last executing test programs: 2m33.397434482s ago: executing program 2 (id=2279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800471000300000000000069078ac141400ac1e0001860600"/46, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000040000000000"], 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES16=r0, @ANYBLOB='\x00'/20, @ANYRES16=r1, @ANYRESHEX, @ANYBLOB="00000000000000000000000000000000000000000000000000000000af018a86d2bfa99731e02751ac1c7e75230115bf23602e0d096e42a477ceebb924b0386f"], 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3000c81c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x74c, &(0x7f0000000f40)="$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") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0800700400000000235e000005000448d3dd5862c28e0fcfedeb1aab008f826114afa8871ef5ad9fd6d70149ad55d6cb9d2479fe95702c1a99c96fe54f5166a69f28e3ff6aa531da00168996dfb1eede20"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008054) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r2}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70504000000000085000000a50000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000c40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x5, &(0x7f00000003c0)={0x0, 0x1, 0x0, @thr={&(0x7f0000000340)="ced577f8f25a340d16b2f658306e45bf9adfbac4cac42d850e0d1f71eb1459bfe376abf90adcb638d16fc83681432b97faeb4319353dc700979172d015e8710c9abbcd377de0699204ec92299a8bd8bb59c364c9e408aef6996df338b1c052e2ad681eb514a36a8448e5c1", &(0x7f0000000200)="149daeb2129893ddf682054a1fa6a0e4580db1d24a2e0f25d9624f0cfbae1d1244172980d2b7a6423642a6cf26"}}, &(0x7f0000000400)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x100000, 0x2, 0x800000, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r9, &(0x7f0000000700)=[{&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000800)=""/144, 0x90}], 0x2) 2m32.565038148s ago: executing program 2 (id=2294): r0 = openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 2m32.46429665s ago: executing program 2 (id=2299): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340), &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0], 0x1) 2m32.457712891s ago: executing program 2 (id=2302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f000004c000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 2m32.363361883s ago: executing program 2 (id=2305): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffedf, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) nanosleep(&(0x7f0000000240), 0x0) 2m32.080444777s ago: executing program 2 (id=2307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f000004c000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 2m32.080056578s ago: executing program 32 (id=2307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ffc9feb}]}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e4, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f000004c000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) 3.287343086s ago: executing program 0 (id=4963): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) fstatfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000c80)={'syztnl2\x00', 0x0, 0x29, 0x65, 0x4, 0x8, 0x0, @mcast1, @local, 0x40, 0x8, 0x2, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x8, 0x8, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x8010, 0x8, 0x2ffd}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f0000000880), 0x0, 0x0, &(0x7f0000000a80)=""/200, 0xc8}}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) brk(0x8) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8000}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x6, 0x27, 0x3, 0x80000000}, {0x5, 0x6, 0xab, 0x1}, {0xff, 0x4, 0x4, 0x5}, {0x1, 0xbd, 0x1, 0x10005}, {0x7f, 0xe, 0x1, 0xc2b}, {0xc, 0x0, 0x6, 0x9}]}, 0x10) 3.224209177s ago: executing program 5 (id=4966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x8a, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 3.155243338s ago: executing program 5 (id=4968): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000580), 0x0) recvmmsg(r0, 0x0, 0x0, 0x1a000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 3.052735831s ago: executing program 5 (id=4970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') lseek(r4, 0x40000000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r7, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',^.i:-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'veth0_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x25531395d5936207) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) 2.468837552s ago: executing program 0 (id=4979): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x66, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty}}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1a000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x1000) getsockname$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 2.006983141s ago: executing program 1 (id=4989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') lseek(r5, 0x40000000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r8, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',^.i:-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'veth0_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x25531395d5936207) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) 2.005500981s ago: executing program 0 (id=4990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') lseek(r4, 0x40000000, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r7, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',^.i:-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'veth0_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x25531395d5936207) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r9, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2) 1.960525932s ago: executing program 5 (id=4991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) fstatfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000c80)={'syztnl2\x00', 0x0, 0x29, 0x65, 0x4, 0x8, 0x0, @mcast1, @local, 0x40, 0x8, 0x2, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x8, 0x8, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x8010, 0x8, 0x2ffd}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f0000000880), 0x0, 0x0, &(0x7f0000000a80)=""/200, 0xc8}}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) brk(0x8) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8000}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x6, 0x27, 0x3, 0x80000000}, {0x5, 0x6, 0xab, 0x1}, {0xff, 0x4, 0x4, 0x5}, {0x1, 0xbd, 0x1, 0x10005}, {0x7f, 0xe, 0x1, 0xc2b}, {0xc, 0x0, 0x6, 0x9}]}, 0x10) 1.152322287s ago: executing program 5 (id=4999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x4008090) 1.083727859s ago: executing program 0 (id=5000): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) 1.03057502s ago: executing program 0 (id=5002): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='workqueue_execute_end\x00', r3}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000005c0)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x7460) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000008000000000004b64ffec850000006d00000085005a4c3687000095dd0996ae9e17bb32345b85cfac0e9b75c90c427b208f2cffc867a4b7b2da94f837e0aad21eae6702b333df943cd923841f76a7408755124f844a56f3032191d9df8c4b083415fc0c390df53216936e780b74d9fa8ec0120eeb73e88b49272a04222c4a43417444cd57c99fd43cb90dd0f8e38de5f321bb86dcd65826e4ac2740a6fd801dcdae7620fef365f01d0c1f786bed228c021cd4f843df2bd8794ec5530665f0a00ac162"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xfffffe7e, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5, 0x0, 0x4}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240), 0x111}}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000600)=@gettaction={0x2c, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x464}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}]}}]}, 0x3c}}, 0x2000c800) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.01330528s ago: executing program 3 (id=5003): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b708000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRES16], 0xa8}}, 0x20000086) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x14, &(0x7f0000001280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff000000002dc600020000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESDEC=r0, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$eJzs3UtvG9fdx/HfUNT1AYwHbREYhmOd2A0goy5NUrECwV2UHQ6lSUkOMUMV0ipwYykwTDmt7QK1Nqk2vQDtG+gumyz6Igp0nXXfQJcFgnZXoBsWc+NFnBFp3ew234+Q8HDOf+b85+I5GpFzRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJZdL5crlppue2fX5LPrvtc6pT5e2rzuxoW7U9uVrPA/LS3pejzp+neG1e+E/7utm/G7m1oKX5Z09H/v/P/DbxcL6fynJHQWet0Fvnh19PRRr7f//Gyt9a2zzHcpJjJRYYa5tpy2G3huq7blGDfwzObGRvn+diMwDbfpBHtB12kZ23cKXc83a/ZdU9ncXDdOac/baW/Va00nnfjh96vl8ob5aDHZ/fc/KgX2tttsuu2tKCasDmMWB0eIU2sZc/Ckt78+LckwqDJLUHVaULVcrVYq1Wpl48Hmgw/L5eLEhPIJmogYHrRvz87HVbqgMzdwfoWw//+bJTW1pLZ2tCuT+WOrLl+eWjn1ibT/f/++c2q7o/1/2stfH1bfUNT/34rf3crr/3NyMTLRDFk1Vs70s/280Csd6akeqaee9vX8Ypa7enEZXu7PllSUXAXy5KqlmrbkyCRTjDa1oQ2V9bG21VAgo4ZcNeUo0J4CdeWoFe0TX45q6sqTL6M12boro4o2tal1GTkqaU+edtTWluqq6V/9fv9AT6Ltvn5KjkqDKrMEFQfH4GRQXv//08/jOV6v/8f/nsGxM0MM8Mb1k+v/fHNZE1cvLyMAAAAAAHDRrOiv71b02f27kvpquE2n/KbTAgAAAAAAFyj65P9m+DIflt6VlXP937/63AAAAAAAwMWwonvsLEkr0Zf6reGdULN8CSDz5gAAAAAAAPB2iT7/v7Ug9aOh1VZlvdb1PwAAAAAA+C/w25Ex9ovpGLv99GP9gqSgs2j9+R+L8uet487ud63DWlhTO0xiJr4B0G3csIqKB+qNxutdkBS9s52bVjI+cDIIphUP7Ct9fTBtrH/LP5HAwlz654uMBK4djSSwUUze6fd6L455L2n38VFBUU3cykrDbTol22s+rKhWu1boOrvdXzx78kvJH6znwZPefumTz3qPo1yOw0nHh2Een4+lU5iWy8tovIXonousNV5WI23yd+3WihW1W07Xf061w8JoQ7Ot/691O465vRK/rhyle0DWr5JCpRTtsuHaR6NDWMMsKifXPGtH5GSxFGVxJ465s3Ynfknzi/fC0vfmpGppch/4o1lUR7OYvi2sf05siylZhMfCepjFX8IF5WSx/npZTOwRAHhTDoa9UDSI+eQY+yf73Yyz3HLymnuWm967/3C8lZd/7Mc3HM5JRfUXk+6ln9+vKDyjr8VhC/Eo7sUbGWf0ctKvLCnnjF4+R+8WtvWn4TOQkqfVJDXFQRb/7vf7DytRu3840at+Ec7wRW67QbM6F27C+y8PfxYNgB/6dP/T/WfV6vpG+YNy+UFV89FqJC/0PQCADNOfsTMesTTszwZ99weDq+rHf38/Lo31u98afKWgpE/0mXp6rHvpIwRWs9tdGfkawr3Jq9YwNvqtYzy2onu5V3VRXzoSWx3EziudZfz3hWHs+mXvBgAArtTtKf3wyf4/69r9XnrdvXYj87p7vC8/+YTgvNjKFW8JAAC+ORz/a2ul+xvL993Ox5XNzUqtu+0Y37N/bHy3vuUYt911fHu71t5yTMf3up7tNU3H16JbdwIT7HQ6nt81Dc83HS9wd6Mnv5vk0e+B06q1u64ddJpOLXCM7bW7Nbtr6m5gm87Oj5pusO340cxBx7HdhmvXuq7XNoG3LNspGRM4zkigW3faXbfhhsW26fhuq+bvmZ94zZ2WY+pOYPtup+vFC0zbctsNz29Fiy2pf9qDDgEA+MZ48ero6aNeb//5KYVjxYX0+2hJ1VcZwQtZC3zDqwgAAE6glwYAAAAAAAAAAAAAAAAAAAAA4O03y/1/pxbSmwLTKfPKCJYGU35+baYlWxpO+fKv58rwDIXCySnJSLv96bN/FReKWTHLYWFBUi/d/KMxx1MTm8uYK6+wOtOaKi4UL34bLktZR8KlFX5wMH4cTsSElZlVi4OtWjz/P4eswrMvc6qmH1GL49tw4bQVHC8UJT1fOMcuuNrzEICr958AAAD//7gMOck=") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 993.32798ms ago: executing program 1 (id=5004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 942.920431ms ago: executing program 3 (id=5005): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0) 916.416772ms ago: executing program 1 (id=5006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x8a, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 901.688802ms ago: executing program 3 (id=5008): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) writev(r0, &(0x7f0000000180), 0x0) 857.300003ms ago: executing program 3 (id=5009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) fstatfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000c80)={'syztnl2\x00', 0x0, 0x29, 0x65, 0x4, 0x8, 0x0, @mcast1, @local, 0x40, 0x8, 0x2, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x8, 0x8, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x8010, 0x8, 0x2ffd}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f0000000880), 0x0, 0x0, &(0x7f0000000a80)=""/200, 0xc8}}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) brk(0x8) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8000}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x6, 0x27, 0x3, 0x80000000}, {0x5, 0x6, 0xab, 0x1}, {0xff, 0x4, 0x4, 0x5}, {0x1, 0xbd, 0x1, 0x10005}, {0x7f, 0xe, 0x1, 0xc2b}, {0xc, 0x0, 0x6, 0x9}]}, 0x10) 856.873783ms ago: executing program 1 (id=5010): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df22f77303c6895a8a9e41b12b97510f561bc2e4ee706a19e02f31bf2facf144960e57edc8337ba2b83accaa532145fc1b05aa42d18a69668308153e37d6cba0c7f76deab5eb00edf94382d09cfe9d1d50ec41ffebc62ae63d7ed6993ad9", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff210002f922eaac39ab491cec071d31eebd6526d7a8ddd052d3", 0xd6}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 828.414064ms ago: executing program 4 (id=5011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') lseek(r4, 0x40000000, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r7, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',^.i:-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'veth0_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x25531395d5936207) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r9, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2) 599.385058ms ago: executing program 4 (id=5012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x800000000000000}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) syz_io_uring_setup(0x10d2, &(0x7f00000000c0)={0x0, 0xb0f2, 0x0, 0x3, 0x60000002}, &(0x7f0000000080)=0x0, &(0x7f0000000300)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000005c0)}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) 525.56966ms ago: executing program 5 (id=5013): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b5d345087f70e06d038e7ff7fc6e5539b0d47078b089b34073b68090890e0878f0e1ac6e7049b344a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b33070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a97370614060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2040400) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6bce0568bdbef75e4667376c6507c51094765fcc21aa8810d5a760327a50bc67e6f84d20215ae0b84a847e4a948b5258b28626336e159ad54d4c00f287cdf1bade52605c3e691", 0x49}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7fff}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r10) 441.890181ms ago: executing program 4 (id=5014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}], 0x40}}], 0x2, 0x2400c010) 407.021762ms ago: executing program 4 (id=5015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') lseek(r5, 0x40000000, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r8, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',^.i:-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'veth0_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x25531395d5936207) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) 325.904253ms ago: executing program 1 (id=5016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a0004002800002d8191cd07", @ANYRES32=r4], 0x20, 0x2400e044}, 0x0) 258.186935ms ago: executing program 1 (id=5017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') lseek(r4, 0x40000000, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r7, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ',^.i:-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'veth0_to_hsr\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x25531395d5936207) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r9, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2) 174.729296ms ago: executing program 0 (id=5018): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df22f77303c6895a8a9e41b12b97510f561bc2e4ee706a19e02f31bf2facf144960e57edc8337ba2b83accaa532145fc1b05aa42d18a69668308153e37d6cba0c7f76deab5eb00edf94382d09cfe9d1d50ec41ffebc62ae63d7ed6993ad9", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="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", 0x15a}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 85.298418ms ago: executing program 4 (id=5019): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0) 61.881128ms ago: executing program 3 (id=5020): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) writev(r0, &(0x7f0000000180), 0x0) 468.29µs ago: executing program 3 (id=5021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) 0s ago: executing program 4 (id=5022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) kernel console output (not intermixed with test programs): 1629][ T29] audit: type=1326 audit(1757271140.315:11887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 197.750819][ T29] audit: type=1326 audit(1757271140.346:11888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 197.774452][ T29] audit: type=1326 audit(1757271140.346:11889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 197.798076][ T29] audit: type=1326 audit(1757271140.346:11890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 197.821724][ T29] audit: type=1326 audit(1757271140.346:11891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 197.845402][ T29] audit: type=1326 audit(1757271140.346:11892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 197.869003][ T29] audit: type=1326 audit(1757271140.357:11893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 197.892649][ T29] audit: type=1326 audit(1757271140.357:11894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 197.916229][ T29] audit: type=1326 audit(1757271140.357:11895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 197.939800][ T29] audit: type=1326 audit(1757271140.357:11896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.1.3669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84f89ad550 code=0x7ffc0000 [ 198.092698][T13675] loop4: detected capacity change from 0 to 164 [ 198.123856][T13675] Unable to read rock-ridge attributes [ 198.154303][T13675] Unable to read rock-ridge attributes [ 198.543256][T13698] IPv6: Can't replace route, no match found [ 198.632404][T13706] loop3: detected capacity change from 0 to 1024 [ 198.658410][T13706] EXT4-fs: Ignoring removed orlov option [ 198.688846][T13706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.864956][T13718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.873714][T13718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.992787][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.056176][T13724] netlink: 'syz.5.3693': attribute type 10 has an invalid length. [ 199.113725][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.122596][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.143516][T13733] __nla_validate_parse: 41 callbacks suppressed [ 199.143527][T13733] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3695'. [ 199.158726][T13733] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3695'. [ 199.179189][T13733] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3695'. [ 199.188170][T13733] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3695'. [ 199.214758][T13733] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3695'. [ 199.223751][T13733] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3695'. [ 199.384182][T13740] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3699'. [ 199.393184][T13740] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3699'. [ 199.415777][T13740] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3699'. [ 199.424943][T13740] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3699'. [ 199.562822][T13751] loop1: detected capacity change from 0 to 8192 [ 199.644385][T13753] team0: Port device geneve1 removed [ 199.644678][T13763] netlink: 'syz.3.3706': attribute type 10 has an invalid length. [ 199.667857][T13763] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 199.951840][T13774] 9pnet_virtio: no channels available for device syz [ 199.991108][T13776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.002599][T13776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.824880][T13818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.834698][T13818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.839605][T13813] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.924252][T13830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.933104][T13830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.780873][T13886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.789439][T13886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.924366][T13895] loop5: detected capacity change from 0 to 2048 [ 201.963973][T13895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.986671][T13895] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.303556][T13912] loop4: detected capacity change from 0 to 1024 [ 202.310798][T13912] EXT4-fs: Ignoring removed orlov option [ 202.318751][T13912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.443859][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 202.443874][ T29] audit: type=1400 audit(1757271145.333:12257): avc: denied { create } for pid=13911 comm="syz.4.3754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 202.471991][ T29] audit: type=1404 audit(1757271145.333:12258): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 202.487059][ T29] audit: type=1404 audit(1757271145.365:12259): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 202.502492][ T29] audit: type=1326 audit(1757271145.365:12260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13911 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260b3bebe9 code=0x7ffc0000 [ 202.526136][ T29] audit: type=1326 audit(1757271145.365:12261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13911 comm="syz.4.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260b3bebe9 code=0x7ffc0000 [ 202.561185][ T29] audit: type=1400 audit(1757271145.459:12262): avc: denied { unmount } for pid=10616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 202.582086][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.593338][ T29] audit: type=1400 audit(1757271145.491:12263): avc: denied { read write } for pid=10616 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.618217][ T29] audit: type=1400 audit(1757271145.491:12264): avc: denied { open } for pid=10616 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.642532][ T29] audit: type=1400 audit(1757271145.491:12265): avc: denied { ioctl } for pid=10616 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.651022][T13918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.669104][ T29] audit: type=1400 audit(1757271145.554:12266): avc: denied { name_bind } for pid=13917 comm="syz.4.3755" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 202.677598][T13918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.716348][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.793129][T13928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.802015][T13928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.891347][T13946] loop3: detected capacity change from 0 to 164 [ 202.898710][T13946] Unable to read rock-ridge attributes [ 202.910116][T13946] Unable to read rock-ridge attributes [ 202.927942][T13944] tipc: Started in network mode [ 202.932860][T13944] tipc: Node identity f6fc72b3a9a9, cluster identity 4711 [ 202.940003][T13944] tipc: Enabled bearer , priority 0 [ 202.951407][T13944] tipc: Disabling bearer [ 203.153582][T13965] loop5: detected capacity change from 0 to 8192 [ 203.193012][T13966] syz2: rxe_newlink: already configured on veth0_to_hsr [ 203.376304][T13981] loop1: detected capacity change from 0 to 164 [ 203.405578][T13981] Unable to read rock-ridge attributes [ 203.419329][T13981] Unable to read rock-ridge attributes [ 203.476900][T13986] loop4: detected capacity change from 0 to 1024 [ 203.483975][T13986] EXT4-fs: Ignoring removed orlov option [ 203.500512][T13986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.520937][T13987] tipc: Started in network mode [ 203.525865][T13987] tipc: Node identity 4e2aa5327927, cluster identity 4711 [ 203.533178][T13987] tipc: Enabled bearer , priority 0 [ 203.541157][T13987] tipc: Disabling bearer [ 203.650949][T13995] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 203.712581][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.930845][T14012] __nla_validate_parse: 33 callbacks suppressed [ 203.930862][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3789'. [ 203.938829][T14017] loop5: detected capacity change from 0 to 1024 [ 203.961789][T14017] EXT4-fs: Ignoring removed orlov option [ 203.992063][T14017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.024712][T14024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3794'. [ 204.173503][T14028] loop4: detected capacity change from 0 to 2048 [ 204.201757][T14028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.227992][T14028] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.417552][T14047] bond0: (slave dummy0): Releasing backup interface [ 204.480789][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.488387][T14050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 204.592323][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3805'. [ 204.770989][T14074] tipc: Enabled bearer , priority 0 [ 204.778805][T14074] tipc: Disabling bearer [ 204.863836][T14079] 9pnet: Unknown protocol version 9 [ 204.990392][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.132889][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3817'. [ 205.336683][T14108] tipc: Enabled bearer , priority 0 [ 205.344525][T14108] tipc: Disabling bearer [ 205.767136][T14132] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.152457][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3836'. [ 206.201914][T14154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.220146][T14154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.291577][T14162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14162 comm=syz.1.3843 [ 206.304130][T14162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14162 comm=syz.1.3843 [ 206.322753][T14162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=14162 comm=syz.1.3843 [ 206.383129][T14162] loop1: detected capacity change from 0 to 512 [ 206.403927][T14162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.404777][T14162] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.465645][ T6281] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 206.480129][ T6281] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28 [ 206.483241][T14170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.492689][ T6281] EXT4-fs (loop1): This should not happen!! Data will be lost [ 206.492689][ T6281] [ 206.518453][ T6281] EXT4-fs (loop1): Total free blocks count 0 [ 206.524588][ T6281] EXT4-fs (loop1): Free/Dirty block details [ 206.530511][ T6281] EXT4-fs (loop1): free_blocks=65280 [ 206.535863][ T6281] EXT4-fs (loop1): dirty_blocks=1029 [ 206.541148][ T6281] EXT4-fs (loop1): Block reservation details [ 206.547252][ T6281] EXT4-fs (loop1): i_reserved_data_blocks=1029 [ 206.562520][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.600988][T14183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3850'. [ 206.692377][T14189] tipc: Enabled bearer , priority 0 [ 206.701375][T14189] tipc: Disabling bearer [ 206.959652][T14214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.971515][T14214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.041494][T14219] loop1: detected capacity change from 0 to 2048 [ 207.083352][T14219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.095910][T14219] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.178192][T14226] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 207.178192][T14226] program syz.0.3867 not setting count and/or reply_len properly [ 207.391119][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 207.391132][ T29] audit: type=1400 audit(1757271150.530:12772): avc: denied { relabelfrom } for pid=14242 comm="syz.3.3875" name="PACKET" dev="sockfs" ino=43408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.391277][T14243] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 207.407836][ T29] audit: type=1400 audit(1757271150.530:12773): avc: denied { mac_admin } for pid=14242 comm="syz.3.3875" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.433923][T14243] loop3: detected capacity change from 0 to 1024 [ 207.459159][T14245] FAULT_INJECTION: forcing a failure. [ 207.459159][T14245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.472217][T14245] CPU: 0 UID: 0 PID: 14245 Comm: syz.0.3876 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 207.472346][T14245] Tainted: [W]=WARN [ 207.472353][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.472363][T14245] Call Trace: [ 207.472368][T14245] [ 207.472374][T14245] __dump_stack+0x1d/0x30 [ 207.472394][T14245] dump_stack_lvl+0xe8/0x140 [ 207.472416][T14245] dump_stack+0x15/0x1b [ 207.472434][T14245] should_fail_ex+0x265/0x280 [ 207.472501][T14245] should_fail+0xb/0x20 [ 207.472521][T14245] should_fail_usercopy+0x1a/0x20 [ 207.472542][T14245] _copy_to_user+0x20/0xa0 [ 207.472568][T14245] simple_read_from_buffer+0xb5/0x130 [ 207.472607][T14245] proc_fail_nth_read+0x10e/0x150 [ 207.472630][T14245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.472658][T14245] vfs_read+0x1a5/0x770 [ 207.472686][T14245] ? __rcu_read_unlock+0x4f/0x70 [ 207.472710][T14245] ? __fget_files+0x184/0x1c0 [ 207.472734][T14245] ksys_read+0xda/0x1a0 [ 207.472753][T14245] __x64_sys_read+0x40/0x50 [ 207.472846][T14245] x64_sys_call+0x27bc/0x2ff0 [ 207.472864][T14245] do_syscall_64+0xd2/0x200 [ 207.472896][T14245] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.472920][T14245] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 207.472983][T14245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.473075][T14245] RIP: 0033:0x7f8571c4d5fc [ 207.473091][T14245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 207.473110][T14245] RSP: 002b:00007f85706b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.473130][T14245] RAX: ffffffffffffffda RBX: 00007f8571e85fa0 RCX: 00007f8571c4d5fc [ 207.473189][T14245] RDX: 000000000000000f RSI: 00007f85706b70a0 RDI: 0000000000000004 [ 207.473201][T14245] RBP: 00007f85706b7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.473215][T14245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.473228][T14245] R13: 00007f8571e86038 R14: 00007f8571e85fa0 R15: 00007ffd2bc35958 [ 207.473246][T14245] [ 207.535749][ T29] audit: type=1400 audit(1757271150.562:12774): avc: denied { relabelto } for pid=14242 comm="syz.3.3875" name="PACKET" dev="sockfs" ino=43408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:iptables_unit_file_t:s0" [ 207.709294][T14243] EXT4-fs: Ignoring removed orlov option [ 207.714995][T14243] EXT4-fs: test_dummy_encryption option not supported [ 207.727299][ T29] audit: type=1400 audit(1757271150.866:12775): avc: denied { mounton } for pid=14242 comm="syz.3.3875" path="/251/file1" dev="tmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.750226][ T29] audit: type=1326 audit(1757271150.877:12776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 207.777576][ T29] audit: type=1326 audit(1757271150.887:12777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 207.801188][ T29] audit: type=1326 audit(1757271150.887:12778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 207.825100][ T29] audit: type=1326 audit(1757271150.887:12779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 207.848864][ T29] audit: type=1326 audit(1757271150.887:12780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 207.872430][ T29] audit: type=1326 audit(1757271150.887:12781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 207.878186][T14259] FAULT_INJECTION: forcing a failure. [ 207.878186][T14259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.909277][T14259] CPU: 0 UID: 0 PID: 14259 Comm: syz.4.3882 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 207.909304][T14259] Tainted: [W]=WARN [ 207.909309][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.909320][T14259] Call Trace: [ 207.909325][T14259] [ 207.909331][T14259] __dump_stack+0x1d/0x30 [ 207.909349][T14259] dump_stack_lvl+0xe8/0x140 [ 207.909418][T14259] dump_stack+0x15/0x1b [ 207.909432][T14259] should_fail_ex+0x265/0x280 [ 207.909454][T14259] should_fail+0xb/0x20 [ 207.909470][T14259] should_fail_usercopy+0x1a/0x20 [ 207.909542][T14259] _copy_from_iter+0xd2/0xe80 [ 207.909598][T14259] ? __build_skb_around+0x1a0/0x200 [ 207.909618][T14259] ? __alloc_skb+0x223/0x320 [ 207.909640][T14259] netlink_sendmsg+0x471/0x6b0 [ 207.909666][T14259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.909688][T14259] __sock_sendmsg+0x142/0x180 [ 207.909854][T14259] ____sys_sendmsg+0x31e/0x4e0 [ 207.909881][T14259] ___sys_sendmsg+0x17b/0x1d0 [ 207.909922][T14259] __x64_sys_sendmsg+0xd4/0x160 [ 207.910024][T14259] x64_sys_call+0x191e/0x2ff0 [ 207.910042][T14259] do_syscall_64+0xd2/0x200 [ 207.910068][T14259] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.910097][T14259] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 207.910161][T14259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.910216][T14259] RIP: 0033:0x7f260b3bebe9 [ 207.910228][T14259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.910243][T14259] RSP: 002b:00007f2609dfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.910259][T14259] RAX: ffffffffffffffda RBX: 00007f260b5f6090 RCX: 00007f260b3bebe9 [ 207.910270][T14259] RDX: 0000000000040050 RSI: 0000200000000280 RDI: 0000000000000006 [ 207.910280][T14259] RBP: 00007f2609dfe090 R08: 0000000000000000 R09: 0000000000000000 [ 207.910290][T14259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.910318][T14259] R13: 00007f260b5f6128 R14: 00007f260b5f6090 R15: 00007ffd37adb028 [ 207.910337][T14259] [ 208.155417][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3884'. [ 208.193691][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.280551][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3888'. [ 208.398151][T14287] tipc: Started in network mode [ 208.403115][T14287] tipc: Node identity aad0375678b3, cluster identity 4711 [ 208.410351][T14287] tipc: Enabled bearer , priority 0 [ 208.418646][T14287] tipc: Disabling bearer [ 208.440762][T14295] loop3: detected capacity change from 0 to 164 [ 208.453208][T14295] Unable to read rock-ridge attributes [ 208.454990][T14298] FAULT_INJECTION: forcing a failure. [ 208.454990][T14298] name failslab, interval 1, probability 0, space 0, times 0 [ 208.461033][T14295] Unable to read rock-ridge attributes [ 208.471462][T14298] CPU: 1 UID: 0 PID: 14298 Comm: syz.5.3896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.471499][T14298] Tainted: [W]=WARN [ 208.471507][T14298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.471522][T14298] Call Trace: [ 208.471528][T14298] [ 208.471536][T14298] __dump_stack+0x1d/0x30 [ 208.471561][T14298] dump_stack_lvl+0xe8/0x140 [ 208.471653][T14298] dump_stack+0x15/0x1b [ 208.471707][T14298] should_fail_ex+0x265/0x280 [ 208.471736][T14298] should_failslab+0x8c/0xb0 [ 208.471815][T14298] __kmalloc_noprof+0xa5/0x3e0 [ 208.471846][T14298] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 208.471891][T14298] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 208.471949][T14298] genl_family_rcv_msg_doit+0x48/0x1b0 [ 208.471986][T14298] ? selinux_capable+0x31/0x40 [ 208.472019][T14298] ? security_capable+0x83/0x90 [ 208.472077][T14298] ? ns_capable+0x7d/0xb0 [ 208.472144][T14298] genl_rcv_msg+0x422/0x460 [ 208.472220][T14298] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 208.472251][T14298] netlink_rcv_skb+0x123/0x220 [ 208.472278][T14298] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.472377][T14298] genl_rcv+0x28/0x40 [ 208.472409][T14298] netlink_unicast+0x5bd/0x690 [ 208.472439][T14298] netlink_sendmsg+0x58b/0x6b0 [ 208.472559][T14298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.472590][T14298] __sock_sendmsg+0x142/0x180 [ 208.472708][T14298] ____sys_sendmsg+0x31e/0x4e0 [ 208.472744][T14298] ___sys_sendmsg+0x17b/0x1d0 [ 208.472797][T14298] __x64_sys_sendmsg+0xd4/0x160 [ 208.472897][T14298] x64_sys_call+0x191e/0x2ff0 [ 208.472924][T14298] do_syscall_64+0xd2/0x200 [ 208.472960][T14298] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.473048][T14298] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.473145][T14298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.473171][T14298] RIP: 0033:0x7f5c729aebe9 [ 208.473188][T14298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.473209][T14298] RSP: 002b:00007f5c71417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.473231][T14298] RAX: ffffffffffffffda RBX: 00007f5c72be5fa0 RCX: 00007f5c729aebe9 [ 208.473246][T14298] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 208.473299][T14298] RBP: 00007f5c71417090 R08: 0000000000000000 R09: 0000000000000000 [ 208.473313][T14298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.473327][T14298] R13: 00007f5c72be6038 R14: 00007f5c72be5fa0 R15: 00007fff20158258 [ 208.473391][T14298] [ 208.505940][T14296] loop1: detected capacity change from 0 to 2048 [ 208.782970][T14296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.784835][T14312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.804990][T14296] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.815796][T14307] loop4: detected capacity change from 0 to 1024 [ 208.823583][T14307] EXT4-fs: Ignoring removed orlov option [ 208.836606][T14307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.850922][T14312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.004277][T14317] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 209.020703][T14321] 9pnet: Unknown protocol version 9p200 [ 209.092957][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.180201][T14326] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.333949][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.426314][T14335] loop5: detected capacity change from 0 to 164 [ 209.475421][T14335] Unable to read rock-ridge attributes [ 209.501962][T14335] Unable to read rock-ridge attributes [ 209.753011][T14346] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.941632][T14357] loop5: detected capacity change from 0 to 1024 [ 209.959783][T14357] EXT4-fs: Ignoring removed orlov option [ 210.013108][T14357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.232894][T14371] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 210.278064][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.403165][T14376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.449175][T14382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.472446][T14382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.571726][T14397] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3927'. [ 210.650395][T14396] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.666755][T14402] loop3: detected capacity change from 0 to 512 [ 210.683331][T14402] EXT4-fs: journaled quota format not specified [ 210.720744][T14404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3929'. [ 210.729815][T14404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3929'. [ 210.737151][T14406] loop4: detected capacity change from 0 to 164 [ 210.756994][T14406] Unable to read rock-ridge attributes [ 210.763305][T14406] Unable to read rock-ridge attributes [ 210.766363][T14404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3929'. [ 210.777826][T14404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3929'. [ 210.809326][T14404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3929'. [ 210.818356][T14404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3929'. [ 210.905084][T14416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3931'. [ 210.914074][T14416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3931'. [ 210.968579][T14416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3931'. [ 211.885749][T14474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.894233][T14474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.294739][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 212.294756][ T29] audit: type=1326 audit(1757271155.675:13134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 212.334649][T14514] tipc: Enabled bearer , priority 0 [ 212.342643][T14514] tipc: Disabling bearer [ 212.412789][ T29] audit: type=1326 audit(1757271155.717:13135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 212.436283][ T29] audit: type=1326 audit(1757271155.717:13136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 212.459912][ T29] audit: type=1326 audit(1757271155.717:13137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.0.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 212.597478][ T29] audit: type=1400 audit(1757271155.990:13138): avc: denied { name_bind } for pid=14527 comm="syz.3.3971" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 212.726531][T14539] IPv6: Can't replace route, no match found [ 212.850731][T14545] tipc: Enabled bearer , priority 0 [ 212.858368][T14545] tipc: Disabling bearer [ 212.927589][T14556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.046807][T14556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.379970][T14562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.673269][T14570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.689225][ T29] audit: type=1326 audit(1757271157.145:13139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 213.696753][T14570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.715295][T14573] loop1: detected capacity change from 0 to 164 [ 213.742559][T14571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.751758][ T29] audit: type=1326 audit(1757271157.155:13140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 213.782032][ T29] audit: type=1326 audit(1757271157.155:13141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 213.805652][ T29] audit: type=1326 audit(1757271157.155:13142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 213.829248][ T29] audit: type=1326 audit(1757271157.155:13143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.1.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 213.839191][T14573] Unable to read rock-ridge attributes [ 213.872174][T14573] Unable to read rock-ridge attributes [ 214.115728][T14603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.138254][T14603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.149847][T14597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.296928][T14613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.803882][T14654] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.121773][T14696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.142516][T14696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.400647][T14705] __nla_validate_parse: 36 callbacks suppressed [ 215.400659][T14705] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4035'. [ 215.415940][T14705] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4035'. [ 215.865946][T14724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.881196][T14724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.935804][T14727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.959649][T14733] bond0: (slave dummy0): Releasing backup interface [ 215.999548][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.008781][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.054198][T14744] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.112423][T14744] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.188005][T14744] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.264868][T14744] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.341943][ T1451] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.365861][ T1451] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.413483][ T1451] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.441476][ T1451] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.772538][T14764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.791651][T14764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.930904][T14774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4060'. [ 216.942172][T14774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4060'. [ 216.952047][T14774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4060'. [ 216.961254][T14772] tipc: Enabled bearer , priority 0 [ 216.969354][T14772] tipc: Disabling bearer [ 216.976352][T14774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4060'. [ 216.985342][T14774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4060'. [ 216.994414][T14774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4060'. [ 217.020932][T14774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4060'. [ 217.029942][T14774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4060'. [ 217.057341][T14786] loop3: detected capacity change from 0 to 512 [ 217.063795][T14784] loop1: detected capacity change from 0 to 512 [ 217.070623][T14784] EXT4-fs: journaled quota format not specified [ 217.077229][T14786] EXT4-fs: journaled quota format not specified [ 217.086904][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 217.086939][ T29] audit: type=1326 audit(1757271160.704:13472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260b3bebe9 code=0x7ffc0000 [ 217.116756][ T29] audit: type=1326 audit(1757271160.704:13473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f260b3bebe9 code=0x7ffc0000 [ 217.140437][ T29] audit: type=1326 audit(1757271160.704:13474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14787 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260b3bebe9 code=0x7ffc0000 [ 217.267152][ T29] audit: type=1326 audit(1757271160.861:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.5.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 217.290753][ T29] audit: type=1326 audit(1757271160.861:13476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.5.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 217.314366][ T29] audit: type=1326 audit(1757271160.861:13477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.5.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 217.337974][ T29] audit: type=1326 audit(1757271160.861:13478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.5.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 217.361570][ T29] audit: type=1326 audit(1757271160.861:13479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.5.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 217.385201][ T29] audit: type=1326 audit(1757271160.861:13480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.5.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 217.408747][ T29] audit: type=1326 audit(1757271160.861:13481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.5.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 217.687899][T14820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.702838][T14820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.731053][T14823] loop3: detected capacity change from 0 to 164 [ 217.742275][T14823] Unable to read rock-ridge attributes [ 217.749108][T14823] Unable to read rock-ridge attributes [ 217.816182][T14827] loop3: detected capacity change from 0 to 512 [ 217.824757][T14827] EXT4-fs: journaled quota format not specified [ 217.998912][T14833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.041233][T14839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.057888][T14839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.940365][T14869] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.941413][T14871] loop3: detected capacity change from 0 to 8192 [ 219.344717][T14895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.353700][T14895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.364246][T14893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.380110][T14893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.060789][T14926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.069373][T14926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.100606][T14931] FAULT_INJECTION: forcing a failure. [ 220.100606][T14931] name failslab, interval 1, probability 0, space 0, times 0 [ 220.113374][T14931] CPU: 0 UID: 0 PID: 14931 Comm: syz.1.4119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.113406][T14931] Tainted: [W]=WARN [ 220.113413][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.113426][T14931] Call Trace: [ 220.113433][T14931] [ 220.113450][T14931] __dump_stack+0x1d/0x30 [ 220.113489][T14931] dump_stack_lvl+0xe8/0x140 [ 220.113510][T14931] dump_stack+0x15/0x1b [ 220.113528][T14931] should_fail_ex+0x265/0x280 [ 220.113554][T14931] should_failslab+0x8c/0xb0 [ 220.113633][T14931] kmem_cache_alloc_noprof+0x50/0x310 [ 220.113691][T14931] ? audit_log_start+0x365/0x6c0 [ 220.113730][T14931] audit_log_start+0x365/0x6c0 [ 220.113818][T14931] audit_seccomp+0x48/0x100 [ 220.113843][T14931] ? __seccomp_filter+0x68c/0x10d0 [ 220.113862][T14931] __seccomp_filter+0x69d/0x10d0 [ 220.113885][T14931] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 220.113987][T14931] ? vfs_write+0x7e8/0x960 [ 220.114017][T14931] __secure_computing+0x82/0x150 [ 220.114077][T14931] syscall_trace_enter+0xcf/0x1e0 [ 220.114105][T14931] do_syscall_64+0xac/0x200 [ 220.114175][T14931] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 220.114201][T14931] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 220.114233][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.114329][T14931] RIP: 0033:0x7f84f89aebe9 [ 220.114345][T14931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.114360][T14931] RSP: 002b:00007f84f7416f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 220.114376][T14931] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f84f89aebe9 [ 220.114404][T14931] RDX: 00007f84f7416f20 RSI: 0000000000000058 RDI: 00007f84f7416f20 [ 220.114417][T14931] RBP: 00007f84f7417090 R08: 0000000000000000 R09: 0000000000000058 [ 220.114430][T14931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.114443][T14931] R13: 00007f84f8be6038 R14: 00007f84f8be5fa0 R15: 00007ffcf4e5e998 [ 220.114464][T14931] [ 220.117091][T14933] loop4: detected capacity change from 0 to 512 [ 220.332600][T14933] EXT4-fs: journaled quota format not specified [ 220.348051][T14933] __nla_validate_parse: 59 callbacks suppressed [ 220.348143][T14933] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4120'. [ 220.363483][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 220.372411][T14933] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4120'. [ 220.428518][T14941] loop5: detected capacity change from 0 to 1024 [ 220.435630][T14941] EXT4-fs: Ignoring removed orlov option [ 220.448295][T14943] tipc: Enabled bearer , priority 0 [ 220.456778][T14943] tipc: Disabling bearer [ 220.462482][T14941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.580337][T14954] FAULT_INJECTION: forcing a failure. [ 220.580337][T14954] name failslab, interval 1, probability 0, space 0, times 0 [ 220.593017][T14954] CPU: 0 UID: 0 PID: 14954 Comm: syz.3.4127 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.593048][T14954] Tainted: [W]=WARN [ 220.593091][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.593101][T14954] Call Trace: [ 220.593106][T14954] [ 220.593112][T14954] __dump_stack+0x1d/0x30 [ 220.593131][T14954] dump_stack_lvl+0xe8/0x140 [ 220.593169][T14954] dump_stack+0x15/0x1b [ 220.593229][T14954] should_fail_ex+0x265/0x280 [ 220.593310][T14954] ? __pfx_asymmetric_key_cmp+0x10/0x10 [ 220.593342][T14954] should_failslab+0x8c/0xb0 [ 220.593426][T14954] __kmalloc_noprof+0xa5/0x3e0 [ 220.593457][T14954] ? asymmetric_key_hex_to_key_id+0x5f/0xe0 [ 220.593485][T14954] ? __pfx_asymmetric_key_cmp+0x10/0x10 [ 220.593541][T14954] asymmetric_key_hex_to_key_id+0x5f/0xe0 [ 220.593611][T14954] ? __pfx_asymmetric_key_cmp+0x10/0x10 [ 220.593644][T14954] asymmetric_key_match_preparse+0x193/0x210 [ 220.593672][T14954] keyring_search+0x107/0x1a0 [ 220.593727][T14954] ? __pfx_key_default_cmp+0x10/0x10 [ 220.593761][T14954] keyctl_keyring_search+0x1aa/0x2e0 [ 220.593791][T14954] __se_sys_keyctl+0x2d4/0xb80 [ 220.593846][T14954] ? __rcu_read_unlock+0x4f/0x70 [ 220.593864][T14954] ? __fget_files+0x184/0x1c0 [ 220.593889][T14954] ? fput+0x8f/0xc0 [ 220.593967][T14954] __x64_sys_keyctl+0x67/0x80 [ 220.593988][T14954] x64_sys_call+0x2f6d/0x2ff0 [ 220.594014][T14954] do_syscall_64+0xd2/0x200 [ 220.594150][T14954] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 220.594177][T14954] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 220.594211][T14954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.594235][T14954] RIP: 0033:0x7fd307cdebe9 [ 220.594251][T14954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.594312][T14954] RSP: 002b:00007fd306747038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 220.594332][T14954] RAX: ffffffffffffffda RBX: 00007fd307f15fa0 RCX: 00007fd307cdebe9 [ 220.594352][T14954] RDX: 0000200000000300 RSI: 000000001314d9e1 RDI: 000000000000000a [ 220.594365][T14954] RBP: 00007fd306747090 R08: 0000000000000000 R09: 0000000000000000 [ 220.594378][T14954] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 220.594391][T14954] R13: 00007fd307f16038 R14: 00007fd307f15fa0 R15: 00007fff1feca6b8 [ 220.594413][T14954] [ 220.829950][T14956] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 220.945548][T14970] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4132'. [ 220.954555][T14970] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4132'. [ 220.963505][T14970] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4132'. [ 220.982456][T14971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.992095][T14971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.045378][T14974] loop3: detected capacity change from 0 to 2048 [ 221.058904][T14974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.071209][T14974] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.103351][T14981] loop1: detected capacity change from 0 to 1024 [ 221.115278][T14981] EXT4-fs: Ignoring removed orlov option [ 221.120953][T14981] EXT4-fs: test_dummy_encryption option not supported [ 221.226537][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.294678][T14990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4139'. [ 221.303652][T14990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4139'. [ 221.342640][T14990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4139'. [ 221.351626][T14990] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4139'. [ 222.042042][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.055949][T15009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.064586][T15009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.094966][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 222.094994][ T29] audit: type=1326 audit(1757271165.964:13734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15010 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 222.137152][ T29] audit: type=1326 audit(1757271165.964:13735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15010 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 222.160758][ T29] audit: type=1326 audit(1757271166.006:13736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15010 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 222.184393][ T29] audit: type=1326 audit(1757271166.006:13737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15010 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 222.207971][ T29] audit: type=1326 audit(1757271166.006:13738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15010 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 222.248494][ T29] audit: type=1326 audit(1757271166.122:13739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.5.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 222.272098][ T29] audit: type=1326 audit(1757271166.122:13740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.5.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 222.295711][ T29] audit: type=1326 audit(1757271166.122:13741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.5.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 222.319279][ T29] audit: type=1326 audit(1757271166.122:13742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.5.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 222.342919][ T29] audit: type=1326 audit(1757271166.122:13743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.5.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c729aebe9 code=0x7ffc0000 [ 222.393377][T15021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.406840][T15021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.457767][T15018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.928383][T15049] loop3: detected capacity change from 0 to 1024 [ 222.935039][T15049] EXT4-fs: Ignoring removed orlov option [ 222.940715][T15049] EXT4-fs: test_dummy_encryption option not supported [ 223.091217][T15060] tipc: Started in network mode [ 223.096209][T15060] tipc: Node identity 0af8755cd408, cluster identity 4711 [ 223.103390][T15060] tipc: Enabled bearer , priority 0 [ 223.143210][T15059] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.161705][T15060] tipc: Disabling bearer [ 223.250956][T15069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.280530][T15069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.326256][T15065] loop3: detected capacity change from 0 to 8192 [ 223.455923][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.485014][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.036228][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.058874][T15092] loop3: detected capacity change from 0 to 164 [ 224.061461][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.082042][T15092] Unable to read rock-ridge attributes [ 224.092176][T15094] tipc: Enabled bearer , priority 0 [ 224.109884][T15094] tipc: Disabling bearer [ 224.125067][T15092] Unable to read rock-ridge attributes [ 224.266896][T15111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.278911][T15111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.370146][T15118] loop4: detected capacity change from 0 to 8192 [ 224.412183][T15125] loop1: detected capacity change from 0 to 164 [ 224.423218][T15125] Unable to read rock-ridge attributes [ 224.435135][T15125] Unable to read rock-ridge attributes [ 224.519310][T15131] tipc: Enabling of bearer rejected, failed to enable media [ 224.615306][T15133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.695396][T15139] loop1: detected capacity change from 0 to 1024 [ 224.716391][T15139] EXT4-fs: Ignoring removed orlov option [ 224.724007][T15139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.153499][T15164] __nla_validate_parse: 16 callbacks suppressed [ 225.153512][T15164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4200'. [ 225.168910][T15164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4200'. [ 225.216289][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.248914][T15164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4200'. [ 225.258057][T15164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4200'. [ 225.303370][T15164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4200'. [ 225.312510][T15164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4200'. [ 225.322002][T15170] loop5: detected capacity change from 0 to 2048 [ 225.347280][T15181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.366603][T15170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.368943][T15181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.389107][T15170] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.449134][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4210'. [ 225.945308][T15204] tipc: Enabled bearer , priority 0 [ 225.954045][T15204] tipc: Disabling bearer [ 226.029560][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.061970][T15214] loop3: detected capacity change from 0 to 1024 [ 226.070943][T15214] EXT4-fs: Ignoring removed orlov option [ 226.076721][T15214] EXT4-fs: test_dummy_encryption option not supported [ 226.093478][T15216] loop5: detected capacity change from 0 to 1024 [ 226.115970][T15216] EXT4-fs: Ignoring removed orlov option [ 226.140345][T15216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.175352][T15225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.184185][T15225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.362132][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.499485][T15243] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4230'. [ 226.508521][T15243] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4230'. [ 226.533124][T15242] loop4: detected capacity change from 0 to 2048 [ 226.557262][T15243] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4230'. [ 226.564706][T15242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.584414][T15242] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.628758][T15245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 226.881721][T15262] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 226.969196][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 226.969209][ T29] audit: type=1400 audit(1757271171.088:14205): avc: denied { allowed } for pid=15270 comm="syz.3.4240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 227.052070][ T29] audit: type=1400 audit(1757271171.140:14206): avc: denied { create } for pid=15270 comm="syz.3.4240" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.073555][ T29] audit: type=1400 audit(1757271171.140:14207): avc: denied { map } for pid=15270 comm="syz.3.4240" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.097956][ T29] audit: type=1400 audit(1757271171.140:14208): avc: denied { read write } for pid=15270 comm="syz.3.4240" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.123086][ T29] audit: type=1400 audit(1757271171.140:14209): avc: denied { write } for pid=15259 comm="syz.0.4237" path="socket:[47203]" dev="sockfs" ino=47203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.146782][ T29] audit: type=1400 audit(1757271171.140:14210): avc: denied { create } for pid=15268 comm="syz.5.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 227.166556][ T29] audit: type=1400 audit(1757271171.140:14211): avc: denied { create } for pid=15268 comm="syz.5.4239" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 227.187477][ T29] audit: type=1400 audit(1757271171.140:14212): avc: denied { create } for pid=15268 comm="syz.5.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 227.207069][ T29] audit: type=1400 audit(1757271171.140:14213): avc: denied { write } for pid=15268 comm="syz.5.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 227.226622][ T29] audit: type=1400 audit(1757271171.151:14214): avc: denied { mounton } for pid=15268 comm="syz.5.4239" path="/360/file0" dev="tmpfs" ino=1888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 227.289152][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.346968][T15284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.348314][T15282] loop3: detected capacity change from 0 to 8192 [ 227.396196][T15284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.303700][T15319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.315365][T15319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.434684][T15323] loop3: detected capacity change from 0 to 2048 [ 228.450547][T15323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.462835][T15323] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.543939][T15339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.658134][T15351] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.860311][T15378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.870605][T15375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.881481][T15378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.967628][T15392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.976398][T15392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.184895][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.320161][T15417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.328770][T15417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.551048][T15424] loop1: detected capacity change from 0 to 1024 [ 229.566042][T15424] EXT4-fs: Ignoring removed orlov option [ 229.574123][T15424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.697545][T15430] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 229.739089][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.812057][T15439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.822431][T15439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.878814][T15448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.889817][T15448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.963124][T15453] __nla_validate_parse: 23 callbacks suppressed [ 229.963139][T15453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4304'. [ 229.978488][T15453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4304'. [ 229.997970][T15453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4304'. [ 230.006964][T15453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4304'. [ 230.039063][T15453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4304'. [ 230.048197][T15453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4304'. [ 230.317459][T15461] loop5: detected capacity change from 0 to 1024 [ 230.324581][T15461] EXT4-fs: Ignoring removed orlov option [ 230.362211][T15461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.573407][T15483] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 230.618476][T15486] loop3: detected capacity change from 0 to 1024 [ 230.627252][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.636322][T15486] EXT4-fs: Ignoring removed orlov option [ 230.645661][T15475] loop1: detected capacity change from 0 to 8192 [ 230.657144][T15486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.838965][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.945169][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.953894][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.205867][T15506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.214936][T15506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.333287][T15514] loop4: detected capacity change from 0 to 1024 [ 231.344474][T15514] EXT4-fs: Ignoring removed orlov option [ 231.357348][T15514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.365025][T15516] loop1: detected capacity change from 0 to 2048 [ 231.385482][T15516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.397904][T15516] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.500435][T15523] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 231.572178][T15529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.588604][T15531] tipc: Enabling of bearer rejected, failed to enable media [ 231.598499][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.780406][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 231.780418][ T29] audit: type=1400 audit(1757271176.138:14623): avc: denied { create } for pid=15547 comm="syz.3.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.806534][ T29] audit: type=1400 audit(1757271176.138:14624): avc: denied { setopt } for pid=15547 comm="syz.3.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.826456][ T29] audit: type=1400 audit(1757271176.169:14625): avc: denied { connect } for pid=15547 comm="syz.3.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.848000][ T29] audit: type=1400 audit(1757271176.211:14626): avc: denied { ioctl } for pid=15551 comm="syz.5.4338" path="socket:[47691]" dev="sockfs" ino=47691 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.914411][ T29] audit: type=1326 audit(1757271176.274:14627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 231.938467][ T29] audit: type=1326 audit(1757271176.274:14628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 231.962146][ T29] audit: type=1326 audit(1757271176.274:14629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 231.985849][ T29] audit: type=1326 audit(1757271176.274:14630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 232.009424][ T29] audit: type=1326 audit(1757271176.274:14631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 232.033223][ T29] audit: type=1326 audit(1757271176.274:14632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 232.088597][T15562] syz2: rxe_newlink: already configured on veth0_to_hsr [ 232.147817][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.304732][T15578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.329614][T15578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.620618][T15588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.631626][T15588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.076707][T15601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.183510][T15607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.193608][T15607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.471713][T15621] loop5: detected capacity change from 0 to 164 [ 233.479827][T15621] Unable to read rock-ridge attributes [ 233.487537][T15621] Unable to read rock-ridge attributes [ 233.539744][T15627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.548358][T15627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.767482][T15632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4368'. [ 233.776547][T15632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4368'. [ 233.804767][T15632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4368'. [ 233.813818][T15632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4368'. [ 233.836761][T15637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.854261][T15637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.153428][T15643] loop1: detected capacity change from 0 to 2048 [ 234.237346][T15653] loop4: detected capacity change from 0 to 164 [ 234.253148][T15643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.278196][T15643] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.299252][T15653] Unable to read rock-ridge attributes [ 234.306511][T15653] Unable to read rock-ridge attributes [ 234.452112][T15660] loop4: detected capacity change from 0 to 2048 [ 234.517877][T15660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.573285][T15660] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.923795][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.131204][T15678] __nla_validate_parse: 2 callbacks suppressed [ 235.131287][T15678] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4383'. [ 235.146507][T15678] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4383'. [ 235.176395][T15678] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4383'. [ 235.185458][T15678] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4383'. [ 235.215409][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.267482][T15678] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4383'. [ 235.276586][T15678] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4383'. [ 235.302204][T15688] loop3: detected capacity change from 0 to 1024 [ 235.313039][T15688] EXT4-fs: Ignoring removed orlov option [ 235.323817][T15688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.553409][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.712323][T15709] loop3: detected capacity change from 0 to 2048 [ 235.729535][T15709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.761550][T15709] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.925038][T15723] loop1: detected capacity change from 0 to 164 [ 235.932719][T15723] Unable to read rock-ridge attributes [ 235.941338][T15723] Unable to read rock-ridge attributes [ 236.105798][T15736] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.148993][T15741] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4405'. [ 236.157982][T15741] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4405'. [ 236.180402][T15744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.186184][T15741] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4405'. [ 236.190558][T15744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.197764][T15741] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4405'. [ 236.502644][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.546565][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 236.546592][ T29] audit: type=1326 audit(1757271181.146:14896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 236.553099][T15752] loop3: detected capacity change from 0 to 164 [ 236.576379][ T29] audit: type=1326 audit(1757271181.146:14897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 236.606390][ T29] audit: type=1326 audit(1757271181.146:14898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 236.629960][ T29] audit: type=1326 audit(1757271181.146:14899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 236.653654][ T29] audit: type=1326 audit(1757271181.146:14900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 236.677240][ T29] audit: type=1326 audit(1757271181.146:14901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 236.700888][ T29] audit: type=1326 audit(1757271181.146:14902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 236.724490][ T29] audit: type=1326 audit(1757271181.146:14903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd307cdec23 code=0x7ffc0000 [ 236.747907][ T29] audit: type=1326 audit(1757271181.146:14904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd307cdd69f code=0x7ffc0000 [ 236.771456][ T29] audit: type=1326 audit(1757271181.146:14905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15751 comm="syz.3.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd307cdec77 code=0x7ffc0000 [ 236.817139][T15752] Unable to read rock-ridge attributes [ 236.830688][T15752] Unable to read rock-ridge attributes [ 236.915446][T15768] tipc: Enabled bearer , priority 0 [ 236.923031][T15768] tipc: Disabling bearer [ 237.401487][T15795] loop3: detected capacity change from 0 to 8192 [ 237.649123][T15798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.657830][T15798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.913018][T15812] tipc: Enabled bearer , priority 0 [ 237.914832][T15811] 9pnet_fd: Insufficient options for proto=fd [ 237.926856][T15812] tipc: Disabling bearer [ 238.027616][T15823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.244786][T15843] 9pnet_fd: Insufficient options for proto=fd [ 238.274007][T15848] tipc: Enabled bearer , priority 0 [ 238.282345][T15848] tipc: Disabling bearer [ 238.315988][T15850] loop1: detected capacity change from 0 to 2048 [ 238.336454][T15850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.357819][T15850] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.420341][T15858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.428891][T15858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.456486][T15860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.527160][T15864] loop5: detected capacity change from 0 to 8192 [ 238.955219][T15879] loop4: detected capacity change from 0 to 1024 [ 238.963138][T15879] EXT4-fs: Ignoring removed orlov option [ 238.973439][T15879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.983996][T15880] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.004594][T15884] tipc: Enabled bearer , priority 0 [ 239.013181][T15882] tipc: Disabling bearer [ 239.095810][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.106639][T15894] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 239.231093][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.380470][T15919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.389508][T15919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.786555][T15925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.912974][T15934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.921908][T15932] loop5: detected capacity change from 0 to 2048 [ 239.923168][T15934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.946461][T15932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.958981][T15932] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.032601][T15941] loop1: detected capacity change from 0 to 8192 [ 240.512201][T15952] __nla_validate_parse: 14 callbacks suppressed [ 240.512218][T15952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4484'. [ 240.527506][T15952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4484'. [ 240.545054][T15952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4484'. [ 240.554054][T15952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4484'. [ 240.584052][T15952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4484'. [ 240.593054][T15952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4484'. [ 240.708801][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.748343][T15963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.761243][T15963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.038377][T15980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.047091][T15978] loop4: detected capacity change from 0 to 164 [ 241.047666][T15980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.061626][T15978] Unable to read rock-ridge attributes [ 241.069265][T15978] Unable to read rock-ridge attributes [ 241.333719][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 241.333739][ T29] audit: type=1400 audit(1757271186.164:15173): avc: denied { read } for pid=15986 comm="syz.3.4498" dev="nsfs" ino=4026532456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 241.361335][ T29] audit: type=1400 audit(1757271186.164:15174): avc: denied { open } for pid=15986 comm="syz.3.4498" path="net:[4026532456]" dev="nsfs" ino=4026532456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 241.400462][T15989] loop5: detected capacity change from 0 to 2048 [ 241.427003][T15989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.437593][ T29] audit: type=1326 audit(1757271186.164:15175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.3.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 241.452503][T15989] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.462564][ T29] audit: type=1326 audit(1757271186.164:15176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.3.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 241.496552][ T29] audit: type=1326 audit(1757271186.164:15177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.3.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 241.520113][ T29] audit: type=1326 audit(1757271186.164:15178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.3.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 241.543672][ T29] audit: type=1326 audit(1757271186.164:15179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.3.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 241.567279][ T29] audit: type=1326 audit(1757271186.164:15180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.3.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 241.590830][ T29] audit: type=1326 audit(1757271186.175:15181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.3.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 241.614422][ T29] audit: type=1326 audit(1757271186.175:15182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.3.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd307cdebe9 code=0x7ffc0000 [ 242.181763][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.226917][T16022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.266552][T16022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.536476][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4512'. [ 242.605442][T16033] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 242.733332][T16045] loop4: detected capacity change from 0 to 8192 [ 242.785055][T16050] loop1: detected capacity change from 0 to 1024 [ 242.792184][T16050] EXT4-fs: Ignoring removed orlov option [ 242.805082][T16050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.963059][T16063] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 243.024702][T16066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.075047][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.177231][T16083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.189020][T16083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.511085][T16095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4534'. [ 243.520221][T16095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4534'. [ 243.536768][T16095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4534'. [ 243.662580][T16108] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.796465][T16120] loop4: detected capacity change from 0 to 8192 [ 243.880962][T16123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.975563][T16142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.984922][T16142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.009157][T16140] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 244.684579][T16210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.715518][T16210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.782352][T16218] loop3: detected capacity change from 0 to 8192 [ 244.939264][T16237] loop5: detected capacity change from 0 to 2048 [ 244.960106][T16237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.972508][T16237] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.363416][T16259] tipc: Enabled bearer , priority 0 [ 245.386006][T16259] tipc: Disabling bearer [ 245.485746][T16263] __nla_validate_parse: 9 callbacks suppressed [ 245.485762][T16263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4601'. [ 245.501048][T16263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4601'. [ 245.550104][T16263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4601'. [ 245.559582][T16263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4601'. [ 245.591543][T16263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4601'. [ 245.600635][T16263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4601'. [ 245.685936][T16280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.700305][T16282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.709888][T16280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.712383][T16284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.738430][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.748400][T16282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.758485][T16284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.029933][T16289] tipc: Enabled bearer , priority 0 [ 246.038114][T16289] tipc: Disabling bearer [ 246.095474][T16291] loop4: detected capacity change from 0 to 1024 [ 246.104132][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 246.104144][ T29] audit: type=1326 audit(1757271191.183:15357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f260b3bd84a code=0x7ffc0000 [ 246.134810][T16291] EXT4-fs: Ignoring removed orlov option [ 246.145105][ T29] audit: type=1326 audit(1757271191.215:15358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f260b3bd84a code=0x7ffc0000 [ 246.168510][ T29] audit: type=1326 audit(1757271191.215:15359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f260b3bd457 code=0x7ffc0000 [ 246.192125][ T29] audit: type=1326 audit(1757271191.215:15360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f260b3c038a code=0x7ffc0000 [ 246.230426][T16291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.274953][ T29] audit: type=1326 audit(1757271191.330:15361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.0.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 246.298580][ T29] audit: type=1326 audit(1757271191.330:15362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.0.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 246.322112][ T29] audit: type=1326 audit(1757271191.330:15363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16294 comm="syz.0.4615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 246.345667][ T29] audit: type=1326 audit(1757271191.351:15364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f260b3bd550 code=0x7ffc0000 [ 246.369484][ T29] audit: type=1326 audit(1757271191.351:15365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f260b3bd937 code=0x7ffc0000 [ 246.392965][ T29] audit: type=1326 audit(1757271191.351:15366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz.4.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f260b3bd550 code=0x7ffc0000 [ 246.430579][T16302] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 246.451221][T16306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4618'. [ 246.460198][T16306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4618'. [ 246.476429][T16306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4618'. [ 246.485545][T16306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4618'. [ 246.672162][T16330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.681314][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.682303][T16330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.746097][T16335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.755694][T16335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.683081][T16367] loop1: detected capacity change from 0 to 1024 [ 247.699930][T16362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.717647][T16367] EXT4-fs: Ignoring removed orlov option [ 247.737311][T16367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.916099][T16389] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 247.956620][T16390] 9pnet: Could not find request transport: fd0x0000000000000004 [ 248.024770][T16397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.045539][T16397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.095832][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.356319][T16408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.372077][T16408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.578043][T16418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.623976][T16424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.632946][T16424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.231513][T16436] loop1: detected capacity change from 0 to 164 [ 249.241436][T16436] Unable to read rock-ridge attributes [ 249.253848][T16436] Unable to read rock-ridge attributes [ 249.385805][T16444] tipc: Enabled bearer , priority 0 [ 249.396124][T16444] tipc: Disabling bearer [ 249.462198][T16452] loop1: detected capacity change from 0 to 1024 [ 249.470853][T16452] EXT4-fs: Ignoring removed orlov option [ 249.489690][T16452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.641972][T16470] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 249.700139][T16474] loop5: detected capacity change from 0 to 2048 [ 249.812526][T16474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.826466][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.839115][T16474] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.291900][T16482] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.480289][T16474] syz.5.4676 (16474) used greatest stack depth: 8992 bytes left [ 250.489225][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.615150][T16505] 9pnet_fd: Insufficient options for proto=fd [ 250.690464][T16508] loop5: detected capacity change from 0 to 2048 [ 250.738491][T16508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.752188][T16508] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.775373][T16513] __nla_validate_parse: 12 callbacks suppressed [ 250.775387][T16513] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4689'. [ 251.123667][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 251.123680][ T29] audit: type=1326 audit(1757271196.433:15663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16514 comm="syz.1.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 251.156104][ T29] audit: type=1326 audit(1757271196.433:15664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16514 comm="syz.1.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 251.180410][ T29] audit: type=1326 audit(1757271196.433:15665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16514 comm="syz.1.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 251.227933][ T29] audit: type=1326 audit(1757271196.548:15666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.1.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 251.231235][T16518] loop1: detected capacity change from 0 to 1024 [ 251.251511][ T29] audit: type=1326 audit(1757271196.548:15667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.1.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 251.270900][T16518] EXT4-fs: Ignoring removed orlov option [ 251.281398][ T29] audit: type=1326 audit(1757271196.548:15668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.1.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 251.310662][ T29] audit: type=1326 audit(1757271196.548:15669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.1.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 251.334217][ T29] audit: type=1326 audit(1757271196.548:15670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.1.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f89aebe9 code=0x7ffc0000 [ 251.357847][ T29] audit: type=1326 audit(1757271196.548:15671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.1.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84f89ad550 code=0x7ffc0000 [ 251.381477][ T29] audit: type=1326 audit(1757271196.548:15672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16517 comm="syz.1.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84f89ad550 code=0x7ffc0000 [ 251.451788][T16518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.468890][T16522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.478108][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.487392][T16522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.742686][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.033180][T16548] loop1: detected capacity change from 0 to 1024 [ 252.040038][T16548] EXT4-fs: Ignoring removed orlov option [ 252.080860][T16548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.118610][T16552] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4702'. [ 252.223267][T16557] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 252.306712][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.336016][T16561] loop3: detected capacity change from 0 to 2048 [ 252.376802][T16561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.469416][T16561] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.634130][T16569] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 252.757281][T16581] tipc: Enabled bearer , priority 0 [ 252.765403][T16581] tipc: Disabling bearer [ 252.888086][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.912504][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.120555][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.444190][T16628] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4726'. [ 253.561695][T16632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.635065][T16639] loop1: detected capacity change from 0 to 164 [ 253.656895][T16639] Unable to read rock-ridge attributes [ 253.679644][T16639] Unable to read rock-ridge attributes [ 253.768802][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4736'. [ 253.797719][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4737'. [ 253.851790][T16657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.870367][T16657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.895009][T16661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.915813][T16661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.019142][T16666] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.195897][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4750'. [ 254.402012][T16690] loop5: detected capacity change from 0 to 1024 [ 254.408990][T16690] EXT4-fs: Ignoring removed orlov option [ 254.417194][T16690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.596681][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.649222][T16699] tipc: Enabled bearer , priority 0 [ 254.658131][T16699] tipc: Disabling bearer [ 254.669879][T16702] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4754'. [ 254.772555][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4757'. [ 254.929235][T16726] loop3: detected capacity change from 0 to 1024 [ 254.959135][T16726] EXT4-fs: Ignoring removed orlov option [ 255.009706][T16726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.087426][T16732] tipc: Enabled bearer , priority 0 [ 255.188132][T16732] tipc: Disabling bearer [ 255.216571][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.607399][T16770] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4780'. [ 255.612821][T16772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.635121][T16772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.997693][ T29] kauditd_printk_skb: 660 callbacks suppressed [ 255.997746][ T29] audit: type=1400 audit(1757271201.567:16333): avc: denied { read } for pid=16774 comm="syz.4.4782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.025204][T16775] tipc: Enabled bearer , priority 0 [ 256.036708][T16775] tipc: Disabling bearer [ 256.067410][ T29] audit: type=1326 audit(1757271201.619:16334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.0.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 256.091005][ T29] audit: type=1326 audit(1757271201.619:16335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.0.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 256.117395][ T29] audit: type=1326 audit(1757271201.619:16336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.0.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 256.141775][ T29] audit: type=1326 audit(1757271201.619:16337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.0.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 256.165346][ T29] audit: type=1326 audit(1757271201.619:16338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.0.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 256.188952][ T29] audit: type=1326 audit(1757271201.619:16339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.0.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 256.212489][ T29] audit: type=1326 audit(1757271201.619:16340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.0.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 256.236067][ T29] audit: type=1326 audit(1757271201.619:16341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.0.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 256.259676][ T29] audit: type=1326 audit(1757271201.619:16342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16776 comm="syz.0.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 256.286291][T16783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.303620][T16783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.466269][T16802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.752841][T16836] loop3: detected capacity change from 0 to 1024 [ 256.761844][T16836] EXT4-fs: Ignoring removed orlov option [ 256.773862][T16836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.927877][T16843] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 257.024173][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.385582][T16872] loop4: detected capacity change from 0 to 1024 [ 257.392733][T16874] loop1: detected capacity change from 0 to 1024 [ 257.400092][T16872] EXT4-fs: Ignoring removed orlov option [ 257.406527][T16874] EXT4-fs: Ignoring removed orlov option [ 257.414617][T16872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.436332][T16874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.449408][T16876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4820'. [ 257.458402][T16876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4820'. [ 257.603866][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.643039][T16876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4820'. [ 257.652049][T16876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4820'. [ 257.714750][T16876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4820'. [ 257.723802][T16876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4820'. [ 257.754018][T16893] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 257.871485][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.911522][T16900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.920536][T16900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.142851][T16913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.151528][T16913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.459758][T16918] tipc: Enabled bearer , priority 0 [ 258.468926][T16918] tipc: Disabling bearer [ 258.537386][T16924] loop5: detected capacity change from 0 to 2048 [ 258.550104][T16924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.575330][T16924] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.604336][T16931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.726765][T16942] loop4: detected capacity change from 0 to 2048 [ 258.798006][T16942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.825341][T16942] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.317190][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.387927][T16964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.500078][T16968] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.527026][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.555504][T16972] loop5: detected capacity change from 0 to 164 [ 259.568197][T16972] Unable to read rock-ridge attributes [ 259.603838][T16972] Unable to read rock-ridge attributes [ 259.827613][T16997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.839905][T16993] loop4: detected capacity change from 0 to 2048 [ 259.859605][T16997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.901133][T16993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.903416][T17003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.925136][T16993] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.956657][T17003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.969664][T17004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.989639][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4868'. [ 260.235034][T17021] 9pnet: Unknown protocol version 9p2000. [ 260.603013][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.648639][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4880'. [ 260.904295][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 260.904307][ T29] audit: type=1400 audit(1757271206.711:16759): avc: denied { write } for pid=17049 comm="syz.4.4885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 260.904375][T17053] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4885'. [ 261.085978][ T29] audit: type=1326 audit(1757271206.900:16760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.0.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 261.383133][ T29] audit: type=1326 audit(1757271206.932:16761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.0.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 261.406796][ T29] audit: type=1326 audit(1757271206.932:16762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.0.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 261.430350][ T29] audit: type=1326 audit(1757271206.932:16763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.0.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 261.453955][ T29] audit: type=1326 audit(1757271206.932:16764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.0.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 261.477629][ T29] audit: type=1326 audit(1757271206.932:16765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.0.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 261.479829][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.501240][ T29] audit: type=1326 audit(1757271206.932:16766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.0.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 261.533137][ T29] audit: type=1326 audit(1757271206.932:16767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.0.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 261.556703][ T29] audit: type=1326 audit(1757271206.932:16768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.0.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8571c4ebe9 code=0x7ffc0000 [ 261.578402][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.752069][T17074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.772946][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4892'. [ 261.792008][T17074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.153886][T17093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.162686][T17093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.350902][T17099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4901'. [ 262.513361][T17101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.547073][T17101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.772492][T17105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4904'. [ 262.968521][T17119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.023380][T17119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.093011][T17124] loop5: detected capacity change from 0 to 1024 [ 263.109232][T17124] EXT4-fs: Ignoring removed orlov option [ 263.162346][T17124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.692061][T17151] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4917'. [ 263.745706][ T9320] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.881275][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4922'. [ 263.927190][T17159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.933629][T17163] syz2: rxe_newlink: already configured on veth0_to_hsr [ 264.114061][T17171] loop5: detected capacity change from 0 to 164 [ 264.145837][T17171] Unable to read rock-ridge attributes [ 264.167079][T17171] Unable to read rock-ridge attributes [ 264.205873][T17173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.263762][T17173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.638695][T17187] loop3: detected capacity change from 0 to 1024 [ 264.647452][T17187] EXT4-fs: Ignoring removed orlov option [ 264.672998][T17187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.798470][T17201] loop5: detected capacity change from 0 to 1024 [ 264.805432][T17201] EXT4-fs: Ignoring removed orlov option [ 264.822529][T17201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.835758][T17201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.935894][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.936061][T17208] loop4: detected capacity change from 0 to 1024 [ 264.964573][T17208] EXT4-fs: Ignoring removed orlov option [ 264.974594][T17208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.125880][T17221] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 265.135633][T17224] loop3: detected capacity change from 0 to 2048 [ 265.234697][T17224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.267239][T17231] loop1: detected capacity change from 0 to 2048 [ 265.267826][T17224] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.299696][T17231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.331002][T17231] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.342733][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.422514][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.751582][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 265.751597][ T29] audit: type=1404 audit(1757271211.803:17292): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 265.784420][ T29] audit: type=1404 audit(1757271211.824:17293): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 265.900470][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.909734][ T29] audit: type=1400 audit(1757271211.961:17294): avc: denied { unmount } for pid=10842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 265.958746][ T29] audit: type=1400 audit(1757271212.013:17295): avc: denied { read write } for pid=10842 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.983163][ T29] audit: type=1400 audit(1757271212.013:17296): avc: denied { open } for pid=10842 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.007523][ T29] audit: type=1400 audit(1757271212.013:17297): avc: denied { ioctl } for pid=10842 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.052007][ T29] audit: type=1400 audit(1757271212.024:17298): avc: denied { prog_load } for pid=17252 comm="syz.3.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.071230][ T29] audit: type=1400 audit(1757271212.024:17299): avc: denied { bpf } for pid=17252 comm="syz.3.4951" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.091935][ T29] audit: type=1400 audit(1757271212.024:17300): avc: denied { perfmon } for pid=17252 comm="syz.3.4951" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.113032][ T29] audit: type=1400 audit(1757271212.024:17301): avc: denied { map_create } for pid=17252 comm="syz.3.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.166687][T17255] loop3: detected capacity change from 0 to 1024 [ 266.186717][T17255] EXT4-fs: Ignoring removed orlov option [ 266.195527][T17255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.330952][T17265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.339891][T17265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.578978][T17272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.587821][T17272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.653802][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.791827][T17287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.802008][T17287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.878343][T17294] loop4: detected capacity change from 0 to 2048 [ 266.893503][T17294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.907358][T17294] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.936641][T17299] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 266.936787][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.117590][T17310] loop4: detected capacity change from 0 to 1024 [ 267.124660][T17310] EXT4-fs: Ignoring removed orlov option [ 267.177333][T17310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.307643][T17325] loop3: detected capacity change from 0 to 1024 [ 267.314487][T17325] EXT4-fs: Ignoring removed orlov option [ 267.324670][T17325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.349646][T17330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.359830][T17330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.504145][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.695135][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.711628][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4979'. [ 267.860699][T17345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 267.902075][T17354] loop3: detected capacity change from 0 to 1024 [ 267.909408][T17354] EXT4-fs: Ignoring removed orlov option [ 267.968507][T17354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.064554][T17365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.080521][T17365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.196966][T10842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.611985][T17389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.631452][T17389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.081810][T17405] loop3: detected capacity change from 0 to 164 [ 269.094497][T17405] Unable to read rock-ridge attributes [ 269.102146][T17405] Unable to read rock-ridge attributes [ 269.211851][T17420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.234814][T17420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.254422][T17424] loop4: detected capacity change from 0 to 1024 [ 269.264622][T17424] EXT4-fs: Ignoring removed orlov option [ 269.282636][T17424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.463235][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.669222][T17439] loop4: detected capacity change from 0 to 1024 [ 269.680062][T17439] EXT4-fs: Ignoring removed orlov option [ 269.688987][T17439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.826546][T17448] loop1: detected capacity change from 0 to 1024 [ 269.838367][T17448] EXT4-fs: Ignoring removed orlov option [ 269.840281][T17446] rdma_rxe: rxe_newlink: failed to add veth0_to_hsr [ 269.849038][T17448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.942521][T17452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.971303][T17452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.979980][T10616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.070316][T17448] ================================================================== [ 270.078400][T17448] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 270.087598][T17448] [ 270.089917][T17448] write to 0xffff888109a20a50 of 4 bytes by task 17450 on cpu 0: [ 270.097627][T17448] writeback_single_inode+0x14a/0x3e0 [ 270.103013][T17448] sync_inode_metadata+0x5b/0x90 [ 270.107953][T17448] generic_buffers_fsync_noflush+0xd9/0x120 [ 270.113842][T17448] ext4_sync_file+0x1ab/0x690 [ 270.118512][T17448] vfs_fsync_range+0x10a/0x130 [ 270.123269][T17448] ext4_buffered_write_iter+0x34f/0x3c0 [ 270.128828][T17448] ext4_file_write_iter+0x383/0xf00 [ 270.134039][T17448] iter_file_splice_write+0x666/0xa60 [ 270.139407][T17448] direct_splice_actor+0x156/0x2a0 [ 270.144509][T17448] splice_direct_to_actor+0x312/0x680 [ 270.149876][T17448] do_splice_direct+0xda/0x150 [ 270.154633][T17448] do_sendfile+0x380/0x650 [ 270.159049][T17448] __x64_sys_sendfile64+0x105/0x150 [ 270.164253][T17448] x64_sys_call+0x2bb0/0x2ff0 [ 270.168930][T17448] do_syscall_64+0xd2/0x200 [ 270.173436][T17448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.179323][T17448] [ 270.181642][T17448] read to 0xffff888109a20a50 of 4 bytes by task 17448 on cpu 1: [ 270.189261][T17448] generic_buffers_fsync_noflush+0x80/0x120 [ 270.195155][T17448] ext4_sync_file+0x1ab/0x690 [ 270.199827][T17448] vfs_fsync_range+0x10a/0x130 [ 270.204636][T17448] ext4_buffered_write_iter+0x34f/0x3c0 [ 270.210193][T17448] ext4_file_write_iter+0x383/0xf00 [ 270.215396][T17448] iter_file_splice_write+0x666/0xa60 [ 270.220761][T17448] direct_splice_actor+0x156/0x2a0 [ 270.225862][T17448] splice_direct_to_actor+0x312/0x680 [ 270.231228][T17448] do_splice_direct+0xda/0x150 [ 270.235984][T17448] do_sendfile+0x380/0x650 [ 270.240403][T17448] __x64_sys_sendfile64+0x105/0x150 [ 270.245600][T17448] x64_sys_call+0x2bb0/0x2ff0 [ 270.250279][T17448] do_syscall_64+0xd2/0x200 [ 270.254802][T17448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.260690][T17448] [ 270.263004][T17448] value changed: 0x00000038 -> 0x00000002 [ 270.268705][T17448] [ 270.271017][T17448] Reported by Kernel Concurrency Sanitizer on: [ 270.277167][T17448] CPU: 1 UID: 0 PID: 17448 Comm: syz.1.5017 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 270.288536][T17448] Tainted: [W]=WARN [ 270.292328][T17448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.302374][T17448] ================================================================== [ 270.323811][T17462] tipc: Enabled bearer , priority 0 [ 270.331713][T17462] tipc: Disabling bearer [ 270.393451][T11762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.