last executing test programs: 1m46.158795138s ago: executing program 3 (id=2682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) dup(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x2000c851, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) 1m45.946816118s ago: executing program 3 (id=2686): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0xcc4c7000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x53) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x2}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="4d93bdaaf6adc16a86a5d4e1e268354d7e35a049cc5b6a8c84fbfaf9001fdfb55e75e928c08863e46e0eb5ac2c7a578fc701880d4c41fe31c5cffc2d6c4225dadebf1a1e0e61cb04e94e920e90d37177d784e9139dc8dbcc046c9abbe9501351854f98b473d4c49b4445d9cb490e9fbbf8f49bda34468feae5a746d504b73ec9cc2d", 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000c00)="7b7d4b3dc92d7881b1df12f383deea41192607c50a93a0796f4fdadb54e1f8de378e5a56d476eceac7ca1b94e9480a48c6a227c0886772492af55dc97bc6b13c65c5e1a10196347460421faf504c8a9d013ce71cc338800ce799968f661af444d396113bbe0dbc8ab09135e73439b0059fd968f865484b4602567b819564cafa0200dc2e041546f81dc39a629aea226dbf3085aac97a23f41d92f23a521a4a0c12f5c961451a433bf6fa04cc8d6e70b5203eec75fee631092d367dc1f3dda4c74643f697af4ef1f6609d3856e8e54f5387988adb3813040ccf103323277600bd16e5a1a3145455c6d3dd140a7ce2b157f1eb5fd58f01f855cecde4bbe8f3fb556f87c8cb1f695fa58772db914709da716570c28bd1bd19da3278dc0399630d14ee54424459c1c1d29654e7c42b0b76d480f3a5cd211ff7bce7af780de6c719d9c150f5f17e8864d180d03151d95a669fe8e4ff056d1fa86c58271869af9799170e9aadb0dd8a9c758b2575e4fe2a93f5ae9303bbed35fc2c928e3ef529b172cc73a985922c45279707612cfa47344b6bbb156751ab2f2960d7742bf63d345e2af3be4d3e93beaabffcf30b1f9f38c5c80d25263682ebe5c6c211046ab2bde1296e7033d6f1567ed7ce84cc4a16d296b7dfee041ab75ed13f891e472f03aa4fd6f85c7a6d436e6083417059007e920384b911dfa2c3f409b43cbd05d492e0c62066a7978b50e790c05757db30fce724c1256bb4350e44443e64a290eaf3130dc4bff87f525e4335f15f1c8c7acb742f1280880f2c946d1247212e095a99f0a7ba1959bfefdcc1daf0b08289ac5475b2ff810825faa9bd5231fedabaa4f13584e21c3421c832e6a0594c6b1b9b4799d9b23e155fb8447d030bc56601cac6f608ca8408e9d732d920c4f7ad22273d33f9386f9b690ef99f8e518c652ba7c0f870b1319cb669e8e0a38aa2f7237c43c8d15f67dbda117614cb915892827139937c985f1e60e5443f769558f7f938a363c28103d669991f3d9d812e4a0561afe1cc99b7bc1d092ffe57ee032380e21926180f067d0644e766627d1534abab1bc89f157a827224bc063000ae408a92430396e75e521c957282f0bdf6d518ce0da1ae6a041b026483ff3aa4db9df979cf4366955c49d3b765634f0401933fb3f0cb3146f7222c2480ea33e6243539853c4a4898a5782f4ff1d416a9be943d72a050cb218749d344630862daa3da6c02aecba6e952debff3864bc0d3d1286eb4fe55aec707815ab979064f9960ac2b2cd53dca89be2ad60af7299607746fbb09ee570dbb88648de7975e700f22beb704022797599530a12488904cfbb1ba60d213dcdfe0f9158bb79c128a56b7ce77819bcd892a2c62da4d1b416c082396ec22ea1530362b896995de46d4a4e25a444c96fa4c87ae1f0ec838595e2f632f1abe1677510ccd54bc990292265e7120534ae4e091ad3aa1b9f410a1ccf211b2ab3d50252d045791280eecf15abf41c31f2fa1a4588d590936bac3543fc3c223ccfd241f195ff1d6b61726c6e691755a93be46f350ea57d7c4ef188a9e70a32a0acc66036bae403d047f3681956e0199c53959c411f08c3c7fe289a847c77c34c45f15bb8f66e2d2311d37bc3d20ef5da33a292e672e5016adef268c4d71c86906c41c7cf7e4e27e1ab2cbd21a4689fd1c0f7ea1578ec3ae5f36a4e98f6feadd63a83a860ab48db7f8d30a28e99866cd56a86cec8f1ef559cdd0359f1e4fbdb8983e77a4980d33153a0c273b0663b646bd2a56e34e9fd2949763356d98610a0e01054507ac7d246588f6a8dce3002686ab5e86e7d7b8e7a76533aece237ef1f4928dde6079f0cb9b86fd34863725e90beb4fa012a630dbc02b484b897288094725cf106d3e0f49761265b81a4343e74305e6233c2e1fddf71b9e7e8844fcc52006ae86e609ca6dcafb80f5488a4cb02dbd4dd0fceac9005cd37602273f8c431a68d3da072f160c8fa003e2c34c226475ae93a27c51ecafb68a968186c13eb32e1193055a755f507c3a2dd95a7272a601ef430e64159d5d12ce0b87e27bd8dbc66fbc604ac2ded897f3c23f07c3334956df1174e0705d924dab7f1fcbfcbbc1d58154fd1ab4969f4f1347d685397efbe8e56d7b422e563709203136bd437ad3724fac82639fd704607c2fc1a57dba1fc113032ddd6042adc58a1087f5d795bb8659bf3a66c7d1ce735f01453825db4d69752e5a678ba553a5e8a23ea08f5bbcd62dd565d149d1ba4556098e202e55e24e93bbca5cf5ed2e573f4bbf1749a67201011b5e7548fb7399911d30a4e7b51c196aea8f1893446b26be0c22c23b9cfe5b6a0d72fd01425b286bbf685ce6804f634a09783295881f4249635721870f453172d2b3bcdb42c366cdb05d6818369947ed58875645cc36146b53b777ca169cb0ce5547791255db6191058c1c507d71a100c981713b4e1a57797c6a86ce40680db6f4cd0447522fc36be23b5deceb19640faa83644904ad4d3e3ad323f602e702ac02e9732710d551bceb045003cc78ef81ce4dd9f262866397201950146797836a4d893791eef9a6999439718d3e62112ec6acca84bd2b9b4394a16488e293e5a8edd3f275bfbb8db210dd440346a1790084b9b3701c6651a88c7726823864e454d9c276da1953b64ee727a318702d1e608703352e2fa3d8cc3fec5423d9a9afa6494b09085fdff223f29359e725a7eaaa0b20182edd038670b749dae4efc874325a76b642dfff32a8027e9b646e524a17960fe1dbb939de054b39a164de569ff6733f9121b2963295609c42c37b435afd9e51324312b2aed7942ccba89498d974dbd0b08748ddbb5a5b3fb7a933b516a159701ef0f608b95aec69fc9ba01a2bf81505f8c39a80e87a189446969d04d646bb66ff118423a35c43ce8028df93e8ace21910b8caf97926d628dd845ebe7694de2efa94243ca526b960352d4f14e4662ce06061240d3ee3191adbe284ca795223300149adc8dbbfe8cd20bfd6b8f12682e7588b757ce2816a31f4e0a2fa77e881b623b888deddc7d5dcff38d3f686de9aedcb07fca202da1278112f70431fdd01b1d6af5b05c894629222b5a3fcd5bf0fdc6aeae8225a90ffd87730c73e5c2ffcb76ba470373e7d6819c842d7705366750b57dd4f53cbfc36ef215781f7c189858bd3d58cd8553eb823d7dec2d7ae67709b53749e3b1d6e3ff0134cf7f7e2e2ec0e6639a78a271fb27dc6c6ee6428e954154c60b45dd569b854823334e70884806b4bc5faafeb3b328f5f5c324ed22c8d347954ece5b5a8e9601ffd998094b12e53545ed32273f6915df61dec6b746b62e3754cc3e8a78861164c2146b4238fea902a650e714c78b73d10ddca87767b3c9757121efe84c7c338d1ed37c639bf745cdabb11d813039abb465b782565c472b94711b22e787200476a3e9be5254c8a6572893298e6967b7701f3c355eb0cb1f326966ae9b7d872a79668561dfc5979c34d86503acbe607255ab094ab9235f1739284f7278525a50b31386ff5d0da6aab39878028200be88a13fa01309e0ad48e9432b47ffc48d2110bfd85ac82ba8888ca307825acd5b81ad403146c293c59a3504539d9332a9d4ee13519397bbef835f0059a926321a359b86089d3dd7bc3118dfd5c2c444cd87453daa08d4c707ebf788c069bbd49d5b408b39572f56f81dedb9c3c8f7dce35480629d3030ccddc80d46c547d4393f15eb2ec3c72ad3994e254c4e5f7ec640dfdd3ade1a1cd31e13ba8db35c25bc8964360b0811f731cd88415a4b48bfeea2b773fa41aeeba44f36c4d6c4d575431d23674ba527f4b522debc69796717bffb0565985bd3ca70e3cb23dd35e45a89fa593676d2048447f41d14ec20332bb3618fb06fcab0b9314eb142b1a63d5ee5b02a544052ef6d36bc836b2362a82023283faba833d200e9fbbab3eef377c135fdbf4c7aff95a6c9297f272b353d2b5abad304b9b41709b26f4c547c17c77579b436590b9a66ca0f1ca50133f59668f9910c4b139574a5d630797e619d6b16bfc70b05315b24ef5bc0cd13416c8240afc39e80100aa7755e17de818822764ae2f4cfc0ff58dfbec61e229e188ca2ae7fbe87391e6d444f62da5dfa84e73d1331ff46d5a06fcb4cd5b665b8f95c0ea6b4528b541f93115d0a16f2de3e8c728818f4722942b108e5a1c2768b81154f5dfb6481f58bb6e760f36e35850d508e3ea333dc134230c34b7e4a693c55cd2e30d6cd777819e345a08b8dc1b8c609a163555f15e577e2111d005cd3326dd49db47efa26de3e0ea54435ed13abfe5ce10197ea984ed7ed8292dbf93e241a8d9ef548607725d1dcdf6b3e555e479c3ed1fb9bcd107e1df47d3a58c9986493fe9029dfda7759d00ae76470a9c04d793677971772423bfb26af65531f29cc99b99d3fa3d0e7badd8c234097d45d602ad3c74fac3170eeb156cd4b4ae85ce2d515c5a8e4c7e2e32282e09b9e596d32f7c1b2d4b8a55a1d41bbab1c0ba3e32dd047bb81e0b944747fa9348254c1bdee796317d3341f93168d66c268452804bc91f7744f7b6d84e4b672f1d5b369dfcd50d8e9789d115fa0b942d1cafa319371c36ccf548f730116f16c5da65991f4e6ffa1e2eaba3af372702bda776e03cf1bf41eb990061cd3003716ddb55c3711ba074359d0d1a251727366036a6714a97d256564a10cad5030aabba80386971d0b5a0ee818efa196edf7e661176f4b7a4a67cf5a955d1b8d7048debdae891a1c4a0ad14d85e9fa2eb7accf782e20f414e3a01166aabf571dfa7fdd2789511dd308c0118ac33d531d52ba7332fc6a070b7895680f11fa7f362aa2c8607faa973cd90aac9b4f6d2b20ee7d895cefa8436aa1388e2aac65c4e06db2b661815c851254cb4b6e6b48ebbe75dfa498804311e50f5afba3b7a6d29fb31134ec108023a98cdf184267443b3e843d9631c7e3d607e849f3875927144a6e0dfd924495483c186900800143c658a186bca9236cbf5aee42fe58a73d458f13159178e48e60e1fda87696c294883615c14ffc7f87d2c2a2df4691454553a7dd296ac6f6c89c99b6ddb3a407d4e8b092716df7264defd372c8883fbed65719a0c13d96eca520f440441932bff47301056259ebbe0b5c5c7a2e9895cc7010c86cb65213be0b34a003308122fe8557a5f5d8026003728f31ed865f06d333a488ff3f89de7151b84e97b777639aef1afd442f1002c94932fbd0c79ac66b19d48500f954fdcd996880d3d7b015422eb800db84521bb4908641bc1e588b023c30a69c0202e5206490821fd3124b4fe927b15109ee703708ed168ea2a4b1272f271e51072e31d0215118ffba0cc8400e71218c29b919adf888661c60148260ba883ad85acb4f0df51aadc4415ad19cb6c05c1c89d7f9ce0c831d83f52cb60230296cfc98c315bfe95790237bc8bf2e6694f451200b25b1385c1e6d13ad08238ae5ffb1fecf1440c832d6c314bb62f9e9d9d999ccabb504f0644cf85efdb938ccc773481c301f37f52d1653bd7879677ed1834bc2b9bc8ac2a4b1d578a5222fabd59840a18005e6aa9f9a9bfc7e67e674ca9270d590a13dccdc02b667020cb0b66c8b3612dcce9be3658d06b21510b065488c21d061731ec1ae5c20f53e5ad4993ca270a8bbdb7cd2738f01cd992bb8655983610f44ff4f2760192777e22445cf2f5264297a6e2ace45b6112b3de42e5250158bea641dda138bf2417de4a93e04eeeed4428b3a76230aed2167ce8fdb5c790e0a7ce34b821fda29f8cff51", 0x1000}], 0x3, &(0x7f0000000480)="36d5165f889e1b61ffc9c37840a4d6eadaa82ca8b0995e14fda170321e632b103025ec25fbaf97474876da3ae5be9d387767ea7f27100132119c17d62903f78ecef2b45903375d261e56ef5c05dc0f2ed448818bf970ac7cfe5aa5ecdbecb16bebca689a085276c6", 0x68, 0x80000}, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 1m45.945603818s ago: executing program 3 (id=2688): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket(0xa, 0x80f, 0xe) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r5 = memfd_create(&(0x7f0000000300)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) write(r5, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c168f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33c6", 0x42) stat(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)) 1m45.901619968s ago: executing program 3 (id=2691): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='\x00\x00\x00*~\xd7\x02'}, 0x30) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4800100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 1m45.852543357s ago: executing program 3 (id=2693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000010400), 0x121c41, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x2f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) r4 = io_uring_setup(0x7fe7, &(0x7f0000000140)={0x0, 0x0, 0x3000, 0x0, 0x7ffffffd}) poll(&(0x7f0000000000)=[{r4, 0x11000}], 0x1, 0x7) 1m45.737566737s ago: executing program 3 (id=2701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7521f65f088ecaddfc7379b5a9db32ff7b204b80cbc3e60ecc8cae2be9085e5562073bcfdde27288ce3763fc1179f68819da8d45958f2d8772468009755bcfc8300a8bb84fe2c99f605c51cb07832b89092e70b8fd"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) fcntl$setlease(r2, 0x400, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x7c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaac7bb81000e0008004500006a00000000002f9078ac1414aa0a0101020420880b000000000000080029fbc471b829fa1ca37c93bf5a2b81aca720000086dd080088be00000000100800fd0100000000000000000004200000000200000000000000000b4b361f006558000000009f0bdcbe634c79554940b4ef23102c454c7ab1292243f13c5366ceebb97f10704c"], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000003c0)) 1m45.646839647s ago: executing program 32 (id=2701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7521f65f088ecaddfc7379b5a9db32ff7b204b80cbc3e60ecc8cae2be9085e5562073bcfdde27288ce3763fc1179f68819da8d45958f2d8772468009755bcfc8300a8bb84fe2c99f605c51cb07832b89092e70b8fd"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) fcntl$setlease(r2, 0x400, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x7c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaac7bb81000e0008004500006a00000000002f9078ac1414aa0a0101020420880b000000000000080029fbc471b829fa1ca37c93bf5a2b81aca720000086dd080088be00000000100800fd0100000000000000000004200000000200000000000000000b4b361f006558000000009f0bdcbe634c79554940b4ef23102c454c7ab1292243f13c5366ceebb97f10704c"], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000003c0)) 2.319065587s ago: executing program 0 (id=4117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = msgget$private(0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$usbfs(0x0, 0x8000000000077, 0x6e0580) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) ioperm(0x0, 0xd, 0x4000000000000020) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r9, 0x2284, &(0x7f0000000080)) msgrcv(r1, 0x0, 0x0, 0x1, 0x2000) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000000400c7070033c1ef"], 0xe, 0x0) msgrcv(r1, &(0x7f0000000240)={0x0, ""/180}, 0xbc, 0x1, 0x3800) 1.978697026s ago: executing program 0 (id=4124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) 1.914896056s ago: executing program 0 (id=4125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 1.426837104s ago: executing program 2 (id=4132): gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace(0x4206, 0x0) ptrace(0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = inotify_init1(0x0) dup(r1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') openat(r6, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) 1.348798093s ago: executing program 2 (id=4134): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="400203010145"], 0x6) 1.296094854s ago: executing program 5 (id=4135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = msgget$private(0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$usbfs(0x0, 0x8000000000077, 0x6e0580) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8) ioperm(0x0, 0xd, 0x4000000000000020) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r11, 0x2284, &(0x7f0000000080)) msgrcv(r1, 0x0, 0x0, 0x1, 0x2000) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000000400c7070033c1ef"], 0xe, 0x0) msgrcv(r1, &(0x7f0000000240)={0x0, ""/180}, 0xbc, 0x1, 0x3800) 1.211204344s ago: executing program 2 (id=4136): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) fcntl$setflags(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x1002, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x4, 0x0, &(0x7f0000000000)="259a53f2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) 1.209532394s ago: executing program 4 (id=4137): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) gettid() sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) timer_delete(0x0) 1.116923113s ago: executing program 4 (id=4138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_getaffinity(0x0, 0x8, &(0x7f0000000080)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000002c0)={@private1}, &(0x7f0000000300)=0x14) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) dup(r1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x200010, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 1.033541523s ago: executing program 1 (id=4140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41001, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) open(&(0x7f0000000900)='./file0\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) fdatasync(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) close(r1) 1.033019483s ago: executing program 5 (id=4141): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/9, 0x9}, {0x0}], 0x2}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/9, 0x9}, {0x0}], 0x2}) io_uring_enter(r2, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 1.026905053s ago: executing program 2 (id=4142): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffff}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x5, 0x7, 0xd, 0x7, 0x3, 0x1, 0x9, 0x2, 0x1, 0x7, 0x1, 0x9, 0xd, 0x7, 0x2, 0x4], 0x1, [0xfffd, 0x9d6, 0x7, 0x2, 0xffff, 0x81, 0x0, 0x4000, 0x9, 0x23a, 0x5, 0x4, 0x4, 0xfffa, 0x7, 0x1010], [0x10, 0x7, 0x9, 0x5, 0x2, 0x200, 0x9, 0x1, 0x6, 0x3, 0x4, 0xfffa, 0x3, 0x4, 0x8, 0x6]}}]}}]}, 0x98}}, 0x0) 968.751402ms ago: executing program 5 (id=4143): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 968.039682ms ago: executing program 0 (id=4144): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0x7d8, 0x6, 0x1, 0x8006, 0x8e, "25a2581fffffef00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x1100, 0x5dd8, 0x3, 0x4, 0x0, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 942.777272ms ago: executing program 5 (id=4145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 899.890743ms ago: executing program 5 (id=4146): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 899.613192ms ago: executing program 1 (id=4147): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x18) setgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000700)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}], [{@uid_lt}, {@euid_eq}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x36, 0x37, 0x35, 0x64, 0x61, 0x66], 0x2d, [0x69, 0xd7233109b3e4ab4, 0x64, 0x32], 0x2d, [0x33, 0x0, 0x35, 0x38], 0x2d, [0x35, 0x37, 0x62, 0x34], 0x2d, [0x61, 0x32, 0x63, 0x38, 0x64, 0x38, 0x33, 0x35]}}}]}, 0x1, 0x4f7, &(0x7f0000000b00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf253900000008000300", @ANYRES32=r8, @ANYBLOB="2800458004002080"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x240400e0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) 899.448393ms ago: executing program 2 (id=4148): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 853.436872ms ago: executing program 0 (id=4149): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) iopl(0x3) keyctl$get_keyring_id(0x0, 0x0, 0x7) io_cancel(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10, 0x80800) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6, 0x0, 0x3, 0x16e04, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x7, @void, @value, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 835.161662ms ago: executing program 2 (id=4151): creat(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007"], 0x24}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 705.659612ms ago: executing program 0 (id=4152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 611.744132ms ago: executing program 1 (id=4153): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) fcntl$setflags(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x1002, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x4, 0x0, &(0x7f0000000000)="259a53f2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) 417.823041ms ago: executing program 1 (id=4154): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000180)=@generic={0x5, "3905bb95a0464af8ca774be3687f9bb32ad55d2a4d60046fe886300e5fb2e44bd02c607df009b6ae6408d66097652acd9ee0ce9251fcfa9bad11da39f6ed0a4fddb65d8e172f60ff54bec540714c55f7fb34853b6523d3644c5f63a9d930ef6e79e59b68c9a1955864c1b826ef11a766726a223d337dae5f2f88b790cad0"}, 0x80, 0x0}}], 0x2, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14, 0x80000) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000280), &(0x7f00000003c0), 0x2, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00', r3}, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) lsetxattr$security_selinux(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)='system_u:object_r:ssh_exec_t:s0\x00', 0x20, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000480)={0x4e, 0x3, "51cc6205360e37b02b784b729ce575670f866fd24539eae7c8b82857deb4e2789dd425a232803efee94c1e7f06607aa34710dd98cb0000000000008c85d3fa8a040847d62ff46860cd981ca8f0bd9a15bc8105517959a732ffffffffffffffa789fb8912c896038bdbba319d21dd28c98c279a8ea2f0838acf040000000000000006c5c554b020a8386bb43b877b50ccdb5a806aba07e73a5e42d10772a565f9b2451f313c8df090db5d56b15527456718d1c12c1f1b30e38b4a4098254dcee6d4dc2de7a5fa4ffc436aa63c29dd87bf98ff2b396c7a4356033d39d69f584b6f4b9fffffe500"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x55440, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f0000000440)) 204.42031ms ago: executing program 4 (id=4155): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x300) 115.58336ms ago: executing program 4 (id=4156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) 12.73757ms ago: executing program 1 (id=4157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 12.441239ms ago: executing program 4 (id=4158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) msgget$private(0x0, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$usbfs(0x0, 0x8000000000077, 0x6e0580) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) ioperm(0x0, 0xd, 0x4000000000000020) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) 12.27782ms ago: executing program 1 (id=4159): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x9, 0x74000, 0x7, 0x4, 0x9, 0x6, 0x7fffffff, {0x0, @in={{0x2, 0x4e21, @empty}}, 0x101, 0x4, 0x88, 0x3, 0x3}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x2fa, @loopback, 0xfbd}, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x5}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x1}, @in6={0xa, 0x4e22, 0x74, @dev={0xfe, 0x80, '\x00', 0x34}, 0xf}, @in6={0xa, 0x4e23, 0x8, @remote, 0x4}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0xd54, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @loopback}], 0x108) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0x608f}, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/304, @ANYRESHEX=0x0], 0x48}, 0x1, 0x7}, 0x0) 0s ago: executing program 4 (id=4160): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0x7d8, 0x6, 0x1, 0x8006, 0x8e, "25a2581fffffef00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x1100, 0x5dd8, 0x3, 0x4, 0x0, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) kernel console output (not intermixed with test programs): 7f3c37b5cde9 code=0x7ffc0000 [ 197.711623][ T29] audit: type=1326 audit(1738718348.455:12595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.0.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3c37b5cde9 code=0x7ffc0000 [ 198.088520][T13814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.105419][T13814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.114384][T13814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.125785][T13814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.192532][T13814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.215595][T13814] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.230104][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.237216][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.274758][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.281894][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.303558][T14055] loop4: detected capacity change from 0 to 1024 [ 198.323860][T13814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.329505][ T29] audit: type=1326 audit(1738718349.101:12596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.0.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c37b5cde9 code=0x7ffc0000 [ 198.357878][ T29] audit: type=1326 audit(1738718349.101:12597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13975 comm="syz.0.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c37b5cde9 code=0x7ffc0000 [ 198.410465][T14055] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 198.455250][ T29] audit: type=1400 audit(1738718349.222:12598): avc: denied { write } for pid=14070 comm="syz.5.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.474962][ T29] audit: type=1400 audit(1738718349.222:12599): avc: denied { bind } for pid=14070 comm="syz.5.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.520404][T14075] FAULT_INJECTION: forcing a failure. [ 198.520404][T14075] name failslab, interval 1, probability 0, space 0, times 0 [ 198.533141][T14075] CPU: 1 UID: 0 PID: 14075 Comm: syz.0.2902 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 198.533170][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 198.533184][T14075] Call Trace: [ 198.533190][T14075] [ 198.533197][T14075] dump_stack_lvl+0xf2/0x150 [ 198.533298][T14075] dump_stack+0x15/0x1a [ 198.533324][T14075] should_fail_ex+0x24a/0x260 [ 198.533363][T14075] should_failslab+0x8f/0xb0 [ 198.533394][T14075] kmem_cache_alloc_node_noprof+0x59/0x320 [ 198.533500][T14075] ? __alloc_skb+0x10b/0x310 [ 198.533597][T14075] __alloc_skb+0x10b/0x310 [ 198.533621][T14075] netlink_alloc_large_skb+0xad/0xe0 [ 198.533686][T14075] netlink_sendmsg+0x3b4/0x6e0 [ 198.533786][T14075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.533817][T14075] __sock_sendmsg+0x140/0x180 [ 198.533838][T14075] ____sys_sendmsg+0x312/0x410 [ 198.533876][T14075] __sys_sendmsg+0x19d/0x230 [ 198.533992][T14075] __x64_sys_sendmsg+0x46/0x50 [ 198.534027][T14075] x64_sys_call+0x2734/0x2dc0 [ 198.534054][T14075] do_syscall_64+0xc9/0x1c0 [ 198.534077][T14075] ? clear_bhb_loop+0x55/0xb0 [ 198.534164][T14075] ? clear_bhb_loop+0x55/0xb0 [ 198.534265][T14075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.534291][T14075] RIP: 0033:0x7f3c37b5cde9 [ 198.534306][T14075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.534323][T14075] RSP: 002b:00007f3c361c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.534343][T14075] RAX: ffffffffffffffda RBX: 00007f3c37d75fa0 RCX: 00007f3c37b5cde9 [ 198.534356][T14075] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 198.534420][T14075] RBP: 00007f3c361c7090 R08: 0000000000000000 R09: 0000000000000000 [ 198.534433][T14075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.534447][T14075] R13: 0000000000000000 R14: 00007f3c37d75fa0 R15: 00007ffc07e7a458 [ 198.534467][T14075] [ 198.537315][T13814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.643705][T14089] xt_NFQUEUE: number of total queues is 0 [ 198.973335][T13814] veth0_vlan: entered promiscuous mode [ 199.878369][T13814] veth1_vlan: entered promiscuous mode [ 200.254798][T13814] veth0_macvtap: entered promiscuous mode [ 200.265619][T13814] veth1_macvtap: entered promiscuous mode [ 200.287001][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.297610][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.307521][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.318016][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.381604][T13814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.401072][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.411637][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.421495][T13814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.432008][T13814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.460382][T13814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.473994][T13814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.482842][T13814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.491688][T13814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.500533][T13814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.622866][T14205] loop2: detected capacity change from 0 to 512 [ 201.646191][T14205] EXT4-fs (loop2): too many log groups per flexible block group [ 201.654044][T14205] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 201.676507][T14205] EXT4-fs (loop2): mount failed [ 201.829871][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2931'. [ 201.843502][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.854494][T14233] bridge_slave_1 (unregistering): left allmulticast mode [ 201.861819][T14233] bridge_slave_1 (unregistering): left promiscuous mode [ 201.868843][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.996603][T14276] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 203.332819][T14292] lo speed is unknown, defaulting to 1000 [ 203.427755][T14292] lo speed is unknown, defaulting to 1000 [ 203.448955][T14292] lo speed is unknown, defaulting to 1000 [ 203.457436][T14292] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 203.465452][T14292] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 203.476203][T14292] lo speed is unknown, defaulting to 1000 [ 203.485644][T14292] lo speed is unknown, defaulting to 1000 [ 203.491837][T14292] lo speed is unknown, defaulting to 1000 [ 203.560519][T14292] lo speed is unknown, defaulting to 1000 [ 203.570171][T14292] lo speed is unknown, defaulting to 1000 [ 203.610797][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 203.610814][ T29] audit: type=1326 audit(1738718354.058:12616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 203.652953][ T29] audit: type=1326 audit(1738718354.086:12617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 203.676748][ T29] audit: type=1326 audit(1738718354.086:12618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 203.709577][ T29] audit: type=1326 audit(1738718354.096:12619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 203.733278][ T29] audit: type=1326 audit(1738718354.096:12620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 203.756977][ T29] audit: type=1326 audit(1738718354.096:12621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 203.781037][ T29] audit: type=1326 audit(1738718354.096:12622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 203.804651][ T29] audit: type=1326 audit(1738718354.096:12623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 203.817916][T14334] loop5: detected capacity change from 0 to 512 [ 203.828620][ T29] audit: type=1326 audit(1738718354.096:12624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 203.858302][ T29] audit: type=1326 audit(1738718354.096:12625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 203.933179][T14334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.960424][T14334] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.572507][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.673976][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.741886][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.763579][T13208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.794889][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.838018][T14416] tipc: Cannot configure node identity twice [ 204.847736][T14405] lo speed is unknown, defaulting to 1000 [ 205.114797][T14432] loop2: detected capacity change from 0 to 512 [ 205.165208][T14432] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2973: corrupted in-inode xattr: invalid ea_ino [ 205.334376][T14432] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2973: couldn't read orphan inode 15 (err -117) [ 205.389248][ T55] tipc: Left network mode [ 205.413219][ T55] hsr_slave_0: left promiscuous mode [ 205.441437][T14432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.467755][ T55] hsr_slave_1: left promiscuous mode [ 205.490807][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.498261][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.515367][T14432] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 205.525443][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.532965][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.543938][T14432] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 205.554646][ T55] bridge_slave_0: left allmulticast mode [ 205.562596][ T55] veth1_macvtap: left promiscuous mode [ 205.568255][ T55] veth0_macvtap: left promiscuous mode [ 205.573978][ T55] veth1_vlan: left promiscuous mode [ 205.583147][ T55] veth0_vlan: left promiscuous mode [ 205.588955][T13814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.682205][ T55] team0 (unregistering): Port device team_slave_1 removed [ 205.693952][ T55] team0 (unregistering): Port device team_slave_0 removed [ 205.731683][ T55] team0 (unregistering): Port device dummy0 removed [ 205.761760][T14405] chnl_net:caif_netlink_parms(): no params data found [ 205.827802][T14405] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.835232][T14405] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.842699][T14405] bridge_slave_0: entered allmulticast mode [ 205.849823][T14405] bridge_slave_0: entered promiscuous mode [ 205.857892][T14405] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.865174][T14405] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.874450][T14405] bridge_slave_1: entered allmulticast mode [ 205.907456][T14405] bridge_slave_1: entered promiscuous mode [ 205.972488][T14405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.999833][T14405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.076128][T14405] team0: Port device team_slave_0 added [ 206.084251][T14405] team0: Port device team_slave_1 added [ 206.113698][T14405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.120875][T14405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.146846][T14405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.167826][T14405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.174811][T14405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.200863][T14405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.260730][T14405] hsr_slave_0: entered promiscuous mode [ 206.271691][T14405] hsr_slave_1: entered promiscuous mode [ 207.110540][T14405] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.263217][T14405] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.278046][T14405] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.182142][T14405] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.570756][T14405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.586649][T14405] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.612766][T14405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.623202][T14405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.850615][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.857749][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.878342][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.885446][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.940632][T14572] 9pnet_fd: Insufficient options for proto=fd [ 208.991910][T14579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3005'. [ 209.059030][T14405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.066242][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3006'. [ 209.075158][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3006'. [ 209.553776][T14405] veth0_vlan: entered promiscuous mode [ 209.726357][T14405] veth1_vlan: entered promiscuous mode [ 210.351780][T14405] veth0_macvtap: entered promiscuous mode [ 210.359481][T14405] veth1_macvtap: entered promiscuous mode [ 210.369971][T14405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.380482][T14405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.390328][T14405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.400803][T14405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.468912][T14405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.495869][T14405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.506423][T14405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.516345][T14405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.526853][T14405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.587157][T14405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.601022][T14405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.609979][T14405] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.618772][T14405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.627690][T14405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.907012][T14782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.942097][T14782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.972131][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 211.972146][ T29] audit: type=1326 audit(1738718361.878:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 212.051517][ T29] audit: type=1326 audit(1738718361.906:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 212.075212][ T29] audit: type=1326 audit(1738718361.906:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 212.079762][T14761] lo speed is unknown, defaulting to 1000 [ 212.098972][ T29] audit: type=1326 audit(1738718361.906:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14792 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 212.203985][T14761] chnl_net:caif_netlink_parms(): no params data found [ 212.320535][T14813] loop5: detected capacity change from 0 to 128 [ 212.333194][T14761] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.340308][T14761] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.428829][T14761] bridge_slave_0: entered allmulticast mode [ 212.435413][T14761] bridge_slave_0: entered promiscuous mode [ 212.443206][T14761] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.450297][T14761] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.382836][T14761] bridge_slave_1: entered allmulticast mode [ 213.389471][T14761] bridge_slave_1: entered promiscuous mode [ 213.623536][T14761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.662019][T14761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.747515][T14761] team0: Port device team_slave_0 added [ 213.754250][T14761] team0: Port device team_slave_1 added [ 213.776392][T14761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.783388][T14761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.809479][T14761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.845347][T14761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.852340][T14761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.866363][T14844] netlink: 'syz.5.3051': attribute type 13 has an invalid length. [ 213.878325][T14761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.894528][T14845] loop2: detected capacity change from 0 to 1024 [ 213.896928][T14838] tipc: Enabled bearer , priority 10 [ 214.004788][T14844] gretap0: refused to change device tx_queue_len [ 214.028830][T14844] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 214.057031][ T3350] lo speed is unknown, defaulting to 1000 [ 214.066411][T14761] hsr_slave_0: entered promiscuous mode [ 214.106020][T14761] hsr_slave_1: entered promiscuous mode [ 214.118243][T14845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.144468][T14761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.185943][T14761] Cannot create hsr debugfs directory [ 214.435031][ T29] audit: type=1400 audit(1738718364.170:12678): avc: denied { shutdown } for pid=14865 comm="syz.5.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.456013][T14761] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.602135][T14761] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.214835][ T9873] tipc: Node number set to 2614475462 [ 215.275067][T14845] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 215.304308][T14845] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 215.316866][T14845] EXT4-fs (loop2): This should not happen!! Data will be lost [ 215.316866][T14845] [ 215.326578][T14845] EXT4-fs (loop2): Total free blocks count 0 [ 215.332594][T14845] EXT4-fs (loop2): Free/Dirty block details [ 215.338519][T14845] EXT4-fs (loop2): free_blocks=68451041280 [ 215.344358][T14845] EXT4-fs (loop2): dirty_blocks=10176 [ 215.349775][T14845] EXT4-fs (loop2): Block reservation details [ 215.355781][T14845] EXT4-fs (loop2): i_reserved_data_blocks=636 [ 215.457169][ T29] audit: type=1400 audit(1738718365.115:12679): avc: denied { connect } for pid=14873 comm="syz.4.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.513481][T14761] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.540229][ T29] audit: type=1400 audit(1738718365.162:12680): avc: denied { write } for pid=14878 comm="syz.5.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.568258][T14717] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 215.650186][T14761] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.729560][T14761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.758640][T14761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.936977][ T29] audit: type=1400 audit(1738718365.526:12681): avc: denied { module_load } for pid=14899 comm="syz.4.3074" path="/sys/power/wakeup_count" dev="sysfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 216.038254][T14904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3070'. [ 216.692688][T14761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.780268][T14761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.958159][ T29] audit: type=1400 audit(1738718366.537:12682): avc: denied { create } for pid=14949 comm="syz.2.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 217.112125][ T29] audit: type=1400 audit(1738718366.555:12683): avc: denied { write } for pid=14949 comm="syz.2.3095" path="socket:[38447]" dev="sockfs" ino=38447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 217.313692][T14761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.345197][T14956] loop2: detected capacity change from 0 to 512 [ 217.352187][T14761] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.370944][T14707] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.378102][T14707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.393393][T14707] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.400484][T14707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.436570][T14956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.462565][T14761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.473128][T14761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.505856][ T29] audit: type=1400 audit(1738718367.042:12684): avc: denied { watch } for pid=14955 comm="syz.2.3097" path="/32/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.708333][T13814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.057235][T14761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.335604][T14761] veth0_vlan: entered promiscuous mode [ 219.347152][T14761] veth1_vlan: entered promiscuous mode [ 219.382856][T14761] veth0_macvtap: entered promiscuous mode [ 219.393065][T14761] veth1_macvtap: entered promiscuous mode [ 219.404541][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.415120][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.425014][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.435504][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.445369][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.455944][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.470704][T14761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.481944][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.492515][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.502442][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.513027][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.522880][T14761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.533432][T14761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.546264][T14761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.556613][T14761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.565510][T14761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.574355][T14761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.583230][T14761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.316412][T15069] lo speed is unknown, defaulting to 1000 [ 220.438544][T15069] chnl_net:caif_netlink_parms(): no params data found [ 220.518727][T15069] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.525916][T15069] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.543958][T15069] bridge_slave_0: entered allmulticast mode [ 220.557551][T15069] bridge_slave_0: entered promiscuous mode [ 220.586514][T15069] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.593705][T15069] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.622765][T15069] bridge_slave_1: entered allmulticast mode [ 220.630725][T15098] xt_NFQUEUE: number of total queues is 0 [ 220.640932][T15069] bridge_slave_1: entered promiscuous mode [ 220.688576][T15069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.707916][T15069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.787826][T15069] team0: Port device team_slave_0 added [ 220.796195][T15103] tipc: Enabled bearer , priority 0 [ 220.813214][T15069] team0: Port device team_slave_1 added [ 220.831516][T15103] +: renamed from syzkaller0 [ 220.853820][T15103] tipc: Disabling bearer [ 220.913085][T15069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.920203][T15069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.946236][T15069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.977533][T15069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.984713][T15069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.011011][T15069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.081728][T15069] hsr_slave_0: entered promiscuous mode [ 221.088718][T15069] hsr_slave_1: entered promiscuous mode [ 221.114746][T15069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.128616][T15069] Cannot create hsr debugfs directory [ 221.222490][T15069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.282602][T15069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.370526][T15069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.395948][ T29] audit: type=1326 audit(1738718370.680:12685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 221.419616][ T29] audit: type=1326 audit(1738718370.680:12686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 221.443272][ T29] audit: type=1326 audit(1738718370.680:12687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 221.467010][ T29] audit: type=1326 audit(1738718370.680:12688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 221.490605][ T29] audit: type=1326 audit(1738718370.680:12689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 221.514201][ T29] audit: type=1326 audit(1738718370.680:12690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 221.538432][ T29] audit: type=1326 audit(1738718370.680:12691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 221.562054][ T29] audit: type=1326 audit(1738718370.680:12692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 221.585729][ T29] audit: type=1326 audit(1738718370.680:12693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15135 comm="syz.4.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 221.614506][T15138] tipc: Enabled bearer , priority 0 [ 221.630512][T15138] +: renamed from syzkaller0 [ 221.640380][T15138] tipc: Disabling bearer [ 221.657334][T15069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.753332][T15069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.762357][T15069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.795243][T15069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.804216][T15069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.895842][T15069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.919654][T15160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3154'. [ 221.933064][T15069] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.945221][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.952306][T14691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.969215][T14444] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.976313][T14444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.081180][T15069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.111385][T15167] lo speed is unknown, defaulting to 1000 [ 222.188622][T15069] veth0_vlan: entered promiscuous mode [ 222.214752][T15069] veth1_vlan: entered promiscuous mode [ 222.247790][T15069] veth0_macvtap: entered promiscuous mode [ 222.262742][T15069] veth1_macvtap: entered promiscuous mode [ 222.278964][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.289567][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.299633][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.310149][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.320010][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.330464][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.340350][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.350780][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.415690][T15069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.427184][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.437659][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.447564][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.458004][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.467833][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.478339][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.488445][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.499036][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.512207][T15069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.537147][T15069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.545940][T15069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.554775][T15069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.563526][T15069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.654648][T15179] 9pnet_fd: Insufficient options for proto=fd [ 222.893766][T15189] tipc: Started in network mode [ 222.898823][T15189] tipc: Node identity 565e396c476d, cluster identity 4711 [ 222.906123][T15189] tipc: Enabled bearer , priority 0 [ 222.982082][T15189] +: renamed from syzkaller0 [ 222.995041][T15189] tipc: Disabling bearer [ 223.101249][T15207] 9pnet_fd: Insufficient options for proto=fd [ 223.138803][T15211] lo speed is unknown, defaulting to 1000 [ 223.254466][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 223.254483][ T29] audit: type=1326 audit(1738718372.420:12950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 223.284881][ T29] audit: type=1326 audit(1738718372.420:12951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 223.308646][ T29] audit: type=1326 audit(1738718372.420:12952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 223.332604][ T29] audit: type=1326 audit(1738718372.420:12953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 223.356402][ T29] audit: type=1326 audit(1738718372.420:12954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 223.380052][ T29] audit: type=1326 audit(1738718372.420:12955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 223.403847][ T29] audit: type=1326 audit(1738718372.420:12956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 223.516886][ T29] audit: type=1326 audit(1738718372.673:12957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.5.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 223.540865][ T29] audit: type=1326 audit(1738718372.673:12958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.5.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 223.564818][ T29] audit: type=1326 audit(1738718372.673:12959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.5.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 224.352705][T15230] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3178'. [ 224.524678][T15241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3182'. [ 224.544632][T15244] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 225.471631][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3196'. [ 225.570789][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3201'. [ 225.679271][T15327] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 225.691589][T15322] tipc: Enabled bearer , priority 0 [ 225.709830][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 225.727456][T15322] +: renamed from syzkaller0 [ 225.733612][T15322] tipc: Disabling bearer [ 225.779496][T15343] xt_NFQUEUE: number of total queues is 0 [ 225.890442][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3219'. [ 225.940554][T15371] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 225.969612][T15375] loop5: detected capacity change from 0 to 2048 [ 226.010971][T15375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.073030][T15400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3229'. [ 226.083343][T13208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.187143][T15419] tipc: Started in network mode [ 226.192093][T15419] tipc: Node identity 5ad98031b70d, cluster identity 4711 [ 226.199318][T15419] tipc: Enabled bearer , priority 0 [ 226.211356][T15419] +: renamed from syzkaller0 [ 226.217768][T15419] tipc: Disabling bearer [ 226.301910][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3234'. [ 226.656169][T15457] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3242'. [ 227.007179][T15475] lo speed is unknown, defaulting to 1000 [ 227.409313][T15498] xt_NFQUEUE: number of total queues is 0 [ 227.459484][T15501] __nla_validate_parse: 1 callbacks suppressed [ 227.459556][T15501] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3260'. [ 227.553326][T15506] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3263'. [ 227.680910][T15516] 9pnet: Could not find request transport: fd0x0000000000000004 [ 227.715721][T15527] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3272'. [ 227.780249][T15535] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 227.814021][T15539] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3278'. [ 227.945008][T15547] 9pnet: Could not find request transport: fd0x0000000000000004 [ 227.996712][T15555] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3285'. [ 228.079199][T15569] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3300'. [ 228.292681][T15582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3294'. [ 228.301791][T15582] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3294'. [ 228.310781][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3294'. [ 228.409719][T15580] lo speed is unknown, defaulting to 1000 [ 228.610471][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 228.610485][ T29] audit: type=1326 audit(1738718377.434:13447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0607b3da7 code=0x7ffc0000 [ 228.673416][ T29] audit: type=1326 audit(1738718377.462:13448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb060758fb9 code=0x7ffc0000 [ 228.697011][ T29] audit: type=1326 audit(1738718377.462:13449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0607b3da7 code=0x7ffc0000 [ 228.720557][ T29] audit: type=1326 audit(1738718377.462:13450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb060758fb9 code=0x7ffc0000 [ 228.744067][ T29] audit: type=1326 audit(1738718377.462:13451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 228.751069][T15588] 9pnet: Could not find request transport: fd0x0000000000000004 [ 228.767592][ T29] audit: type=1326 audit(1738718377.462:13452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0607b3da7 code=0x7ffc0000 [ 228.767630][ T29] audit: type=1326 audit(1738718377.462:13453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb060758fb9 code=0x7ffc0000 [ 228.767715][ T29] audit: type=1326 audit(1738718377.462:13454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb0607bcde9 code=0x7ffc0000 [ 228.846137][ T29] audit: type=1326 audit(1738718377.471:13455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0607b3da7 code=0x7ffc0000 [ 228.869907][ T29] audit: type=1326 audit(1738718377.471:13456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15572 comm="syz.5.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb060758fb9 code=0x7ffc0000 [ 229.220099][T15607] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3303'. [ 229.268089][T15609] tipc: Enabled bearer , priority 0 [ 229.286046][T15609] +: renamed from syzkaller0 [ 229.292640][T15609] tipc: Disabling bearer [ 229.331784][T15617] 9pnet_fd: Insufficient options for proto=fd [ 229.341159][T15615] lo speed is unknown, defaulting to 1000 [ 229.492986][T15632] loop4: detected capacity change from 0 to 2048 [ 229.525959][T15632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.558635][T14405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.706735][T15654] 9pnet_fd: Insufficient options for proto=fd [ 229.768981][T15659] tipc: Enabled bearer , priority 0 [ 229.776500][T15659] +: renamed from syzkaller0 [ 229.801472][T15659] tipc: Disabling bearer [ 230.027421][T15676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.034889][T15676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.043203][T15676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.050687][T15676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.197037][T15680] vlan2: entered promiscuous mode [ 230.207069][T15680] bond0: entered promiscuous mode [ 230.212198][T15680] bond_slave_0: entered promiscuous mode [ 230.217920][T15680] bond_slave_1: entered promiscuous mode [ 230.240663][T15680] bond0: left promiscuous mode [ 230.245519][T15680] bond_slave_0: left promiscuous mode [ 230.251149][T15680] bond_slave_1: left promiscuous mode [ 230.354167][T15692] 9pnet_fd: Insufficient options for proto=fd [ 230.655686][T15709] lo speed is unknown, defaulting to 1000 [ 231.121453][T15719] 9pnet_fd: Insufficient options for proto=fd [ 232.213792][T15791] xt_NFQUEUE: number of total queues is 0 [ 232.250888][T15792] lo speed is unknown, defaulting to 1000 [ 232.826902][T15833] tipc: Started in network mode [ 232.831893][T15833] tipc: Node identity 7, cluster identity 4711 [ 232.838069][T15833] tipc: Node number set to 7 [ 232.932018][T15844] siw: device registration error -23 [ 233.041153][T15848] tipc: Enabled bearer , priority 0 [ 233.049529][T15848] +: renamed from syzkaller0 [ 233.055789][T15848] tipc: Disabling bearer [ 233.181495][T15852] __nla_validate_parse: 17 callbacks suppressed [ 233.181579][T15852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3381'. [ 233.197011][T15852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3381'. [ 233.304779][T15862] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3386'. [ 233.314542][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3386'. [ 234.130518][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 234.130544][ T29] audit: type=1326 audit(1738718382.242:13909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 234.160539][ T29] audit: type=1326 audit(1738718382.242:13910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 234.184217][ T29] audit: type=1326 audit(1738718382.242:13911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 234.244646][ T29] audit: type=1326 audit(1738718382.700:13912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 234.268233][ T29] audit: type=1326 audit(1738718382.700:13913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 234.291749][ T29] audit: type=1326 audit(1738718382.700:13914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 234.374241][ T29] audit: type=1326 audit(1738718382.822:13915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 234.397845][ T29] audit: type=1326 audit(1738718382.822:13916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 234.538669][ T29] audit: type=1326 audit(1738718382.887:13917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 234.562285][ T29] audit: type=1326 audit(1738718382.887:13918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15857 comm="syz.1.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 234.620210][T15884] lo speed is unknown, defaulting to 1000 [ 234.696200][T15891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3397'. [ 236.117905][T15932] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3410'. [ 236.224434][T15945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.243261][T15945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.618609][T15958] lo speed is unknown, defaulting to 1000 [ 238.332375][T16010] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 238.758440][T16019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3443'. [ 238.804303][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3445'. [ 238.822321][T16025] veth1_macvtap: left promiscuous mode [ 239.115764][T16054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3457'. [ 239.225380][T16075] vlan2: entered promiscuous mode [ 239.230994][T16075] bond0: entered promiscuous mode [ 239.236166][T16075] bond_slave_0: entered promiscuous mode [ 239.241966][T16075] bond_slave_1: entered promiscuous mode [ 239.249214][T16075] bond0: left promiscuous mode [ 239.254152][T16075] bond_slave_0: left promiscuous mode [ 239.259783][T16075] bond_slave_1: left promiscuous mode [ 239.429397][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 239.488167][T16103] tipc: Enabled bearer , priority 0 [ 239.496062][T16103] +: renamed from syzkaller0 [ 239.559297][T16103] tipc: Disabling bearer [ 239.594900][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 239.594914][ T29] audit: type=1326 audit(1738718387.677:14604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 239.624621][ T29] audit: type=1326 audit(1738718387.686:14605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 239.648226][ T29] audit: type=1326 audit(1738718387.686:14606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 239.671714][ T29] audit: type=1326 audit(1738718387.686:14607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 239.695191][ T29] audit: type=1326 audit(1738718387.686:14608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 239.718705][ T29] audit: type=1326 audit(1738718387.686:14609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 239.742200][ T29] audit: type=1326 audit(1738718387.686:14610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 239.765774][ T29] audit: type=1326 audit(1738718387.686:14611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 239.789213][ T29] audit: type=1326 audit(1738718387.695:14612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 239.812740][ T29] audit: type=1326 audit(1738718387.695:14613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.1.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 239.976919][T16127] vlan2: entered promiscuous mode [ 239.982635][T16127] bond0: entered promiscuous mode [ 239.987707][T16127] bond_slave_0: entered promiscuous mode [ 239.993508][T16127] bond_slave_1: entered promiscuous mode [ 240.000285][T16127] bond0: left promiscuous mode [ 240.005244][T16127] bond_slave_0: left promiscuous mode [ 240.010845][T16127] bond_slave_1: left promiscuous mode [ 240.392664][T16164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3492'. [ 240.702488][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3497'. [ 240.743312][T16192] lo speed is unknown, defaulting to 1000 [ 242.513164][T16268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3528'. [ 242.548069][T16270] 9pnet_fd: Insufficient options for proto=fd [ 242.603200][T16276] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 242.896097][T16294] tipc: Enabled bearer , priority 0 [ 242.903241][T16294] +: renamed from syzkaller0 [ 242.916900][T16294] tipc: Disabling bearer [ 242.955183][T16306] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 243.054779][T16316] lo speed is unknown, defaulting to 1000 [ 243.902177][T16329] xt_NFQUEUE: number of total queues is 0 [ 244.029603][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3557'. [ 244.046480][T16342] tipc: Enabled bearer , priority 0 [ 244.060207][T16339] lo speed is unknown, defaulting to 1000 [ 244.078407][T16342] +: renamed from syzkaller0 [ 244.089134][T16342] tipc: Disabling bearer [ 244.931553][T16398] lo speed is unknown, defaulting to 1000 [ 244.950962][ T29] kauditd_printk_skb: 932 callbacks suppressed [ 244.950979][ T29] audit: type=1326 audit(1738718392.718:15546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 244.980826][ T29] audit: type=1326 audit(1738718392.728:15547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 245.004567][ T29] audit: type=1326 audit(1738718392.728:15548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 245.028465][ T29] audit: type=1326 audit(1738718392.775:15549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 245.052035][ T29] audit: type=1326 audit(1738718392.775:15550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 245.075696][ T29] audit: type=1326 audit(1738718392.775:15551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 245.087838][T16408] tipc: Enabled bearer , priority 0 [ 245.099217][ T29] audit: type=1326 audit(1738718392.775:15552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 245.112239][T16408] +: renamed from syzkaller0 [ 245.129452][ T29] audit: type=1326 audit(1738718392.775:15553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 245.157723][ T29] audit: type=1326 audit(1738718392.775:15554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdbb5a93da7 code=0x7ffc0000 [ 245.181369][ T29] audit: type=1326 audit(1738718392.775:15555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16346 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdbb5a38fb9 code=0x7ffc0000 [ 245.208915][T16408] tipc: Disabling bearer [ 246.346341][T16432] vlan2: entered promiscuous mode [ 246.377324][T16437] xt_NFQUEUE: number of total queues is 0 [ 246.377665][T16432] bond0: entered promiscuous mode [ 246.388240][T16432] bond_slave_0: entered promiscuous mode [ 246.393979][T16432] bond_slave_1: entered promiscuous mode [ 246.490885][T16432] bond0: left promiscuous mode [ 246.495714][T16432] bond_slave_0: left promiscuous mode [ 246.501282][T16432] bond_slave_1: left promiscuous mode [ 246.560124][T16450] tipc: Enabled bearer , priority 0 [ 246.578893][T16450] +: renamed from syzkaller0 [ 246.617459][T16450] tipc: Disabling bearer [ 246.817337][T16459] lo speed is unknown, defaulting to 1000 [ 247.018715][T16468] xt_NFQUEUE: number of total queues is 0 [ 247.649282][T16484] tipc: Enabled bearer , priority 0 [ 247.690950][T16484] +: renamed from syzkaller0 [ 247.697761][T16484] tipc: Disabling bearer [ 248.245735][T16520] lo speed is unknown, defaulting to 1000 [ 248.860964][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 249.004557][T16562] vlan2: entered promiscuous mode [ 249.167207][T16562] bond0: entered promiscuous mode [ 249.172314][T16562] bond_slave_0: entered promiscuous mode [ 249.178164][T16562] bond_slave_1: entered promiscuous mode [ 249.372143][T16562] bond0: left promiscuous mode [ 249.377020][T16562] bond_slave_0: left promiscuous mode [ 249.382632][T16562] bond_slave_1: left promiscuous mode [ 250.014831][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 250.268702][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3630'. [ 250.357492][T16600] lo speed is unknown, defaulting to 1000 [ 250.991866][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 250.991880][ T29] audit: type=1326 audit(1738718398.378:15807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 251.142778][ T29] audit: type=1326 audit(1738718398.406:15808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 251.150888][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 251.166669][ T29] audit: type=1326 audit(1738718398.406:15809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 251.199969][ T29] audit: type=1326 audit(1738718398.406:15810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 251.223760][ T29] audit: type=1326 audit(1738718398.406:15811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 251.247651][ T29] audit: type=1326 audit(1738718398.406:15812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f7435b750 code=0x7ffc0000 [ 251.271353][ T29] audit: type=1326 audit(1738718398.406:15813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2f7435e617 code=0x7ffc0000 [ 251.295138][ T29] audit: type=1326 audit(1738718398.406:15814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 251.318825][ T29] audit: type=1326 audit(1738718398.406:15815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2f7435e617 code=0x7ffc0000 [ 251.342576][ T29] audit: type=1326 audit(1738718398.406:15816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16610 comm="syz.2.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2f7435ba4a code=0x7ffc0000 [ 251.409228][T16620] tipc: Started in network mode [ 251.414151][T16620] tipc: Node identity 5e960e253fa7, cluster identity 4711 [ 251.421369][T16620] tipc: Enabled bearer , priority 0 [ 251.456380][T16620] +: renamed from syzkaller0 [ 251.475254][T16620] tipc: Disabling bearer [ 251.495518][T16627] vlan2: entered promiscuous mode [ 251.500990][T16627] bond0: entered promiscuous mode [ 251.506144][T16627] bond_slave_0: entered promiscuous mode [ 251.511937][T16627] bond_slave_1: entered promiscuous mode [ 251.532674][T16627] bond0: left promiscuous mode [ 251.537688][T16627] bond_slave_0: left promiscuous mode [ 251.543370][T16627] bond_slave_1: left promiscuous mode [ 251.689281][T16643] tipc: Enabled bearer , priority 0 [ 251.696696][T16643] +: renamed from syzkaller0 [ 251.703342][T16643] tipc: Disabling bearer [ 252.048424][T16666] lo speed is unknown, defaulting to 1000 [ 252.681690][T16686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3667'. [ 252.860733][T16693] vlan2: entered promiscuous mode [ 252.866305][T16693] bond0: entered promiscuous mode [ 252.871400][T16693] bond_slave_0: entered promiscuous mode [ 252.877205][T16693] bond_slave_1: entered promiscuous mode [ 252.892543][T16693] bond0: left promiscuous mode [ 252.897429][T16693] bond_slave_0: left promiscuous mode [ 252.902935][T16693] bond_slave_1: left promiscuous mode [ 253.523249][T16731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3678'. [ 253.619411][T16750] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 253.887196][T16764] lo speed is unknown, defaulting to 1000 [ 254.380494][T16774] tipc: Enabled bearer , priority 0 [ 254.406049][T16774] +: renamed from syzkaller0 [ 254.416442][T16774] tipc: Disabling bearer [ 254.535779][T16782] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 255.481841][T16809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3699'. [ 255.683096][T16822] tipc: Enabled bearer , priority 0 [ 255.690392][T16822] +: renamed from syzkaller0 [ 255.697005][T16822] tipc: Disabling bearer [ 256.242873][T16832] lo speed is unknown, defaulting to 1000 [ 256.355636][ T29] kauditd_printk_skb: 881 callbacks suppressed [ 256.355653][ T29] audit: type=1326 audit(1738718403.382:16698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16810 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 256.385574][ T29] audit: type=1326 audit(1738718403.382:16699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16810 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cca408fb9 code=0x7ffc0000 [ 256.409265][ T29] audit: type=1326 audit(1738718403.382:16700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16810 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5cca46cde9 code=0x7ffc0000 [ 256.432684][ T29] audit: type=1326 audit(1738718403.391:16701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16810 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 256.456290][ T29] audit: type=1326 audit(1738718403.391:16702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16810 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cca408fb9 code=0x7ffc0000 [ 256.479938][ T29] audit: type=1326 audit(1738718403.391:16703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16810 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5cca46cde9 code=0x7ffc0000 [ 256.503446][ T29] audit: type=1326 audit(1738718403.401:16704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16810 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 256.527036][ T29] audit: type=1326 audit(1738718403.401:16705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16810 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cca408fb9 code=0x7ffc0000 [ 256.550650][ T29] audit: type=1326 audit(1738718403.401:16706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16810 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5cca46cde9 code=0x7ffc0000 [ 256.613590][ T29] audit: type=1326 audit(1738718403.410:16707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16810 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 256.638426][T16840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3710'. [ 258.317253][T16895] lo speed is unknown, defaulting to 1000 [ 258.665546][T16904] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 258.714851][T16908] vlan2: entered promiscuous mode [ 258.720554][T16908] bond0: entered promiscuous mode [ 258.725677][T16908] bond_slave_0: entered promiscuous mode [ 258.731540][T16908] bond_slave_1: entered promiscuous mode [ 258.738485][T16908] bond0: left promiscuous mode [ 258.743412][T16908] bond_slave_0: left promiscuous mode [ 258.749058][T16908] bond_slave_1: left promiscuous mode [ 258.981432][T16936] lo speed is unknown, defaulting to 1000 [ 259.119902][T16952] vlan2: entered promiscuous mode [ 259.136190][T16952] bond0: entered promiscuous mode [ 259.141380][T16952] bond_slave_0: entered promiscuous mode [ 259.147271][T16952] bond_slave_1: entered promiscuous mode [ 259.179845][T16952] bond0: left promiscuous mode [ 259.184681][T16952] bond_slave_0: left promiscuous mode [ 259.190160][T16952] bond_slave_1: left promiscuous mode [ 259.309427][T16967] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 259.340933][T16969] tipc: Enabled bearer , priority 0 [ 259.354303][T16969] +: renamed from syzkaller0 [ 259.709580][T16969] tipc: Disabling bearer [ 259.857579][T16986] lo speed is unknown, defaulting to 1000 [ 259.974051][T16998] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 260.009334][T17000] vlan2: entered promiscuous mode [ 260.016636][T17000] bond0: entered promiscuous mode [ 260.021818][T17000] bond_slave_0: entered promiscuous mode [ 260.027600][T17000] bond_slave_1: entered promiscuous mode [ 260.037792][T17000] bond0: left promiscuous mode [ 260.042666][T17000] bond_slave_0: left promiscuous mode [ 260.048357][T17000] bond_slave_1: left promiscuous mode [ 260.099163][T17003] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3758'. [ 260.150954][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'. [ 260.358753][T17025] vlan2: entered promiscuous mode [ 260.364572][T17025] bond0: entered promiscuous mode [ 260.369648][T17025] bond_slave_0: entered promiscuous mode [ 260.375357][T17025] bond_slave_1: entered promiscuous mode [ 260.382437][T17025] bond0: left promiscuous mode [ 260.387253][T17025] bond_slave_0: left promiscuous mode [ 260.392893][T17025] bond_slave_1: left promiscuous mode [ 260.523791][T17031] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 260.756134][T17042] vlan2: entered promiscuous mode [ 260.805464][T17042] bond0: entered promiscuous mode [ 260.810580][T17042] bond_slave_0: entered promiscuous mode [ 260.816329][T17042] bond_slave_1: entered promiscuous mode [ 260.869645][T17042] bond0: left promiscuous mode [ 260.874499][T17042] bond_slave_0: left promiscuous mode [ 260.880074][T17042] bond_slave_1: left promiscuous mode [ 261.364280][T17083] lo speed is unknown, defaulting to 1000 [ 261.542381][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 261.691415][T17107] vlan2: entered promiscuous mode [ 261.787452][T17107] bond0: entered promiscuous mode [ 261.792613][T17107] bond_slave_0: entered promiscuous mode [ 261.798549][T17107] bond_slave_1: entered promiscuous mode [ 261.823046][T17107] bond0: left promiscuous mode [ 261.827866][T17107] bond_slave_0: left promiscuous mode [ 261.833489][T17107] bond_slave_1: left promiscuous mode [ 262.119316][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 262.119334][ T29] audit: type=1326 audit(1738718408.770:17082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 262.163591][ T29] audit: type=1326 audit(1738718408.770:17083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 262.191166][T17124] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3792'. [ 262.242195][T17127] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3793'. [ 262.364988][ T29] audit: type=1326 audit(1738718409.004:17084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.4.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 262.388892][ T29] audit: type=1326 audit(1738718409.004:17085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.4.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 262.435773][T17148] vlan2: entered promiscuous mode [ 262.452102][ T29] audit: type=1326 audit(1738718409.032:17086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.4.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 262.458180][T17148] bond0: entered promiscuous mode [ 262.475965][ T29] audit: type=1326 audit(1738718409.032:17087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.4.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 262.480956][T17148] bond_slave_0: entered promiscuous mode [ 262.504484][ T29] audit: type=1326 audit(1738718409.032:17088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.4.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 262.510229][T17148] bond_slave_1: entered promiscuous mode [ 262.533769][ T29] audit: type=1326 audit(1738718409.032:17089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.4.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 262.563138][ T29] audit: type=1326 audit(1738718409.032:17090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.4.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 262.586879][ T29] audit: type=1326 audit(1738718409.032:17091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.4.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b0ccde9 code=0x7ffc0000 [ 262.622677][T17148] bond0: left promiscuous mode [ 262.627550][T17148] bond_slave_0: left promiscuous mode [ 262.633252][T17148] bond_slave_1: left promiscuous mode [ 262.786225][T17184] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3804'. [ 263.294456][T17195] lo speed is unknown, defaulting to 1000 [ 263.688026][T17203] vlan2: entered promiscuous mode [ 263.697430][T17203] bond0: entered promiscuous mode [ 263.702643][T17203] bond_slave_0: entered promiscuous mode [ 263.708391][T17203] bond_slave_1: entered promiscuous mode [ 263.739808][T17203] bond0: left promiscuous mode [ 263.744642][T17203] bond_slave_0: left promiscuous mode [ 263.750341][T17203] bond_slave_1: left promiscuous mode [ 264.061989][T17219] vlan2: entered promiscuous mode [ 264.067771][T17219] bond0: entered promiscuous mode [ 264.072921][T17219] bond_slave_0: entered promiscuous mode [ 264.078720][T17219] bond_slave_1: entered promiscuous mode [ 264.094352][T17219] bond0: left promiscuous mode [ 264.099186][T17219] bond_slave_0: left promiscuous mode [ 264.104644][T17219] bond_slave_1: left promiscuous mode [ 264.125562][T17222] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3815'. [ 265.254824][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3836'. [ 265.367982][T17268] vlan2: entered promiscuous mode [ 265.382380][T17268] bond0: entered promiscuous mode [ 265.387447][T17268] bond_slave_0: entered promiscuous mode [ 265.393283][T17268] bond_slave_1: entered promiscuous mode [ 265.413674][T17268] bond0: left promiscuous mode [ 265.418475][T17268] bond_slave_0: left promiscuous mode [ 265.424082][T17268] bond_slave_1: left promiscuous mode [ 265.536692][T17272] vlan2: entered promiscuous mode [ 265.552476][T17272] bond0: entered promiscuous mode [ 265.557652][T17272] bond_slave_0: entered promiscuous mode [ 265.563610][T17272] bond_slave_1: entered promiscuous mode [ 265.577587][T17272] bond0: left promiscuous mode [ 265.582420][T17272] bond_slave_0: left promiscuous mode [ 265.588105][T17272] bond_slave_1: left promiscuous mode [ 265.675852][T17278] vlan2: entered promiscuous mode [ 265.681800][T17278] bond0: entered promiscuous mode [ 265.686873][T17278] bond_slave_0: entered promiscuous mode [ 265.692702][T17278] bond_slave_1: entered promiscuous mode [ 265.703355][T17278] bond0: left promiscuous mode [ 265.708173][T17278] bond_slave_0: left promiscuous mode [ 265.713683][T17278] bond_slave_1: left promiscuous mode [ 265.748144][T17280] tipc: Enabled bearer , priority 0 [ 265.756425][T17280] +: renamed from syzkaller0 [ 265.762749][T17280] tipc: Disabling bearer [ 265.969136][T17296] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3841'. [ 266.066193][T17304] vlan2: entered promiscuous mode [ 266.071584][T17304] bond0: entered promiscuous mode [ 266.076749][T17304] bond_slave_0: entered promiscuous mode [ 266.082499][T17304] bond_slave_1: entered promiscuous mode [ 266.092604][T17304] bond0: left promiscuous mode [ 266.097599][T17304] bond_slave_0: left promiscuous mode [ 266.103221][T17304] bond_slave_1: left promiscuous mode [ 266.121039][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 266.471725][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3852'. [ 266.503658][T17332] vlan2: entered promiscuous mode [ 266.509097][T17332] bond0: entered promiscuous mode [ 266.514206][T17332] bond_slave_0: entered promiscuous mode [ 266.519921][T17332] bond_slave_1: entered promiscuous mode [ 266.526444][T17332] bond0: left promiscuous mode [ 266.531401][T17332] bond_slave_0: left promiscuous mode [ 266.536963][T17332] bond_slave_1: left promiscuous mode [ 266.745002][T17344] lo speed is unknown, defaulting to 1000 [ 266.813889][T17351] vlan2: entered promiscuous mode [ 266.819553][T17351] bond0: entered promiscuous mode [ 266.824844][T17351] bond_slave_0: entered promiscuous mode [ 266.830729][T17351] bond_slave_1: entered promiscuous mode [ 266.841554][T17351] bond0: left promiscuous mode [ 266.846407][T17351] bond_slave_0: left promiscuous mode [ 266.851998][T17351] bond_slave_1: left promiscuous mode [ 266.952285][T17358] vlan2: entered promiscuous mode [ 266.957768][T17358] bond0: entered promiscuous mode [ 266.962871][T17358] bond_slave_0: entered promiscuous mode [ 266.968616][T17358] bond_slave_1: entered promiscuous mode [ 266.975782][T17358] bond0: left promiscuous mode [ 266.980636][T17358] bond_slave_0: left promiscuous mode [ 266.986238][T17358] bond_slave_1: left promiscuous mode [ 267.089546][T17366] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3865'. [ 267.226499][T17373] lo speed is unknown, defaulting to 1000 [ 267.470647][ T29] kauditd_printk_skb: 1363 callbacks suppressed [ 267.470666][ T29] audit: type=1326 audit(1738718413.784:18455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 267.512932][ T29] audit: type=1326 audit(1738718413.784:18456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cca408fb9 code=0x7ffc0000 [ 267.536592][ T29] audit: type=1326 audit(1738718413.784:18457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5cca46cde9 code=0x7ffc0000 [ 267.560083][ T29] audit: type=1326 audit(1738718413.793:18458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 267.583650][ T29] audit: type=1326 audit(1738718413.793:18459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cca408fb9 code=0x7ffc0000 [ 267.607268][ T29] audit: type=1326 audit(1738718413.793:18460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5cca46cde9 code=0x7ffc0000 [ 267.630718][ T29] audit: type=1326 audit(1738718413.793:18461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 267.654386][ T29] audit: type=1326 audit(1738718413.793:18462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cca408fb9 code=0x7ffc0000 [ 267.677884][ T29] audit: type=1326 audit(1738718413.793:18463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5cca46cde9 code=0x7ffc0000 [ 267.803598][T17394] FAULT_INJECTION: forcing a failure. [ 267.803598][T17394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.816803][T17394] CPU: 0 UID: 0 PID: 17394 Comm: syz.2.3875 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 267.816908][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.816923][T17394] Call Trace: [ 267.816931][T17394] [ 267.816940][T17394] dump_stack_lvl+0xf2/0x150 [ 267.816980][T17394] dump_stack+0x15/0x1a [ 267.817000][T17394] should_fail_ex+0x24a/0x260 [ 267.817088][T17394] should_fail+0xb/0x10 [ 267.817115][T17394] should_fail_usercopy+0x1a/0x20 [ 267.817136][T17394] _copy_to_user+0x20/0xa0 [ 267.817168][T17394] simple_read_from_buffer+0xa0/0x110 [ 267.817200][T17394] proc_fail_nth_read+0xf9/0x140 [ 267.817224][T17394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.817261][T17394] vfs_read+0x19b/0x6f0 [ 267.817284][T17394] ? __rcu_read_unlock+0x4e/0x70 [ 267.817325][T17394] ? __fget_files+0x17c/0x1c0 [ 267.817354][T17394] ksys_read+0xe8/0x1b0 [ 267.817376][T17394] __x64_sys_read+0x42/0x50 [ 267.817414][T17394] x64_sys_call+0x2874/0x2dc0 [ 267.817439][T17394] do_syscall_64+0xc9/0x1c0 [ 267.817536][T17394] ? clear_bhb_loop+0x55/0xb0 [ 267.817569][T17394] ? clear_bhb_loop+0x55/0xb0 [ 267.817603][T17394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.817664][T17394] RIP: 0033:0x7f2f7435b7fc [ 267.817684][T17394] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 267.817702][T17394] RSP: 002b:00007f2f729c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.817778][T17394] RAX: ffffffffffffffda RBX: 00007f2f74575fa0 RCX: 00007f2f7435b7fc [ 267.817793][T17394] RDX: 000000000000000f RSI: 00007f2f729c10a0 RDI: 0000000000000006 [ 267.817833][T17394] RBP: 00007f2f729c1090 R08: 0000000000000000 R09: 0000000000000000 [ 267.817845][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.817857][T17394] R13: 0000000000000000 R14: 00007f2f74575fa0 R15: 00007fff1ac5bb48 [ 267.817879][T17394] [ 267.830384][ T29] audit: type=1326 audit(1738718414.008:18464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.0.3864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 268.050953][T17398] vlan2: entered promiscuous mode [ 268.056953][T17398] bond0: entered promiscuous mode [ 268.062057][T17398] bond_slave_0: entered promiscuous mode [ 268.067824][T17398] bond_slave_1: entered promiscuous mode [ 268.077611][T17398] bond0: left promiscuous mode [ 268.082420][T17398] bond_slave_0: left promiscuous mode [ 268.087992][T17398] bond_slave_1: left promiscuous mode [ 268.115061][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3888'. [ 268.133603][T17400] vlan2: entered promiscuous mode [ 268.149039][T17400] bond0: entered promiscuous mode [ 268.154152][T17400] bond_slave_0: entered promiscuous mode [ 268.159992][T17400] bond_slave_1: entered promiscuous mode [ 268.167551][T17400] bond0: left promiscuous mode [ 268.172402][T17400] bond_slave_0: left promiscuous mode [ 268.177861][T17400] bond_slave_1: left promiscuous mode [ 268.214510][T17406] tipc: Enabled bearer , priority 0 [ 268.225946][T17406] +: renamed from syzkaller0 [ 268.232182][T17406] tipc: Disabling bearer [ 268.387696][T17425] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 268.395315][T17425] team0: Port device batadv2 added [ 268.428753][T17430] lo speed is unknown, defaulting to 1000 [ 268.486739][T17436] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3891'. [ 268.536823][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3892'. [ 268.837509][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 269.261320][T17445] vlan2: entered promiscuous mode [ 269.277040][T17445] bond0: entered promiscuous mode [ 269.282148][T17445] bond_slave_0: entered promiscuous mode [ 269.287897][T17445] bond_slave_1: entered promiscuous mode [ 269.321554][T17445] bond0: left promiscuous mode [ 269.326489][T17445] bond_slave_0: left promiscuous mode [ 269.331968][T17445] bond_slave_1: left promiscuous mode [ 269.344626][T17447] vlan2: entered promiscuous mode [ 269.360663][T17447] bond0: entered promiscuous mode [ 269.365785][T17447] bond_slave_0: entered promiscuous mode [ 269.371583][T17447] bond_slave_1: entered promiscuous mode [ 269.401606][T17447] bond0: left promiscuous mode [ 269.406466][T17447] bond_slave_0: left promiscuous mode [ 269.412006][T17447] bond_slave_1: left promiscuous mode [ 269.553869][T17465] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3902'. [ 269.574150][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'. [ 269.621200][T17471] loop5: detected capacity change from 0 to 512 [ 269.649801][T17471] /dev/loop5: Can't open blockdev [ 269.650280][T17477] lo speed is unknown, defaulting to 1000 [ 269.899834][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 270.369319][T17497] vlan2: entered promiscuous mode [ 270.377273][T17497] bond0: entered promiscuous mode [ 270.382415][T17497] bond_slave_0: entered promiscuous mode [ 270.388370][T17497] bond_slave_1: entered promiscuous mode [ 270.395958][T17497] bond0: left promiscuous mode [ 270.400759][T17497] bond_slave_0: left promiscuous mode [ 270.406277][T17497] bond_slave_1: left promiscuous mode [ 270.615578][T17510] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3915'. [ 270.741513][T17526] lo speed is unknown, defaulting to 1000 [ 270.967134][T17535] vlan2: entered promiscuous mode [ 270.972726][T17535] bond0: entered promiscuous mode [ 270.977774][T17535] bond_slave_0: entered promiscuous mode [ 270.983579][T17535] bond_slave_1: entered promiscuous mode [ 271.006977][T17535] bond0: left promiscuous mode [ 271.011784][T17535] bond_slave_0: left promiscuous mode [ 271.017367][T17535] bond_slave_1: left promiscuous mode [ 271.330984][T17542] Cannot find set identified by id 0 to match [ 271.478254][T17554] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3930'. [ 271.744462][T17571] FAULT_INJECTION: forcing a failure. [ 271.744462][T17571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.757643][T17571] CPU: 0 UID: 0 PID: 17571 Comm: syz.4.3937 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 271.757669][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 271.757682][T17571] Call Trace: [ 271.757688][T17571] [ 271.757695][T17571] dump_stack_lvl+0xf2/0x150 [ 271.757828][T17571] dump_stack+0x15/0x1a [ 271.757848][T17571] should_fail_ex+0x24a/0x260 [ 271.757884][T17571] should_fail+0xb/0x10 [ 271.757986][T17571] should_fail_usercopy+0x1a/0x20 [ 271.758023][T17571] _copy_from_user+0x1c/0xa0 [ 271.758044][T17571] do_ipt_set_ctl+0x423/0x8b0 [ 271.758070][T17571] nf_setsockopt+0x195/0x1b0 [ 271.758102][T17571] ip_setsockopt+0xea/0x100 [ 271.758209][T17571] udp_setsockopt+0x95/0xb0 [ 271.758231][T17571] sock_common_setsockopt+0x64/0x80 [ 271.758257][T17571] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 271.758279][T17571] __sys_setsockopt+0x187/0x200 [ 271.758306][T17571] __x64_sys_setsockopt+0x66/0x80 [ 271.758345][T17571] x64_sys_call+0x282e/0x2dc0 [ 271.758428][T17571] do_syscall_64+0xc9/0x1c0 [ 271.758451][T17571] ? clear_bhb_loop+0x55/0xb0 [ 271.758476][T17571] ? clear_bhb_loop+0x55/0xb0 [ 271.758526][T17571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.758552][T17571] RIP: 0033:0x7f8a1b0ccde9 [ 271.758566][T17571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.758584][T17571] RSP: 002b:00007f8a19737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.758601][T17571] RAX: ffffffffffffffda RBX: 00007f8a1b2e5fa0 RCX: 00007f8a1b0ccde9 [ 271.758635][T17571] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 271.758646][T17571] RBP: 00007f8a19737090 R08: 0000000000000538 R09: 0000000000000000 [ 271.758657][T17571] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 271.758668][T17571] R13: 0000000000000000 R14: 00007f8a1b2e5fa0 R15: 00007ffc0fbd6728 [ 271.758685][T17571] [ 271.973351][T17563] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3933'. [ 272.026438][T17570] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 272.036701][T17573] xt_hashlimit: max too large, truncated to 1048576 [ 272.289407][T17586] program syz.2.3935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.466737][T17592] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3944'. [ 272.601114][T17599] lo speed is unknown, defaulting to 1000 [ 272.828655][ T29] kauditd_printk_skb: 961 callbacks suppressed [ 272.828671][ T29] audit: type=1326 audit(1738718418.797:19426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17593 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 272.858614][ T29] audit: type=1326 audit(1738718418.797:19427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17593 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cca408fb9 code=0x7ffc0000 [ 272.882203][ T29] audit: type=1326 audit(1738718418.797:19428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17593 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5cca46cde9 code=0x7ffc0000 [ 272.905978][ T29] audit: type=1326 audit(1738718418.826:19429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17593 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 272.929873][ T29] audit: type=1326 audit(1738718418.826:19430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17593 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cca408fb9 code=0x7ffc0000 [ 272.953622][ T29] audit: type=1326 audit(1738718418.826:19431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17593 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5cca46cde9 code=0x7ffc0000 [ 272.977193][ T29] audit: type=1326 audit(1738718418.826:19432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17593 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 273.000765][ T29] audit: type=1326 audit(1738718418.826:19433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17593 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cca408fb9 code=0x7ffc0000 [ 273.024708][ T29] audit: type=1326 audit(1738718418.826:19434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17593 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5cca46cde9 code=0x7ffc0000 [ 273.048455][ T29] audit: type=1326 audit(1738718418.835:19435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17593 comm="syz.0.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 273.058472][T17606] vlan2: entered promiscuous mode [ 273.080468][T17606] bond0: entered promiscuous mode [ 273.085516][T17606] bond_slave_0: entered promiscuous mode [ 273.091269][T17606] bond_slave_1: entered promiscuous mode [ 273.115994][T17606] bond0: left promiscuous mode [ 273.120876][T17606] bond_slave_0: left promiscuous mode [ 273.126538][T17606] bond_slave_1: left promiscuous mode [ 273.144065][T17608] vlan2: entered promiscuous mode [ 273.149440][T17608] bond0: entered promiscuous mode [ 273.154532][T17608] bond_slave_0: entered promiscuous mode [ 273.160282][T17608] bond_slave_1: entered promiscuous mode [ 273.170260][T17608] bond0: left promiscuous mode [ 273.175100][T17608] bond_slave_0: left promiscuous mode [ 273.180588][T17608] bond_slave_1: left promiscuous mode [ 274.047115][T17644] vlan2: entered promiscuous mode [ 274.052616][T17644] bond0: entered promiscuous mode [ 274.057678][T17644] bond_slave_0: entered promiscuous mode [ 274.063529][T17644] bond_slave_1: entered promiscuous mode [ 274.073620][T17644] bond0: left promiscuous mode [ 274.078501][T17644] bond_slave_0: left promiscuous mode [ 274.083993][T17644] bond_slave_1: left promiscuous mode [ 274.185869][T17646] vlan2: entered promiscuous mode [ 274.191916][T17646] bond0: entered promiscuous mode [ 274.197018][T17646] bond_slave_0: entered promiscuous mode [ 274.202904][T17646] bond_slave_1: entered promiscuous mode [ 274.209381][T17646] bond0: left promiscuous mode [ 274.214261][T17646] bond_slave_0: left promiscuous mode [ 274.219753][T17646] bond_slave_1: left promiscuous mode [ 274.232351][T17648] veth0_to_batadv: entered promiscuous mode [ 274.240131][T17648] veth0_to_batadv: left promiscuous mode [ 274.330319][T17652] __nla_validate_parse: 3 callbacks suppressed [ 274.330336][T17652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3967'. [ 274.345455][T17652] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3967'. [ 274.431482][T17661] lo speed is unknown, defaulting to 1000 [ 274.702716][T17679] Cannot find set identified by id 0 to match [ 274.779296][T17681] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3977'. [ 274.809542][T17681] loop2: detected capacity change from 0 to 512 [ 274.834444][T17681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.857870][T17681] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.079241][T13814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.358510][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3981'. [ 275.367503][T17693] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3981'. [ 275.879228][T17715] Cannot find set identified by id 0 to match [ 275.911014][T17717] loop4: detected capacity change from 0 to 2048 [ 275.917802][T17717] ext4: Unknown parameter 'appraise' [ 275.925323][T17717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3988'. [ 275.934352][T17717] tc_dump_action: action bad kind [ 275.945512][T17717] xt_TCPMSS: Only works on TCP SYN packets [ 275.984523][T17719] vlan2: entered promiscuous mode [ 275.990105][T17719] bond0: entered promiscuous mode [ 275.995177][T17719] bond_slave_0: entered promiscuous mode [ 276.001006][T17719] bond_slave_1: entered promiscuous mode [ 276.009261][T17719] bond0: left promiscuous mode [ 276.014057][T17719] bond_slave_0: left promiscuous mode [ 276.019690][T17719] bond_slave_1: left promiscuous mode [ 276.039953][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 276.366776][T17725] lo speed is unknown, defaulting to 1000 [ 276.438687][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3992'. [ 276.447646][T17730] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3992'. [ 276.568109][T17738] netlink: 'syz.0.3995': attribute type 4 has an invalid length. [ 276.575941][T17738] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3995'. [ 276.603439][T17739] lo speed is unknown, defaulting to 1000 [ 276.957971][T17752] Cannot find set identified by id 0 to match [ 277.033975][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4003'. [ 277.273751][T17762] vlan2: entered promiscuous mode [ 277.279492][T17762] bond0: entered promiscuous mode [ 277.284569][T17762] bond_slave_0: entered promiscuous mode [ 277.290277][T17762] bond_slave_1: entered promiscuous mode [ 277.465134][T17762] bond0: left promiscuous mode [ 277.469989][T17762] bond_slave_0: left promiscuous mode [ 277.475540][T17762] bond_slave_1: left promiscuous mode [ 277.487488][T17767] vlan2: entered promiscuous mode [ 277.492898][T17767] bond0: entered promiscuous mode [ 277.497979][T17767] bond_slave_0: entered promiscuous mode [ 277.503876][T17767] bond_slave_1: entered promiscuous mode [ 277.510651][T17767] bond0: left promiscuous mode [ 277.515491][T17767] bond_slave_0: left promiscuous mode [ 277.520926][T17767] bond_slave_1: left promiscuous mode [ 277.624608][T17776] vlan2: entered promiscuous mode [ 277.636754][T17776] bond0: entered promiscuous mode [ 277.641831][T17776] bond_slave_0: entered promiscuous mode [ 277.647686][T17776] bond_slave_1: entered promiscuous mode [ 277.661191][T17776] bond0: left promiscuous mode [ 277.666118][T17776] bond_slave_0: left promiscuous mode [ 277.671624][T17776] bond_slave_1: left promiscuous mode [ 277.694390][T17780] bridge0: port 3(vlan2) entered blocking state [ 277.700807][T17780] bridge0: port 3(vlan2) entered disabled state [ 277.707343][T17780] vlan2: entered allmulticast mode [ 277.713014][T17780] vlan2: left allmulticast mode [ 277.785712][T17786] Cannot find set identified by id 0 to match [ 277.852225][T17793] wg2: entered promiscuous mode [ 277.857417][T17793] wg2: entered allmulticast mode [ 277.974638][T17800] vlan2: entered promiscuous mode [ 277.980172][T17800] bond0: entered promiscuous mode [ 277.985293][T17800] bond_slave_0: entered promiscuous mode [ 277.991119][T17800] bond_slave_1: entered promiscuous mode [ 277.998155][T17800] bond0: left promiscuous mode [ 278.002979][T17800] bond_slave_0: left promiscuous mode [ 278.008582][T17800] bond_slave_1: left promiscuous mode [ 278.184253][T17811] loop2: detected capacity change from 0 to 512 [ 278.192123][T17811] EXT4-fs: Ignoring removed i_version option [ 278.198221][T17811] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.217083][T17811] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 278.315442][T17813] FAULT_INJECTION: forcing a failure. [ 278.315442][T17813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.328635][T17813] CPU: 1 UID: 0 PID: 17813 Comm: syz.4.4024 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 278.328660][T17813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 278.328672][T17813] Call Trace: [ 278.328748][T17813] [ 278.328756][T17813] dump_stack_lvl+0xf2/0x150 [ 278.328790][T17813] dump_stack+0x15/0x1a [ 278.328812][T17813] should_fail_ex+0x24a/0x260 [ 278.328903][T17813] should_fail+0xb/0x10 [ 278.328936][T17813] should_fail_usercopy+0x1a/0x20 [ 278.328956][T17813] _copy_from_user+0x1c/0xa0 [ 278.329043][T17813] copy_msghdr_from_user+0x54/0x2a0 [ 278.329065][T17813] ? __fget_files+0x17c/0x1c0 [ 278.329099][T17813] __sys_sendmsg+0x13e/0x230 [ 278.329186][T17813] __x64_sys_sendmsg+0x46/0x50 [ 278.329221][T17813] x64_sys_call+0x2734/0x2dc0 [ 278.329246][T17813] do_syscall_64+0xc9/0x1c0 [ 278.329270][T17813] ? clear_bhb_loop+0x55/0xb0 [ 278.329315][T17813] ? clear_bhb_loop+0x55/0xb0 [ 278.329348][T17813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.329383][T17813] RIP: 0033:0x7f8a1b0ccde9 [ 278.329401][T17813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.329495][T17813] RSP: 002b:00007f8a19737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.329517][T17813] RAX: ffffffffffffffda RBX: 00007f8a1b2e5fa0 RCX: 00007f8a1b0ccde9 [ 278.329532][T17813] RDX: 000000000000c000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 278.329547][T17813] RBP: 00007f8a19737090 R08: 0000000000000000 R09: 0000000000000000 [ 278.329562][T17813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.329576][T17813] R13: 0000000000000000 R14: 00007f8a1b2e5fa0 R15: 00007ffc0fbd6728 [ 278.329595][T17813] [ 278.520711][T17811] EXT4-fs (loop2): 1 truncate cleaned up [ 278.526921][T17811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.534323][T17816] vlan2: entered promiscuous mode [ 278.544611][T17816] bond0: entered promiscuous mode [ 278.549671][T17816] bond_slave_0: entered promiscuous mode [ 278.555590][T17816] bond_slave_1: entered promiscuous mode [ 278.565744][T17816] bond0: left promiscuous mode [ 278.570573][T17816] bond_slave_0: left promiscuous mode [ 278.576123][T17816] bond_slave_1: left promiscuous mode [ 278.607827][T17821] Cannot find set identified by id 0 to match [ 278.652067][ T29] kauditd_printk_skb: 736 callbacks suppressed [ 278.652265][ T29] audit: type=1400 audit(1738718424.241:20172): avc: denied { listen } for pid=17823 comm="syz.1.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 278.686118][ T29] audit: type=1326 audit(1738718424.270:20173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 278.709770][ T29] audit: type=1326 audit(1738718424.270:20174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 278.733593][ T29] audit: type=1326 audit(1738718424.270:20175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 278.757294][ T29] audit: type=1326 audit(1738718424.270:20176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17827 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbb5acf6a5 code=0x7ffc0000 [ 278.780984][ T29] audit: type=1326 audit(1738718424.270:20177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 278.804573][ T29] audit: type=1326 audit(1738718424.270:20178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 278.828248][ T29] audit: type=1326 audit(1738718424.270:20179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbb5a9cde9 code=0x7ffc0000 [ 278.855207][T13814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.891315][ T29] audit: type=1400 audit(1738718424.466:20180): avc: denied { create } for pid=17830 comm="syz.1.4031" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.936971][T17835] vlan2: entered promiscuous mode [ 278.942461][T17835] bond0: entered promiscuous mode [ 278.947573][T17835] bond_slave_0: entered promiscuous mode [ 278.953411][T17835] bond_slave_1: entered promiscuous mode [ 278.962774][T17835] bond0: left promiscuous mode [ 278.967560][T17835] bond_slave_0: left promiscuous mode [ 278.973294][T17835] bond_slave_1: left promiscuous mode [ 279.018227][ T29] audit: type=1400 audit(1738718424.466:20181): avc: denied { write } for pid=17830 comm="syz.1.4031" name="file0" dev="tmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.088194][T17843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.096810][T17843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.401403][T17864] Cannot find set identified by id 0 to match [ 279.499476][T17872] loop4: detected capacity change from 0 to 2048 [ 279.515558][T17872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.591640][T14405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.647704][T17883] tipc: Enabled bearer , priority 0 [ 279.655261][T17883] +: renamed from syzkaller0 [ 279.661187][T17883] tipc: Disabling bearer [ 279.754337][T17891] __nla_validate_parse: 10 callbacks suppressed [ 279.754357][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'. [ 279.794888][T17897] vlan2: entered promiscuous mode [ 279.800306][T17897] bond0: entered promiscuous mode [ 279.805470][T17897] bond_slave_0: entered promiscuous mode [ 279.811302][T17897] bond_slave_1: entered promiscuous mode [ 279.869610][T17897] bond0: left promiscuous mode [ 279.874433][T17897] bond_slave_0: left promiscuous mode [ 279.880162][T17897] bond_slave_1: left promiscuous mode [ 279.927796][T17906] FAULT_INJECTION: forcing a failure. [ 279.927796][T17906] name failslab, interval 1, probability 0, space 0, times 0 [ 279.940527][T17906] CPU: 0 UID: 0 PID: 17906 Comm: syz.2.4054 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 279.940608][T17906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 279.940622][T17906] Call Trace: [ 279.940630][T17906] [ 279.940638][T17906] dump_stack_lvl+0xf2/0x150 [ 279.940664][T17906] dump_stack+0x15/0x1a [ 279.940684][T17906] should_fail_ex+0x24a/0x260 [ 279.940778][T17906] should_failslab+0x8f/0xb0 [ 279.940802][T17906] __kmalloc_noprof+0xab/0x3f0 [ 279.940925][T17906] ? bpf_test_init+0xc7/0x170 [ 279.940961][T17906] bpf_test_init+0xc7/0x170 [ 279.940992][T17906] bpf_prog_test_run_xdp+0x321/0x8b0 [ 279.941036][T17906] ? __rcu_read_unlock+0x4e/0x70 [ 279.941065][T17906] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 279.941130][T17906] bpf_prog_test_run+0x20f/0x3a0 [ 279.941165][T17906] __sys_bpf+0x400/0x7a0 [ 279.941204][T17906] __x64_sys_bpf+0x43/0x50 [ 279.941246][T17906] x64_sys_call+0x2914/0x2dc0 [ 279.941277][T17906] do_syscall_64+0xc9/0x1c0 [ 279.941304][T17906] ? clear_bhb_loop+0x55/0xb0 [ 279.941337][T17906] ? clear_bhb_loop+0x55/0xb0 [ 279.941390][T17906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.941417][T17906] RIP: 0033:0x7f2f7435cde9 [ 279.941431][T17906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.941451][T17906] RSP: 002b:00007f2f729c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.941527][T17906] RAX: ffffffffffffffda RBX: 00007f2f74575fa0 RCX: 00007f2f7435cde9 [ 279.941539][T17906] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 279.941550][T17906] RBP: 00007f2f729c1090 R08: 0000000000000000 R09: 0000000000000000 [ 279.941564][T17906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.941578][T17906] R13: 0000000000000000 R14: 00007f2f74575fa0 R15: 00007fff1ac5bb48 [ 279.941596][T17906] [ 280.147458][T17907] program syz.1.4052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.324840][T17920] sctp: [Deprecated]: syz.1.4057 (pid 17920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.324840][T17920] Use struct sctp_sack_info instead [ 280.565812][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4061'. [ 280.708509][T17931] loop5: detected capacity change from 0 to 512 [ 280.744812][T17931] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 280.889997][T17931] EXT4-fs (loop5): 1 truncate cleaned up [ 280.901540][T17940] macvlan0: entered promiscuous mode [ 280.915414][T17940] ipvlan0: entered promiscuous mode [ 280.921299][T17931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.940040][T17940] ipvlan0: left promiscuous mode [ 280.950285][T17940] macvlan0: left promiscuous mode [ 280.965338][T17944] FAULT_INJECTION: forcing a failure. [ 280.965338][T17944] name failslab, interval 1, probability 0, space 0, times 0 [ 280.978133][T17944] CPU: 0 UID: 0 PID: 17944 Comm: syz.4.4068 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 280.978237][T17944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 280.978250][T17944] Call Trace: [ 280.978257][T17944] [ 280.978265][T17944] dump_stack_lvl+0xf2/0x150 [ 280.978390][T17944] dump_stack+0x15/0x1a [ 280.978417][T17944] should_fail_ex+0x24a/0x260 [ 280.978458][T17944] should_failslab+0x8f/0xb0 [ 280.978601][T17944] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 280.978772][T17944] ? debugfs_alloc_inode+0x34/0x40 [ 280.978801][T17944] debugfs_alloc_inode+0x34/0x40 [ 280.978831][T17944] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 280.978865][T17944] alloc_inode+0x3c/0x160 [ 280.978933][T17944] new_inode+0x1e/0x100 [ 280.978967][T17944] __debugfs_create_file+0x110/0x330 [ 280.979000][T17944] debugfs_create_file_full+0x40/0x60 [ 280.979055][T17944] do_blk_trace_setup+0x2cf/0x4d0 [ 280.979083][T17944] blk_trace_setup+0xa7/0x140 [ 280.979148][T17944] blk_trace_ioctl+0xea/0x2e0 [ 280.979183][T17944] ? do_vfs_ioctl+0x96e/0x1530 [ 280.979209][T17944] ? selinux_file_ioctl+0x2f7/0x380 [ 280.979307][T17944] blkdev_ioctl+0x281/0x450 [ 280.979338][T17944] ? __pfx_blkdev_ioctl+0x10/0x10 [ 280.979370][T17944] __se_sys_ioctl+0xc9/0x140 [ 280.979436][T17944] __x64_sys_ioctl+0x43/0x50 [ 280.979454][T17944] x64_sys_call+0x1690/0x2dc0 [ 280.979548][T17944] do_syscall_64+0xc9/0x1c0 [ 280.979572][T17944] ? clear_bhb_loop+0x55/0xb0 [ 280.979598][T17944] ? clear_bhb_loop+0x55/0xb0 [ 280.979700][T17944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.979727][T17944] RIP: 0033:0x7f8a1b0ccde9 [ 280.979742][T17944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.979842][T17944] RSP: 002b:00007f8a19737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.979898][T17944] RAX: ffffffffffffffda RBX: 00007f8a1b2e5fa0 RCX: 00007f8a1b0ccde9 [ 280.979910][T17944] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000005 [ 280.979921][T17944] RBP: 00007f8a19737090 R08: 0000000000000000 R09: 0000000000000000 [ 280.979932][T17944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.979943][T17944] R13: 0000000000000000 R14: 00007f8a1b2e5fa0 R15: 00007ffc0fbd6728 [ 280.979963][T17944] [ 281.208375][T17944] debugfs: out of free dentries, can not create file 'dropped' [ 281.301022][T17952] loop4: detected capacity change from 0 to 1024 [ 281.308794][T17952] EXT4-fs: inline encryption not supported [ 281.326694][T13208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.339975][T17952] EXT4-fs (loop4): invalid first ino: 3825205259 [ 281.377072][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4071'. [ 281.422007][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4073'. [ 281.606278][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4076'. [ 281.645566][T17981] vlan2: entered promiscuous mode [ 281.650667][T17981] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 281.671218][T17981] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 281.686948][T17980] loop5: detected capacity change from 0 to 512 [ 281.697661][T17980] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 281.788180][T17991] program syz.0.4079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.954321][T17997] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 282.079135][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4084'. [ 282.434687][T18011] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4088'. [ 282.601847][T18016] program syz.2.4090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.659719][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 282.745597][T18022] vlan2: entered promiscuous mode [ 282.750993][T18022] bond0: entered promiscuous mode [ 282.756103][T18022] bond_slave_0: entered promiscuous mode [ 282.761832][T18022] bond_slave_1: entered promiscuous mode [ 282.768992][T18022] bond0: left promiscuous mode [ 282.773808][T18022] bond_slave_0: left promiscuous mode [ 282.779278][T18022] bond_slave_1: left promiscuous mode [ 282.807022][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4093'. [ 282.929729][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'. [ 283.023021][T18042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4099'. [ 283.176131][T18052] loop5: detected capacity change from 0 to 2048 [ 283.194378][T18052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.207583][T18052] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.247084][T13208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.292319][T18061] vlan2: entered promiscuous mode [ 283.299183][T18061] bond0: entered promiscuous mode [ 283.304262][T18061] bond_slave_0: entered promiscuous mode [ 283.310054][T18061] bond_slave_1: entered promiscuous mode [ 283.319516][T18061] bond0: left promiscuous mode [ 283.324342][T18061] bond_slave_0: left promiscuous mode [ 283.329806][T18061] bond_slave_1: left promiscuous mode [ 283.458559][T18065] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.467402][T18065] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.476239][T18065] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.485002][T18065] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.005963][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 284.005980][ T29] audit: type=1326 audit(1738718429.255:20750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18047 comm="syz.0.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cca463da7 code=0x7ffc0000 [ 284.035914][ T29] audit: type=1326 audit(1738718429.255:20751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18047 comm="syz.0.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cca408fb9 code=0x7ffc0000 [ 284.059649][ T29] audit: type=1326 audit(1738718429.255:20752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18047 comm="syz.0.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5cca46cde9 code=0x7ffc0000 [ 284.094847][T18093] netlink: 'syz.2.4115': attribute type 1 has an invalid length. [ 284.103681][ T29] audit: type=1326 audit(1738718429.330:20753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18092 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 284.127513][ T29] audit: type=1326 audit(1738718429.330:20754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18092 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 284.151216][ T29] audit: type=1326 audit(1738718429.330:20755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18092 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 284.174927][ T29] audit: type=1326 audit(1738718429.330:20756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18092 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 284.198461][ T29] audit: type=1326 audit(1738718429.330:20757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18092 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 284.222120][ T29] audit: type=1326 audit(1738718429.330:20758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18092 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 284.245954][ T29] audit: type=1326 audit(1738718429.330:20759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18092 comm="syz.2.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2f7435cde9 code=0x7ffc0000 [ 284.290783][T18097] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.299623][T18097] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.308394][T18097] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.317155][T18097] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.342147][T18098] vlan2: entered promiscuous mode [ 284.350346][T18098] bond0: entered promiscuous mode [ 284.355425][T18098] bond_slave_0: entered promiscuous mode [ 284.361202][T18098] bond_slave_1: entered promiscuous mode [ 284.375144][T18093] loop2: detected capacity change from 0 to 2048 [ 284.381817][T18098] bond0: left promiscuous mode [ 284.382301][T18093] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 284.386603][T18098] bond_slave_0: left promiscuous mode [ 284.399468][T18098] bond_slave_1: left promiscuous mode [ 284.470037][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 284.666739][T18109] FAULT_INJECTION: forcing a failure. [ 284.666739][T18109] name failslab, interval 1, probability 0, space 0, times 0 [ 284.679637][T18109] CPU: 0 UID: 0 PID: 18109 Comm: syz.5.4122 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 284.679667][T18109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 284.679682][T18109] Call Trace: [ 284.679689][T18109] [ 284.679698][T18109] dump_stack_lvl+0xf2/0x150 [ 284.679731][T18109] dump_stack+0x15/0x1a [ 284.679756][T18109] should_fail_ex+0x24a/0x260 [ 284.679803][T18109] should_failslab+0x8f/0xb0 [ 284.679834][T18109] kmem_cache_alloc_noprof+0x52/0x320 [ 284.679878][T18109] ? vm_area_dup+0x98/0x130 [ 284.679902][T18109] vm_area_dup+0x98/0x130 [ 284.679924][T18109] __split_vma+0xf7/0x6a0 [ 284.679961][T18109] vma_modify+0xd3/0x1e0 [ 284.679999][T18109] vma_modify_flags+0xf1/0x120 [ 284.680040][T18109] mlock_fixup+0x113/0x450 [ 284.680068][T18109] apply_vma_lock_flags+0x194/0x240 [ 284.680100][T18109] do_mlock+0x3f4/0x570 [ 284.680127][T18109] ? ksys_write+0x176/0x1b0 [ 284.680151][T18109] __x64_sys_mlock+0x36/0x40 [ 284.680169][T18109] x64_sys_call+0x26b2/0x2dc0 [ 284.680193][T18109] do_syscall_64+0xc9/0x1c0 [ 284.680216][T18109] ? clear_bhb_loop+0x55/0xb0 [ 284.680247][T18109] ? clear_bhb_loop+0x55/0xb0 [ 284.680279][T18109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.680311][T18109] RIP: 0033:0x7fb0607bcde9 [ 284.680325][T18109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.680342][T18109] RSP: 002b:00007fb05ee21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 284.680359][T18109] RAX: ffffffffffffffda RBX: 00007fb0609d5fa0 RCX: 00007fb0607bcde9 [ 284.680371][T18109] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 284.680383][T18109] RBP: 00007fb05ee21090 R08: 0000000000000000 R09: 0000000000000000 [ 284.680397][T18109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.680408][T18109] R13: 0000000000000000 R14: 00007fb0609d5fa0 R15: 00007ffe6fca0a78 [ 284.680425][T18109] [ 284.970142][T18123] Cannot find set identified by id 0 to match [ 285.108990][T18135] netlink: 'syz.2.4132': attribute type 1 has an invalid length. [ 285.109737][T18133] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.125592][T18133] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.134438][T18133] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.134926][T18137] loop4: detected capacity change from 0 to 2048 [ 285.143255][T18133] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.193776][T18137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.214227][T18137] 9pnet_fd: Insufficient options for proto=fd [ 285.240065][T18147] vlan2: entered promiscuous mode [ 285.248479][T18147] bond0: entered promiscuous mode [ 285.253544][T18147] bond_slave_0: entered promiscuous mode [ 285.259322][T18147] bond_slave_1: entered promiscuous mode [ 285.289096][T18147] bond0: left promiscuous mode [ 285.294065][T18147] bond_slave_0: left promiscuous mode [ 285.299931][T18147] bond_slave_1: left promiscuous mode [ 285.310357][T14405] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.498121][ T9873] kernel write not supported for file /740/attr/exec (pid: 9873 comm: kworker/1:6) [ 285.507750][ T9873] kernel write not supported for file /740/attr/exec (pid: 9873 comm: kworker/1:6) [ 285.562300][ T6961] udevd[6961]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 285.576700][T18174] Cannot find set identified by id 0 to match [ 285.688136][T18182] __nla_validate_parse: 1 callbacks suppressed [ 285.688156][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4147'. [ 285.727832][T18193] lo speed is unknown, defaulting to 1000 [ 286.541306][T18221] Cannot find set identified by id 0 to match [ 286.552680][ C0] ================================================================== [ 286.560806][ C0] BUG: KCSAN: data-race in can_send / can_send [ 286.566997][ C0] [ 286.569325][ C0] read-write to 0xffff8881187562f0 of 8 bytes by interrupt on cpu 1: [ 286.577402][ C0] can_send+0x5b6/0x6d0 [ 286.581573][ C0] bcm_can_tx+0x314/0x420 [ 286.586020][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 286.591503][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 286.596726][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 286.601763][ C0] handle_softirqs+0xbf/0x280 [ 286.606444][ C0] run_ksoftirqd+0x1c/0x30 [ 286.610866][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 286.615811][ C0] kthread+0x4ae/0x520 [ 286.619889][ C0] ret_from_fork+0x4b/0x60 [ 286.624323][ C0] ret_from_fork_asm+0x1a/0x30 [ 286.629098][ C0] [ 286.631417][ C0] read-write to 0xffff8881187562f0 of 8 bytes by interrupt on cpu 0: [ 286.639491][ C0] can_send+0x5b6/0x6d0 [ 286.643653][ C0] bcm_can_tx+0x314/0x420 [ 286.647993][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 286.653276][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 286.658473][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 286.663496][ C0] handle_softirqs+0xbf/0x280 [ 286.668176][ C0] run_ksoftirqd+0x1c/0x30 [ 286.672595][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 286.677533][ C0] kthread+0x4ae/0x520 [ 286.681612][ C0] ret_from_fork+0x4b/0x60 [ 286.686031][ C0] ret_from_fork_asm+0x1a/0x30 [ 286.690801][ C0] [ 286.693117][ C0] value changed: 0x0000000000000110 -> 0x0000000000000111 [ 286.700217][ C0] [ 286.702553][ C0] Reported by Kernel Concurrency Sanitizer on: [ 286.708695][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 286.719280][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 286.729333][ C0] ==================================================================