0 PID: 2991 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.510750][ T2991] Tainted: [W]=WARN [ 115.513277][ T9052] 0 [ 115.518190][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.518210][ T2991] ================================================================== [ 115.678663][ T9052] 0 0 0 [ 115.681670][ T9052] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.695004][ T9052] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944752kB [ 115.711604][ T9052] Node 0 Normal: 2883*4kB (UME) 1677*8kB (UME) 408*16kB (UME) 266*32kB (UM) 174*64kB (UM) 116*128kB (UME) 99*256kB (UME) 55*512kB (UME) 38*1024kB (U) 36*2048kB (UM) 1023*4096kB (UM) = 4422324kB [ 115.731201][ T9052] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 115.740687][ T9052] 23971 total pagecache pages [ 115.745446][ T9052] 3 pages in swap cache [ 115.749685][ T9052] Free swap = 124984kB [ 115.753933][ T9052] Total swap = 124996kB [ 115.758141][ T9052] 2097051 pages RAM [ 115.761996][ T9052] 0 pages HighMem/MovableOnly [ 115.766736][ T9052] 81555 pages reserved