last executing test programs: 5m47.136358764s ago: executing program 2 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) 5m47.120353986s ago: executing program 2 (id=293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000000000000000000003bdf1aed5367b997fce9e218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) socket$rds(0x15, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000600)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/107, 0x6b}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/7, 0x7}, {&(0x7f00000007c0)=""/215, 0xd7}], 0x4, &(0x7f0000000c00)=[@mask_fadd={0x58, 0x114, 0x8, {{0x100, 0x9}, &(0x7f0000000b00)=0x5, &(0x7f0000000b40)=0x5, 0x5, 0x3, 0x3, 0x80, 0x3c, 0x8001}}, @fadd={0x58, 0x114, 0x6, {{0xfffffe00, 0x80000001}, &(0x7f0000000b80)=0x400, &(0x7f0000000bc0)=0x7fffffff, 0x5, 0x5, 0x3ff, 0x5, 0xa, 0x2}}], 0xb0, 0x2004c800}, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {0x77359400}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)=""/248, &(0x7f0000000500)=0xf8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000180)=0xd839, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000001c0000000000"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a002903ffffffff000000000a00000000000000080005"], 0x20}}, 0x0) 5m46.982239579s ago: executing program 2 (id=296): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x4b, 0x7, "daf1684742d141"}}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}}}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000011) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002101}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) shmget$private(0x0, 0x4000, 0x100, &(0x7f00004a7000/0x4000)=nil) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="eeffffff0a0002"], 0x28}}, 0x0) write$tun(r8, &(0x7f0000000180)={@void, @val={0x0, 0x3, 0x7, 0x7, 0x7, 0x7}, @arp=@generic={0x30c, 0x1b, 0x6, 0x0, 0xa, @multicast, "", @random="9e4b962e5dab", "65d5e41274aa37d0"}}, 0x26) 5m46.960472581s ago: executing program 2 (id=297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x7, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000100000000001000000185300000e00000000000000000000001800000004000000000000007d0cdeb02612bb951fa03c01437db38ab05a1971fbf1472826f22fd74be303542465d087d4263c0390b4d28165effc741e7244cd1087d75b914a9c0000000022a1faef1f0245e3a9488b88fc0adda4b9242632e94413d412f5f5519d7a0d2027a85c21403b89a936a8eeb297bc9090da7d65ab1d0d20aa57246dac76000000009c5f5c0af75259cf813a2a49ef4c10259d15b2ff6cc2f778f824bb0f93d7bda8e4dc02a98cade8cbcad2705539582f82070c649e17cb87c229edd941"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[r1], &(0x7f00000003c0)=[{0x4, 0x1, 0x5, 0x8}, {0x1, 0x2, 0x7, 0x7}, {0x2, 0x3, 0x0, 0x3}], 0x10, 0x7fffffff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESHEX, @ANYBLOB="0100018008000179805a97940e74b0dbf9", @ANYRESOCT=r3, @ANYBLOB="140002610061746164765f736c6176655f3100009c668369b6fb45358442ddc1e64a0717294b3b24df071f68ec593c29dc173e8fb20b9cf2dfecf527ddb05b0ca545dbbcb78472508c1031802bc2b3b8e5c6a27b504012324ee4da4d68076cce222d98374d341b33f5099bc1d59a098bb20a787714f1d0e30f0c293f33c91cb3b12e3aefd693d35b4bb7bbd6b3f9f49e2e74021b1ab6c171e8fbdc184ec043ae97f49cf58bb4dd2ec827a9005681ca91e4620ca409218b3046e2d1e166d23282d08cf5e255f0396ca0c71db2f672047b0a455232c8972e6cc0d04595965d4e82ab74014559b182a000e5bf4ae08146ca1bd20e711b4eb7064778d81050f6dd306c516aa230b94566834593d5be1ec226dfa6ea", @ANYRESHEX=r5], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000002840)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xffffffffffffffff, 0x1044000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003000000"], 0xa0}}, 0x0) mount$bind(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x850, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000480), 0x6, 0x50d, &(0x7f00000006c0)="$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") 5m46.826658813s ago: executing program 2 (id=298): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x2012, 0x0, 0xfffdffff, 0x9, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0xfffffffffffffffe, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0082}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r3]) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_io_uring_setup(0x111, &(0x7f0000000300)={0x0, 0x1, 0x400, 0x5, 0x3ba}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x54482, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m46.621248892s ago: executing program 2 (id=299): rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 5m46.605834114s ago: executing program 32 (id=299): rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 7.029252464s ago: executing program 5 (id=6893): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)="5763f9", 0x3}], 0x1}, 0x80) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0) 6.666334127s ago: executing program 5 (id=6894): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.583206255s ago: executing program 5 (id=6901): readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) 5.583037975s ago: executing program 5 (id=6902): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r2, 0x401, 0x0) 4.53615858s ago: executing program 1 (id=6913): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) write$selinux_user(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='system_u:object_r:setr'], 0x34) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x800004, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 3.671457988s ago: executing program 4 (id=6917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000230000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, 0x0}}], 0x1, 0x0) 3.526618491s ago: executing program 4 (id=6920): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100766c616e000000003c000280060001"], 0x7c}, 0x1, 0xba01}, 0x0) 3.524602001s ago: executing program 4 (id=6921): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4) bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, &(0x7f0000000880)=0x0) timer_gettime(r2, &(0x7f0000001580)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000007000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.403809882s ago: executing program 1 (id=6922): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4) bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, &(0x7f0000000880)=0x0) timer_gettime(r2, &(0x7f0000001580)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000007000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.067233263s ago: executing program 4 (id=6926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000006"], 0x44}}, 0x0) 2.950891763s ago: executing program 1 (id=6927): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100013070000000000000000fe8000000000000000000000000000aae000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x170}}, 0x0) 2.879439699s ago: executing program 0 (id=6929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfcc20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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") 2.87913321s ago: executing program 4 (id=6930): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) socket$inet6(0xa, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x16, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="00000000000000001835000005000000000000000000000012005000ffffffffb7080000000000007b8af8ff00000000b7080000a8e400007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x4f8000, 0xdb, &(0x7f0000000640)=""/219, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r2, r0, 0x0, &(0x7f00000007c0), 0x0, 0x10, 0xfff, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856b340da0b53813de20102030109021200"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.171297614s ago: executing program 4 (id=6933): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="9601000000000040b404b1070000000000010902240001000000000904000001010300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x10, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0xc9e}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xe, 0x4, 0xc2}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x4, 0x2, 0x16, 0x30, 0x40}, 0x91, &(0x7f0000000600)={0x5, 0xf, 0x91, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x7, 0xf9, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0xda, 0x8}, @generic={0x78, 0x10, 0x3, "63b901517d0c347ce3f6c70b1a2131e5ceb9f0ce35e7411768fe29d76399f5767a4b6006cdb86e953150fbeca27eaf0592f6e200cc60aee336f3eefcdbb3d64e462b81301f8a84bfd0188b51030f3453b088a049872f318428b053175f5f4a915d2b36cda677cfcb61aab18f8654916570ae2140a9"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x807}}, {0x61, &(0x7f0000000300)=@string={0x61, 0x3, "c42b5cb756cbc7c0bdd764937b6fbd23a9007cc4ed0a5ad9ea0411467f32e79b32deef06aaa7f42a941cb1ebc4fd4e53ca004d8b7c7b8c3ccc7783d84eda3e7b998b5a5b3fa97a9f2402a4fe4217b4ad1574372215a8ca257847bb6cc559f2"}}, {0x1e, &(0x7f0000000380)=@string={0x1e, 0x3, "e08045815b07861c4dab5e91acc233204f300e7bfe89a0ec832f957b"}}]}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 1.965065462s ago: executing program 0 (id=6934): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) request_key(&(0x7f00000007c0)='asymmetric\x00', &(0x7f0000000800)={'syz', 0x2}, &(0x7f00000008c0)='\x00', 0xfffffffffffffffc) 1.913575287s ago: executing program 1 (id=6935): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x764, &(0x7f0000000680)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.848763663s ago: executing program 0 (id=6936): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000003c0)="9d8401167532c1e8f66c0ebcdef010b8af38727195bb22420babec85b4fbf0696acb0a0798264898719cc8018ee83606b8fd625448921df627b05dbb36597c15c84fd765dd87e499a5a48dc7c2250432081bab94867d009932b74203c96495d31193b3702b68182d6d38f529c2e5a51e638594f5b11d2780020d506354d77f93a896e9057ea683702629cd04f25486b1d2c29b658389", &(0x7f0000000100)=""/64}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {}]}, 0x1, 0x51c, &(0x7f0000000780)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1000) 1.76728361s ago: executing program 1 (id=6937): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="a85c00"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x53}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.755776881s ago: executing program 0 (id=6938): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='svcrdma_qp_error\x00', r1, 0x0, 0x7}, 0x18) get_mempolicy(0x0, 0x0, 0xbb, &(0x7f0000ffd000/0x3000)=nil, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x5da1, 0xc6e3, 0x1, &(0x7f0000000000)={[0x4]}, 0x8) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x62000) ioctl$EVIOCSABS3F(r7, 0x401845ff, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000340)={0xff02, 0x2, 0x0, 0xd, 0xd, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x5f) r8 = dup(r5) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xe}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 1.059158554s ago: executing program 5 (id=6914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000045, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nouid32}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") 851.289943ms ago: executing program 1 (id=6944): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x1a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 539.333652ms ago: executing program 3 (id=6946): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) 478.926147ms ago: executing program 3 (id=6947): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)) shutdown(r0, 0x2) 379.272266ms ago: executing program 3 (id=6948): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 230.076749ms ago: executing program 3 (id=6949): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x204048, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800343}}]}, 0xfd, 0x587, &(0x7f0000001240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 93.432751ms ago: executing program 5 (id=6950): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setreuid(0xee00, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r3, &(0x7f00000002c0)={'system_u:object_r:mqueue_spool_t:s0', 0x20, '/usr/sbin/cups-browsed'}, 0x50) 92.904042ms ago: executing program 3 (id=6951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x300, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 65.594954ms ago: executing program 0 (id=6952): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r4, r4, 0x1a) 42.256086ms ago: executing program 3 (id=6953): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x62}, 0x0) pwritev2(r0, &(0x7f0000002680)=[{0x0}, {&(0x7f0000002500)}, {&(0x7f0000002600)}], 0x3, 0x9, 0xff, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x81000) 0s ago: executing program 0 (id=6954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000100)={[{@errors_remount}, {@nodelalloc}, {@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@block_validity}]}, 0x3, 0x45e, &(0x7f0000001280)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) kernel console output (not intermixed with test programs): 192530][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5502'. [ 316.860536][T18659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5514'. [ 316.884622][T18659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5514'. [ 317.106085][T18685] IPv6: Can't replace route, no match found [ 317.194003][T18701] netlink: 'syz.0.5530': attribute type 1 has an invalid length. [ 317.198948][T18703] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5525'. [ 317.201843][T18701] netlink: 'syz.0.5530': attribute type 1 has an invalid length. [ 317.201866][T18701] netlink: 'syz.0.5530': attribute type 1 has an invalid length. [ 317.205491][T18704] binfmt_misc: register: failed to install interpreter file ./file0 [ 317.247392][T18701] batadv0: entered promiscuous mode [ 317.253549][T18701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.265418][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5525'. [ 317.305859][T18714] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.346221][T18714] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.357322][T18720] IPv6: Can't replace route, no match found [ 317.419579][T18726] bridge_slave_0: left allmulticast mode [ 317.425270][T18726] bridge_slave_0: left promiscuous mode [ 317.431040][T18726] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.443995][T18726] bridge_slave_1: left allmulticast mode [ 317.449761][T18726] bridge_slave_1: left promiscuous mode [ 317.455592][T18726] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.465570][T18729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5539'. [ 317.478197][T18726] bond0: (slave bond_slave_0): Releasing backup interface [ 317.502246][T18726] bond0: (slave bond_slave_1): Releasing backup interface [ 317.530896][T18726] team0: Port device team_slave_0 removed [ 317.547328][T18726] team0: Port device team_slave_1 removed [ 317.581206][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 317.600943][T18714] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.619889][T18750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5544'. [ 317.652350][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5539'. [ 317.673830][T18749] IPv6: Can't replace route, no match found [ 317.681088][T18714] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.692123][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5544'. [ 317.783993][T18714] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.796017][T18714] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.816844][T18714] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.842082][T18714] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.914750][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 317.914766][ T29] audit: type=1326 audit(1730831409.030:20482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.4.5549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc26c3ae719 code=0x7ffc0000 [ 317.984817][T18756] chnl_net:caif_netlink_parms(): no params data found [ 318.404889][ T29] audit: type=1326 audit(1730831409.498:20483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 318.428702][ T29] audit: type=1326 audit(1730831409.498:20484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 318.452411][ T29] audit: type=1326 audit(1730831409.498:20485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 318.476032][ T29] audit: type=1326 audit(1730831409.498:20486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 318.499603][ T29] audit: type=1326 audit(1730831409.498:20487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 318.523293][ T29] audit: type=1326 audit(1730831409.498:20488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 318.546950][ T29] audit: type=1326 audit(1730831409.498:20489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 318.570686][ T29] audit: type=1326 audit(1730831409.498:20490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 318.594262][ T29] audit: type=1326 audit(1730831409.498:20491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18792 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 318.681354][T18756] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.688504][T18756] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.697865][T18756] bridge_slave_0: entered allmulticast mode [ 318.725896][T18756] bridge_slave_0: entered promiscuous mode [ 318.749440][T18756] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.756561][T18756] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.810983][T18756] bridge_slave_1: entered allmulticast mode [ 318.818915][T18756] bridge_slave_1: entered promiscuous mode [ 319.006408][T18756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.028202][T18756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.320220][T18756] team0: Port device team_slave_0 added [ 319.328751][T18756] team0: Port device team_slave_1 added [ 319.423813][T18756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.430852][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.456883][T18756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.468144][T18756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.475155][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.501354][T18756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.546449][T18756] hsr_slave_0: entered promiscuous mode [ 319.552918][T18756] hsr_slave_1: entered promiscuous mode [ 319.559149][T18756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.567609][T18756] Cannot create hsr debugfs directory [ 319.627871][T18756] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.944055][T18756] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.957358][ T381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.013525][T18756] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.066129][T18756] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.103119][T18857] IPv6: Can't replace route, no match found [ 320.147713][T18756] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.156466][T18756] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.165381][T18756] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.167450][T18756] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.219819][T18756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.237735][T18756] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.248759][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.255977][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.270145][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.277223][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.349045][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 320.377265][T18882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=18882 comm=syz.4.5595 [ 320.389477][T18756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.465802][T18756] veth0_vlan: entered promiscuous mode [ 320.474373][T18756] veth1_vlan: entered promiscuous mode [ 320.536099][T18756] veth0_macvtap: entered promiscuous mode [ 320.544172][T18756] veth1_macvtap: entered promiscuous mode [ 320.580404][T18907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 320.668368][T18756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.682218][T18913] netlink: 'syz.4.5602': attribute type 33 has an invalid length. [ 320.721127][T18756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.734480][T18756] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.743412][T18756] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.752333][T18756] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.761170][T18756] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.930442][T18934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=18934 comm=syz.1.5609 [ 321.370840][T18946] syz_tun: refused to change device tx_queue_len [ 321.886452][T18968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=18968 comm=syz.5.5620 [ 322.136384][T18990] FAULT_INJECTION: forcing a failure. [ 322.136384][T18990] name failslab, interval 1, probability 0, space 0, times 0 [ 322.149215][T18990] CPU: 0 UID: 0 PID: 18990 Comm: syz.3.5630 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 322.159982][T18990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 322.170037][T18990] Call Trace: [ 322.173329][T18990] [ 322.176337][T18990] dump_stack_lvl+0xf2/0x150 [ 322.181036][T18990] dump_stack+0x15/0x20 [ 322.185310][T18990] should_fail_ex+0x223/0x230 [ 322.190106][T18990] ? kernfs_get_tree+0x59/0x470 [ 322.195001][T18990] should_failslab+0x8f/0xb0 [ 322.199592][T18990] __kmalloc_cache_noprof+0x4b/0x2a0 [ 322.204915][T18990] kernfs_get_tree+0x59/0x470 [ 322.209620][T18990] ? selinux_capable+0x1f2/0x260 [ 322.214670][T18990] cgroup_do_get_tree+0x84/0x350 [ 322.219598][T18990] cgroup_get_tree+0xd3/0x260 [ 322.224353][T18990] vfs_get_tree+0x56/0x1e0 [ 322.228806][T18990] vfs_cmd_create+0x83/0x130 [ 322.233413][T18990] __se_sys_fsconfig+0x6b1/0x9b0 [ 322.238348][T18990] __x64_sys_fsconfig+0x67/0x80 [ 322.243271][T18990] x64_sys_call+0x10fe/0x2d60 [ 322.248081][T18990] do_syscall_64+0xc9/0x1c0 [ 322.252606][T18990] ? clear_bhb_loop+0x55/0xb0 [ 322.257296][T18990] ? clear_bhb_loop+0x55/0xb0 [ 322.261985][T18990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.267895][T18990] RIP: 0033:0x7f186d1be719 [ 322.272294][T18990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.291910][T18990] RSP: 002b:00007f186be31038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 322.300443][T18990] RAX: ffffffffffffffda RBX: 00007f186d375f80 RCX: 00007f186d1be719 [ 322.308565][T18990] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 322.316599][T18990] RBP: 00007f186be31090 R08: 0000000000000000 R09: 0000000000000000 [ 322.324573][T18990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.332545][T18990] R13: 0000000000000000 R14: 00007f186d375f80 R15: 00007ffea7ae82a8 [ 322.340582][T18990] [ 322.398932][T18998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=18998 comm=syz.5.5634 [ 323.022116][T19017] chnl_net:caif_netlink_parms(): no params data found [ 323.031080][T19037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=19037 comm=syz.0.5645 [ 323.062398][T19017] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.069613][T19017] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.077312][T19017] bridge_slave_0: entered allmulticast mode [ 323.083829][T19017] bridge_slave_0: entered promiscuous mode [ 323.091537][T19017] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.098787][T19017] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.112676][T19017] bridge_slave_1: entered allmulticast mode [ 323.128798][T19017] bridge_slave_1: entered promiscuous mode [ 323.148654][T19017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.159586][T19017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.183694][T19017] team0: Port device team_slave_0 added [ 323.190994][T19017] team0: Port device team_slave_1 added [ 323.208508][T19017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.215560][T19017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.241710][T19017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.252996][T19017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.259986][T19017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.285910][T19017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.312555][T19017] hsr_slave_0: entered promiscuous mode [ 323.314011][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 323.314025][ T29] audit: type=1326 audit(1730831414.114:20711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19047 comm="syz.3.5649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f186d1be719 code=0x7ffc0000 [ 323.348146][T19017] hsr_slave_1: entered promiscuous mode [ 323.356275][T19017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.369600][T19017] Cannot create hsr debugfs directory [ 323.436265][T19017] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.483835][T19017] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.548015][T19017] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.610598][T19017] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.677346][T19017] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.686513][T19017] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.708610][T19017] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.717940][T19017] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 323.740422][T19017] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.747562][T19017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.754877][T19017] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.761941][T19017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.859420][T19017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.875007][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.898612][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.932113][T19017] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.944425][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.951529][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.972906][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.980039][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.989375][ T29] audit: type=1326 audit(1730831414.742:20712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 324.013618][ T29] audit: type=1326 audit(1730831414.742:20713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 324.037343][ T29] audit: type=1326 audit(1730831414.742:20714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 324.060999][ T29] audit: type=1326 audit(1730831414.742:20715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 324.084664][ T29] audit: type=1326 audit(1730831414.742:20716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 324.107051][T19017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.108281][ T29] audit: type=1326 audit(1730831414.742:20717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 324.118653][T19017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.142147][ T29] audit: type=1326 audit(1730831414.742:20718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 324.142173][ T29] audit: type=1326 audit(1730831414.742:20719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 324.142229][ T29] audit: type=1326 audit(1730831414.742:20720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19067 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 324.307703][T19017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.983299][T19017] veth0_vlan: entered promiscuous mode [ 325.005210][T19017] veth1_vlan: entered promiscuous mode [ 325.049650][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 325.056128][T19017] veth0_macvtap: entered promiscuous mode [ 325.074697][T19017] veth1_macvtap: entered promiscuous mode [ 325.091154][T19017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.101668][T19017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.112527][T19017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.123054][T19017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.133657][T19017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.144533][T19017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.154531][T19017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.163386][T19017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.172100][T19017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.180902][T19017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.324550][T19123] __nla_validate_parse: 3 callbacks suppressed [ 325.324566][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5668'. [ 325.651401][T19150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=19150 comm=syz.5.5677 [ 325.779182][T19159] program syz.3.5680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.896610][ T2947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.978947][T19167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 326.084788][T19183] xt_TPROXY: Can be used only with -p tcp or -p udp [ 326.207769][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5692'. [ 326.253783][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 326.603303][T19208] netlink: 'syz.5.5699': attribute type 29 has an invalid length. [ 326.613366][T19208] netlink: 'syz.5.5699': attribute type 29 has an invalid length. [ 326.740045][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5704'. [ 326.807771][T19226] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5707'. [ 326.832685][T19238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5711'. [ 326.841714][T19238] tipc: Invalid UDP bearer configuration [ 326.841724][T19238] tipc: Enabling of bearer rejected, failed to enable media [ 326.866355][T19226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5707'. [ 327.040071][T19256] IPv6: Can't replace route, no match found [ 327.052130][T19266] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.5723'. [ 327.146580][T19275] bpf_get_probe_write_proto: 2 callbacks suppressed [ 327.146595][T19275] syz.5.5727[19275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.148631][T19277] tipc: Enabling of bearer rejected, already enabled [ 327.164185][T19275] syz.5.5727[19275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.181935][T19275] FAULT_INJECTION: forcing a failure. [ 327.181935][T19275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.206629][T19275] CPU: 1 UID: 0 PID: 19275 Comm: syz.5.5727 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 327.217582][T19275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 327.227634][T19275] Call Trace: [ 327.230938][T19275] [ 327.233860][T19275] dump_stack_lvl+0xf2/0x150 [ 327.238584][T19275] dump_stack+0x15/0x20 [ 327.242800][T19275] should_fail_ex+0x223/0x230 [ 327.247555][T19275] should_fail+0xb/0x10 [ 327.251711][T19275] should_fail_usercopy+0x1a/0x20 [ 327.256763][T19275] _copy_from_iter+0xd5/0xd00 [ 327.261482][T19275] ? __alloc_pages_noprof+0x1bc/0x340 [ 327.266854][T19275] copy_page_from_iter+0x14f/0x280 [ 327.271963][T19275] pipe_write+0x444/0xd20 [ 327.276331][T19275] vfs_write+0x77f/0x920 [ 327.280572][T19275] ? __pfx_pipe_write+0x10/0x10 [ 327.285423][T19275] ksys_write+0xeb/0x1b0 [ 327.289674][T19275] __x64_sys_write+0x42/0x50 [ 327.294350][T19275] x64_sys_call+0x27dd/0x2d60 [ 327.299039][T19275] do_syscall_64+0xc9/0x1c0 [ 327.303556][T19275] ? clear_bhb_loop+0x55/0xb0 [ 327.308393][T19275] ? clear_bhb_loop+0x55/0xb0 [ 327.313109][T19275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.319096][T19275] RIP: 0033:0x7f68ee4ce719 [ 327.323566][T19275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.343483][T19275] RSP: 002b:00007f68ed147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.351894][T19275] RAX: ffffffffffffffda RBX: 00007f68ee685f80 RCX: 00007f68ee4ce719 [ 327.359882][T19275] RDX: 00000000fffffecc RSI: 0000000020000000 RDI: 0000000000000006 [ 327.367940][T19275] RBP: 00007f68ed147090 R08: 0000000000000000 R09: 0000000000000000 [ 327.375904][T19275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.383952][T19275] R13: 0000000000000000 R14: 00007f68ee685f80 R15: 00007ffe88171f98 [ 327.391931][T19275] [ 327.434975][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 327.522237][T19296] IPv6: Can't replace route, no match found [ 327.633261][T19310] tipc: Enabling of bearer rejected, already enabled [ 327.940074][T19335] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.956426][T19336] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 327.966094][T19336] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 327.977238][T19338] tipc: Enabling of bearer rejected, already enabled [ 328.041269][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 328.090027][T19347] syz_tun: refused to change device tx_queue_len [ 328.149180][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5757'. [ 328.250844][T19358] IPv6: Can't replace route, no match found [ 328.308788][T19367] xt_TPROXY: Can be used only with -p tcp or -p udp [ 329.092372][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 329.092386][ T29] audit: type=1326 audit(1730831419.517:21219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19397 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 329.101963][T19398] IPv6: Can't replace route, no match found [ 329.131155][ T29] audit: type=1326 audit(1730831419.517:21220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19397 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 329.154969][ T29] audit: type=1326 audit(1730831419.517:21221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19397 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 329.178610][ T29] audit: type=1326 audit(1730831419.517:21222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19397 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 329.202228][ T29] audit: type=1326 audit(1730831419.517:21223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19397 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 329.225974][ T29] audit: type=1326 audit(1730831419.517:21224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19397 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 329.249496][ T29] audit: type=1326 audit(1730831419.517:21225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19397 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 329.273105][ T29] audit: type=1326 audit(1730831419.517:21226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19397 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 329.296894][ T29] audit: type=1326 audit(1730831419.517:21227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19397 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 329.320672][ T29] audit: type=1326 audit(1730831419.517:21228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19397 comm="syz.5.5771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 329.423262][T19403] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 329.423262][T19403] program syz.3.5770 not setting count and/or reply_len properly [ 329.534788][T19420] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.015364][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5783'. [ 330.055916][T19439] IPv6: Can't replace route, no match found [ 330.225133][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 330.717891][T19481] IPv6: Can't replace route, no match found [ 331.185822][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 331.193078][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 331.358706][T19519] IPv6: Can't replace route, no match found [ 331.399263][T19526] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5812'. [ 331.462336][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5812'. [ 331.471429][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 331.511323][T19540] tipc: Enabling of bearer rejected, already enabled [ 331.683807][T19558] IPv6: Can't replace route, no match found [ 331.781623][T19568] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5836'. [ 331.939547][T19585] tipc: Enabling of bearer rejected, already enabled [ 332.049137][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.380051][T19598] IPv6: Can't replace route, no match found [ 332.430996][T19607] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.467629][T19607] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.540610][T19616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5853'. [ 332.552544][T19607] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.579533][T19614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5853'. [ 332.580221][T19620] xt_TPROXY: Can be used only with -p tcp or -p udp [ 332.630812][T19607] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.727600][T19629] tipc: Enabling of bearer rejected, already enabled [ 332.785188][T19607] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.800666][T19607] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.821332][T19607] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.846370][T19607] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.888212][T19631] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 332.888212][T19631] program syz.3.5859 not setting count and/or reply_len properly [ 332.973748][T19661] tipc: Enabling of bearer rejected, already enabled [ 333.029958][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5872'. [ 333.041922][T19668] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5871'. [ 333.065725][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5871'. [ 333.074833][T19668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.082264][T19668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.094555][T19668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.102010][T19668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.122367][T19672] IPv6: Can't replace route, no match found [ 333.132654][T19675] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.144362][T19675] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.156788][T19675] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.168782][T19675] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.214256][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 333.269770][T19699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=19699 comm=syz.4.5884 [ 333.282919][T19705] tipc: Started in network mode [ 333.287912][T19705] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 333.298045][T19705] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 333.306201][T19705] tipc: Enabled bearer , priority 10 [ 333.345705][T19701] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5885'. [ 333.433854][T19719] IPv6: Can't replace route, no match found [ 333.444503][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 333.554996][T19743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 333.603645][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 333.617254][T19758] FAULT_INJECTION: forcing a failure. [ 333.617254][T19758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.630427][T19758] CPU: 0 UID: 0 PID: 19758 Comm: syz.1.5911 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 333.641222][T19758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.651579][T19758] Call Trace: [ 333.654857][T19758] [ 333.657782][T19758] dump_stack_lvl+0xf2/0x150 [ 333.662414][T19758] dump_stack+0x15/0x20 [ 333.666593][T19758] should_fail_ex+0x223/0x230 [ 333.671334][T19758] should_fail+0xb/0x10 [ 333.675488][T19758] should_fail_usercopy+0x1a/0x20 [ 333.680576][T19758] _copy_from_user+0x1e/0xb0 [ 333.685221][T19758] do_fcntl+0x4fb/0xd70 [ 333.689374][T19758] __se_sys_fcntl+0xbf/0x1b0 [ 333.693984][T19758] __x64_sys_fcntl+0x43/0x50 [ 333.698568][T19758] x64_sys_call+0x209e/0x2d60 [ 333.703300][T19758] do_syscall_64+0xc9/0x1c0 [ 333.707960][T19758] ? clear_bhb_loop+0x55/0xb0 [ 333.712628][T19758] ? clear_bhb_loop+0x55/0xb0 [ 333.717324][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.723253][T19758] RIP: 0033:0x7f5f3e24e719 [ 333.727656][T19758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.747266][T19758] RSP: 002b:00007f5f3cec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 333.755682][T19758] RAX: ffffffffffffffda RBX: 00007f5f3e405f80 RCX: 00007f5f3e24e719 [ 333.763650][T19758] RDX: 0000000020000180 RSI: 0000000000000007 RDI: 0000000000000004 [ 333.771615][T19758] RBP: 00007f5f3cec1090 R08: 0000000000000000 R09: 0000000000000000 [ 333.779579][T19758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.787598][T19758] R13: 0000000000000000 R14: 00007f5f3e405f80 R15: 00007ffc50b079e8 [ 333.795591][T19758] [ 334.056339][T19770] IPv6: Can't replace route, no match found [ 334.280933][T19783] xt_TPROXY: Can be used only with -p tcp or -p udp [ 334.355547][T19795] syz_tun: refused to change device tx_queue_len [ 334.404770][ T3395] tipc: Node number set to 1 [ 334.462112][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 334.462126][ T29] audit: type=1400 audit(1730831424.554:21952): avc: denied { bind } for pid=19802 comm="syz.1.5930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 334.487971][ T29] audit: type=1400 audit(1730831424.554:21953): avc: denied { name_bind } for pid=19802 comm="syz.1.5930" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 334.533677][ T29] audit: type=1400 audit(1730831424.554:21954): avc: denied { node_bind } for pid=19802 comm="syz.1.5930" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 334.554711][ T29] audit: type=1400 audit(1730831424.554:21955): avc: denied { listen } for pid=19802 comm="syz.1.5930" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 334.575635][ T29] audit: type=1400 audit(1730831424.554:21956): avc: denied { name_bind } for pid=19802 comm="syz.1.5930" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 334.597024][ T29] audit: type=1326 audit(1730831424.600:21957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19798 comm="syz.5.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 334.620614][ T29] audit: type=1326 audit(1730831424.600:21958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19798 comm="syz.5.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 334.644393][ T29] audit: type=1326 audit(1730831424.610:21959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19798 comm="syz.5.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68ee4ce753 code=0x7ffc0000 [ 334.667837][ T29] audit: type=1326 audit(1730831424.610:21960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19798 comm="syz.5.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68ee4ce753 code=0x7ffc0000 [ 334.691499][ T29] audit: type=1326 audit(1730831424.610:21961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19798 comm="syz.5.5929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee4ce719 code=0x7ffc0000 [ 334.729483][T19811] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.789736][T19813] IPv6: Can't replace route, no match found [ 334.822855][T19811] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.870721][T19811] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.955848][T19811] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.045737][T19811] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.056200][T19811] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.066380][T19811] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.077426][T19811] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.145912][T19843] IPv6: Can't replace route, no match found [ 335.234994][T19846] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 335.234994][T19846] program syz.4.5946 not setting count and/or reply_len properly [ 335.345382][T19872] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.452508][T19872] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.601655][T19872] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.612152][T19907] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 335.612152][T19907] program syz.1.5965 not setting count and/or reply_len properly [ 335.955999][T19872] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.083401][T19922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.658094][T19938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=19938 comm=syz.0.5976 [ 336.697857][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 337.527670][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.141169][T19986] IPv6: Can't replace route, no match found [ 338.299258][T20005] IPv6: Can't replace route, no match found [ 338.383829][T20021] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.432925][T20000] chnl_net:caif_netlink_parms(): no params data found [ 338.501692][T20031] IPv6: Can't replace route, no match found [ 338.510081][T20000] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.517155][T20000] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.524597][T20000] bridge_slave_0: entered allmulticast mode [ 338.531411][T20000] bridge_slave_0: entered promiscuous mode [ 338.538673][T20000] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.545751][T20000] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.552973][T20000] bridge_slave_1: entered allmulticast mode [ 338.559346][T20000] bridge_slave_1: entered promiscuous mode [ 338.580256][T20000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.603670][T20000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.625415][T20000] team0: Port device team_slave_0 added [ 338.648009][T20000] team0: Port device team_slave_1 added [ 338.677881][T20000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.684950][T20000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.689712][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 338.710922][T20000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.732044][T20000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.739132][T20000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.765129][T20000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.814203][T20000] hsr_slave_0: entered promiscuous mode [ 338.823238][T20059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.830203][T20000] hsr_slave_1: entered promiscuous mode [ 338.836870][T20000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.850622][T20000] Cannot create hsr debugfs directory [ 338.911348][T20073] __nla_validate_parse: 4 callbacks suppressed [ 338.911372][T20073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6026'. [ 338.927452][T20073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6026'. [ 338.960720][T20000] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.023713][T20000] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.099222][T20000] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.173471][T20000] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.226549][T20096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6036'. [ 339.249753][T20096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6036'. [ 339.441570][T20105] IPVS: Error joining to the multicast group [ 339.493185][T20000] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 339.501825][T20000] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.510336][T20000] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.518934][T20000] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.532602][T20000] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.539669][T20000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.546957][T20000] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.553975][T20000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.562856][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.574387][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.610324][T20000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.622612][T20000] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.633166][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.640288][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.651657][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.658755][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.728718][T20000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.803230][T20000] veth0_vlan: entered promiscuous mode [ 339.812835][T20000] veth1_vlan: entered promiscuous mode [ 339.834923][T20000] veth0_macvtap: entered promiscuous mode [ 339.842659][T20000] veth1_macvtap: entered promiscuous mode [ 339.856016][T20000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.866623][T20000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.877418][T20000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.888448][T20000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.899031][T20000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.910579][T20000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.921330][T20000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.930103][T20000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.938815][T20000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.947750][T20000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.976172][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 339.976188][ T29] audit: type=1400 audit(1730831429.703:22372): avc: denied { mounton } for pid=20000 comm="syz-executor" path="/root/syzkaller.gnEyZd/syz-tmp" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 340.006950][ T29] audit: type=1400 audit(1730831429.703:22373): avc: denied { mount } for pid=20000 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 340.029981][ T29] audit: type=1400 audit(1730831429.703:22374): avc: denied { mounton } for pid=20000 comm="syz-executor" path="/root/syzkaller.gnEyZd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 340.057080][ T29] audit: type=1400 audit(1730831429.703:22375): avc: denied { mounton } for pid=20000 comm="syz-executor" path="/root/syzkaller.gnEyZd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=68823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 340.084867][ T29] audit: type=1400 audit(1730831429.712:22376): avc: denied { unmount } for pid=20000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 340.105544][ T29] audit: type=1400 audit(1730831429.741:22377): avc: denied { mounton } for pid=20000 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 340.221771][T20138] syz_tun: refused to change device tx_queue_len [ 340.467476][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6050'. [ 340.485508][T20152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6050'. [ 340.675859][T19872] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.689273][T19872] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.748863][T19872] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.791769][T20156] chnl_net:caif_netlink_parms(): no params data found [ 340.847047][T19872] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.908068][T20156] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.915209][T20156] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.922433][T20156] bridge_slave_0: entered allmulticast mode [ 340.933934][T20156] bridge_slave_0: entered promiscuous mode [ 340.941078][T20156] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.948218][T20156] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.968540][T20156] bridge_slave_1: entered allmulticast mode [ 340.975559][T20156] bridge_slave_1: entered promiscuous mode [ 341.011664][T20156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.024453][T20156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.077855][T20156] team0: Port device team_slave_0 added [ 341.084675][T20156] team0: Port device team_slave_1 added [ 341.170500][T20156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.177486][T20156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.203518][T20156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.248798][ T29] audit: type=1326 audit(1730831430.902:22378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20197 comm="syz.1.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 341.307807][T20156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.314793][T20156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.318794][ T29] audit: type=1326 audit(1730831430.930:22379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20197 comm="syz.1.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 341.340973][T20156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.364545][ T29] audit: type=1326 audit(1730831430.930:22380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20197 comm="syz.1.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 341.364594][ T29] audit: type=1326 audit(1730831430.930:22381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20197 comm="syz.1.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 341.438433][T20156] hsr_slave_0: entered promiscuous mode [ 341.451683][T20156] hsr_slave_1: entered promiscuous mode [ 341.458613][T20156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.466309][T20156] Cannot create hsr debugfs directory [ 341.471823][T20198] IPv6: Can't replace route, no match found [ 341.582668][T20156] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.771872][T20156] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.855630][T20156] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.930374][T20156] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.997310][T20156] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.007327][T20156] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.016841][T20156] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.028467][T20156] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.070023][T20156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.084315][T20156] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.095663][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.102778][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.114163][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.121350][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.193578][T20156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.272079][T20156] veth0_vlan: entered promiscuous mode [ 342.280520][T20156] veth1_vlan: entered promiscuous mode [ 342.296416][T20156] veth0_macvtap: entered promiscuous mode [ 342.304044][T20156] veth1_macvtap: entered promiscuous mode [ 342.314764][T20156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.325304][T20156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.335171][T20156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.345636][T20156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.356814][T20156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.365218][T20156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.375693][T20156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.385491][T20156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.396094][T20156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.407379][T20156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.426708][T20156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.435493][T20156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.444238][T20156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.452953][T20156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.714750][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 342.768441][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6084'. [ 342.794187][T20276] IPv6: Can't replace route, no match found [ 342.889201][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.077496][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 343.203950][T20305] IPv6: Can't replace route, no match found [ 343.389140][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 343.498514][T20329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=20329 comm=syz.0.6110 [ 343.697196][T20346] xt_TPROXY: Can be used only with -p tcp or -p udp [ 343.827703][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6122'. [ 343.928858][T20367] IPv6: Can't replace route, no match found [ 343.964059][T20377] xt_TPROXY: Can be used only with -p tcp or -p udp [ 344.048641][T20384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6133'. [ 344.059409][T20384] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6133'. [ 344.103708][T20386] gretap0: entered promiscuous mode [ 344.109172][T20386] macvlan2: entered promiscuous mode [ 344.333224][T20404] IPv6: Can't replace route, no match found [ 344.440911][T20414] __nla_validate_parse: 1 callbacks suppressed [ 344.440925][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6146'. [ 344.456785][T20411] 9pnet_fd: Insufficient options for proto=fd [ 344.505149][T20425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6149'. [ 344.515032][T20425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6149'. [ 344.515803][T20427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6151'. [ 344.539089][T20427] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6151'. [ 344.708723][T20435] bond1: entered promiscuous mode [ 344.713795][T20435] bond1: entered allmulticast mode [ 344.719785][T20435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.733031][T20435] bond1 (unregistering): Released all slaves [ 344.955651][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6159'. [ 344.973874][T20447] gretap0: entered promiscuous mode [ 344.982808][T20447] macvlan2: entered promiscuous mode [ 345.063316][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 345.116330][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6163'. [ 345.135435][T20461] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6163'. [ 345.283238][T20475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.030349][T20502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=20502 comm=syz.5.6182 [ 346.189598][T20534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6198'. [ 346.198991][T20534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6198'. [ 346.492382][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 346.564401][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 346.564414][ T29] audit: type=1326 audit(1730831435.882:22893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 346.594222][ T29] audit: type=1326 audit(1730831435.882:22894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 346.633062][ T29] audit: type=1326 audit(1730831435.882:22895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 346.656807][ T29] audit: type=1326 audit(1730831435.882:22896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 346.680418][ T29] audit: type=1326 audit(1730831435.892:22897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 346.703993][ T29] audit: type=1326 audit(1730831435.892:22898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 346.727699][ T29] audit: type=1326 audit(1730831435.892:22899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 346.751259][ T29] audit: type=1326 audit(1730831435.892:22900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 346.774920][ T29] audit: type=1326 audit(1730831435.892:22901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 346.798641][ T29] audit: type=1326 audit(1730831435.892:22902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 346.840884][T20560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=20560 comm=syz.4.6209 [ 347.065639][T20578] tipc: Enabling of bearer rejected, already enabled [ 347.188949][T20585] program syz.1.6221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.200437][T20583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=20583 comm=syz.5.6220 [ 347.426250][T20601] gretap0: entered promiscuous mode [ 347.432244][T20601] macvlan2: entered promiscuous mode [ 347.459985][T20605] xt_TPROXY: Can be used only with -p tcp or -p udp [ 347.489012][T20607] tipc: Started in network mode [ 347.494030][T20607] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 347.510571][T20607] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 347.518795][T20607] tipc: Enabled bearer , priority 10 [ 347.533888][T20475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.571499][T20475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.637365][T20475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.712239][T20475] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.723591][T20475] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.735040][T20475] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.863454][T20475] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.952912][T20475] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.016672][T20475] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.369625][T20643] tipc: Enabling of bearer rejected, already enabled [ 348.453446][ T1860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.526974][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 348.710721][T12138] tipc: Node number set to 1 [ 349.265167][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 349.875410][T20805] IPv6: Can't replace route, no match found [ 349.917598][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 349.940634][T20810] __nla_validate_parse: 22 callbacks suppressed [ 349.940650][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6323'. [ 350.216777][T20830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=20830 comm=syz.4.6333 [ 350.244464][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 350.249673][T20816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.262943][T20816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.345577][T20842] program syz.4.6339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.924937][T20868] program syz.5.6350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.036901][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6354'. [ 351.064441][T20872] FAULT_INJECTION: forcing a failure. [ 351.064441][T20872] name failslab, interval 1, probability 0, space 0, times 0 [ 351.077114][T20872] CPU: 1 UID: 0 PID: 20872 Comm: syz.1.6352 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 351.087884][T20872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 351.098002][T20872] Call Trace: [ 351.101266][T20872] [ 351.104191][T20872] dump_stack_lvl+0xf2/0x150 [ 351.108861][T20872] dump_stack+0x15/0x20 [ 351.113094][T20872] should_fail_ex+0x223/0x230 [ 351.117762][T20872] ? vm_area_dup+0x2c/0x130 [ 351.122284][T20872] should_failslab+0x8f/0xb0 [ 351.126942][T20872] kmem_cache_alloc_noprof+0x4c/0x290 [ 351.132312][T20872] vm_area_dup+0x2c/0x130 [ 351.136658][T20872] __split_vma+0xf7/0x6a0 [ 351.141069][T20872] vms_gather_munmap_vmas+0x175/0x7a0 [ 351.146447][T20872] ? mntput+0x49/0x70 [ 351.150419][T20872] do_vmi_align_munmap+0x1a9/0x390 [ 351.155520][T20872] do_vmi_munmap+0x1eb/0x230 [ 351.160098][T20872] do_munmap+0x8b/0xc0 [ 351.164176][T20872] __se_sys_mremap+0x955/0xec0 [ 351.168928][T20872] ? fput+0x14e/0x190 [ 351.172896][T20872] __x64_sys_mremap+0x67/0x80 [ 351.177623][T20872] x64_sys_call+0x2747/0x2d60 [ 351.182291][T20872] do_syscall_64+0xc9/0x1c0 [ 351.186856][T20872] ? clear_bhb_loop+0x55/0xb0 [ 351.191532][T20872] ? clear_bhb_loop+0x55/0xb0 [ 351.196351][T20872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.202347][T20872] RIP: 0033:0x7f5f3e24e719 [ 351.206745][T20872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.226577][T20872] RSP: 002b:00007f5f3cec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 351.235064][T20872] RAX: ffffffffffffffda RBX: 00007f5f3e405f80 RCX: 00007f5f3e24e719 [ 351.243091][T20872] RDX: 0000000000600000 RSI: 0000000000200003 RDI: 0000000020000000 [ 351.251048][T20872] RBP: 00007f5f3cec1090 R08: 0000000020a00000 R09: 0000000000000000 [ 351.259076][T20872] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 351.267044][T20872] R13: 0000000000000000 R14: 00007f5f3e405f80 R15: 00007ffc50b079e8 [ 351.275013][T20872] [ 351.394356][T20892] syz_tun: refused to change device tx_queue_len [ 352.345745][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 352.391759][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 352.391772][ T29] audit: type=1326 audit(1730831441.331:23509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 352.421768][ T29] audit: type=1326 audit(1730831441.331:23510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 352.445415][ T29] audit: type=1326 audit(1730831441.331:23511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 352.469121][ T29] audit: type=1326 audit(1730831441.331:23512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 352.492843][ T29] audit: type=1326 audit(1730831441.331:23513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 352.516406][ T29] audit: type=1326 audit(1730831441.341:23514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 352.539988][ T29] audit: type=1326 audit(1730831441.341:23515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 352.563787][ T29] audit: type=1326 audit(1730831441.341:23516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 352.587509][ T29] audit: type=1326 audit(1730831441.341:23517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 352.611120][ T29] audit: type=1326 audit(1730831441.341:23518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e24e719 code=0x7ffc0000 [ 352.691589][T20959] syz_tun: refused to change device tx_queue_len [ 352.805985][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 352.851869][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 352.943356][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 353.247549][T20997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6407'. [ 353.280362][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6407'. [ 353.289354][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.296775][T20997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.339314][T20997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.346801][T20997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.383185][T21006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=21006 comm=syz.3.6410 [ 353.463963][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 353.474241][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 353.561506][T21030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=21030 comm=syz.3.6422 [ 353.635456][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6426'. [ 353.644968][T21039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6426'. [ 353.655920][T21042] FAULT_INJECTION: forcing a failure. [ 353.655920][T21042] name failslab, interval 1, probability 0, space 0, times 0 [ 353.668655][T21042] CPU: 1 UID: 0 PID: 21042 Comm: syz.3.6428 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 353.679413][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.689495][T21042] Call Trace: [ 353.692773][T21042] [ 353.695686][T21042] dump_stack_lvl+0xf2/0x150 [ 353.700309][T21042] dump_stack+0x15/0x20 [ 353.704478][T21042] should_fail_ex+0x223/0x230 [ 353.709143][T21042] ? audit_log_start+0x34c/0x6b0 [ 353.714145][T21042] should_failslab+0x8f/0xb0 [ 353.718796][T21042] kmem_cache_alloc_noprof+0x4c/0x290 [ 353.724223][T21042] audit_log_start+0x34c/0x6b0 [ 353.729045][T21042] audit_seccomp+0x4b/0x130 [ 353.733697][T21042] __seccomp_filter+0x6fa/0x1180 [ 353.738624][T21042] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 353.744427][T21042] ? vfs_write+0x596/0x920 [ 353.748905][T21042] ? __rcu_read_unlock+0x4e/0x70 [ 353.753829][T21042] ? __fget_files+0x1d4/0x210 [ 353.758500][T21042] __secure_computing+0x9f/0x1c0 [ 353.763493][T21042] syscall_trace_enter+0xd1/0x1f0 [ 353.768536][T21042] ? fpregs_assert_state_consistent+0x83/0xa0 [ 353.774604][T21042] do_syscall_64+0xaa/0x1c0 [ 353.779183][T21042] ? clear_bhb_loop+0x55/0xb0 [ 353.783879][T21042] ? clear_bhb_loop+0x55/0xb0 [ 353.788640][T21042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.794586][T21042] RIP: 0033:0x7f73a029e719 [ 353.799042][T21042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.818647][T21042] RSP: 002b:00007f739ef11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 353.827060][T21042] RAX: ffffffffffffffda RBX: 00007f73a0455f80 RCX: 00007f73a029e719 [ 353.835129][T21042] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000009 [ 353.843103][T21042] RBP: 00007f739ef11090 R08: 0000000000000000 R09: 0000000000000000 [ 353.851097][T21042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.859092][T21042] R13: 0000000000000000 R14: 00007f73a0455f80 R15: 00007ffc03f91118 [ 353.867068][T21042] [ 353.939830][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 354.052861][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 354.092011][T21057] xt_TCPMSS: Only works on TCP SYN packets [ 354.241741][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 354.292298][T21081] program syz.0.6447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.585570][T21109] FAULT_INJECTION: forcing a failure. [ 354.585570][T21109] name failslab, interval 1, probability 0, space 0, times 0 [ 354.598601][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.610368][T21109] CPU: 1 UID: 0 PID: 21109 Comm: syz.1.6459 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 354.621139][T21109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.631203][T21109] Call Trace: [ 354.634510][T21109] [ 354.637447][T21109] dump_stack_lvl+0xf2/0x150 [ 354.642079][T21109] dump_stack+0x15/0x20 [ 354.646243][T21109] should_fail_ex+0x223/0x230 [ 354.650948][T21109] ? audit_log_start+0x34c/0x6b0 [ 354.655953][T21109] should_failslab+0x8f/0xb0 [ 354.660620][T21109] kmem_cache_alloc_noprof+0x4c/0x290 [ 354.666042][T21109] audit_log_start+0x34c/0x6b0 [ 354.670846][T21109] audit_seccomp+0x4b/0x130 [ 354.675361][T21109] __seccomp_filter+0x6fa/0x1180 [ 354.680387][T21109] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 354.686048][T21109] ? vfs_write+0x596/0x920 [ 354.690478][T21109] ? __pfx_kfree_link+0x10/0x10 [ 354.695412][T21109] ? __rcu_read_unlock+0x4e/0x70 [ 354.700459][T21109] ? __fget_files+0x1d4/0x210 [ 354.705261][T21109] __secure_computing+0x9f/0x1c0 [ 354.710214][T21109] syscall_trace_enter+0xd1/0x1f0 [ 354.715320][T21109] ? fpregs_assert_state_consistent+0x83/0xa0 [ 354.721450][T21109] do_syscall_64+0xaa/0x1c0 [ 354.725994][T21109] ? clear_bhb_loop+0x55/0xb0 [ 354.730707][T21109] ? clear_bhb_loop+0x55/0xb0 [ 354.735399][T21109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.741325][T21109] RIP: 0033:0x7f5f3e24e719 [ 354.745744][T21109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.765375][T21109] RSP: 002b:00007f5f3cec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 354.773799][T21109] RAX: ffffffffffffffda RBX: 00007f5f3e405f80 RCX: 00007f5f3e24e719 [ 354.781821][T21109] RDX: ffffffffffbffff8 RSI: 000000000000002c RDI: 0000000020b2c000 [ 354.789799][T21109] RBP: 00007f5f3cec1090 R08: 0000000000000000 R09: 0000000000000000 [ 354.797780][T21109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.805813][T21109] R13: 0000000000000000 R14: 00007f5f3e405f80 R15: 00007ffc50b079e8 [ 354.813923][T21109] [ 355.045281][T21111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.219554][T21111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.254986][T21124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=21124 comm=syz.5.6464 [ 355.294925][T21111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.331932][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 355.467680][T21111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.530546][T21111] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.542991][T21111] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.554823][T21111] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.568841][T21111] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.593829][T21146] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.723891][T21146] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.804746][T21146] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.864957][T21146] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.176889][T21177] tipc: Started in network mode [ 356.181790][T21177] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 356.190923][T21177] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 356.198977][T21177] tipc: Enabled bearer , priority 10 [ 356.381032][T21195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58200 sclass=netlink_route_socket pid=21195 comm=syz.3.6498 [ 356.531502][T21222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.549508][T21222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.191141][T21234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.199704][T21234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.409370][ T3396] tipc: Node number set to 1 [ 358.584044][T21247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.592842][T21247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.623241][T21247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.631669][T21247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.645058][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 358.645076][ T29] audit: type=1400 audit(1730831447.192:24018): avc: denied { read } for pid=21246 comm="syz.1.6519" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 358.680927][ T29] audit: type=1400 audit(1730831447.220:24019): avc: denied { open } for pid=21246 comm="syz.1.6519" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 359.438579][ T29] audit: type=1400 audit(1730831447.922:24020): avc: denied { bind } for pid=21250 comm="syz.5.6521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 360.063724][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.089411][ T29] audit: type=1400 audit(1730831448.540:24021): avc: denied { write } for pid=21269 comm="syz.5.6527" path="socket:[74375]" dev="sockfs" ino=74375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 360.173253][ T29] audit: type=1400 audit(1730831448.625:24022): avc: denied { unmount } for pid=14013 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 360.289806][T21286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.298383][T21286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.309756][ T29] audit: type=1400 audit(1730831448.746:24023): avc: denied { create } for pid=21285 comm="syz.5.6535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.596778][ T29] audit: type=1400 audit(1730831449.008:24024): avc: denied { watch } for pid=21291 comm="syz.4.6538" path="/144/control" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 360.670319][ T29] audit: type=1400 audit(1730831449.083:24025): avc: denied { mounton } for pid=21297 comm="syz.4.6540" path="/145/file0" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 360.698799][T21302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.707952][T21302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.754725][ T29] audit: type=1326 audit(1730831449.158:24026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21306 comm="syz.0.6544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 360.778754][ T29] audit: type=1326 audit(1730831449.158:24027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21306 comm="syz.0.6544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 360.814751][T21308] syz.4.6542[21308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.814860][T21308] syz.4.6542[21308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.826534][T21308] syz.4.6542[21308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.873658][T21312] futex_wake_op: syz.0.6546 tries to shift op by 32; fix this program [ 364.467976][T21375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.476921][T21375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.141094][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 365.141149][ T29] audit: type=1326 audit(1730831453.268:24080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21393 comm="syz.0.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 365.170854][ T29] audit: type=1326 audit(1730831453.268:24081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21393 comm="syz.0.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 365.194498][ T29] audit: type=1326 audit(1730831453.268:24082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21393 comm="syz.0.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 365.218135][ T29] audit: type=1326 audit(1730831453.268:24083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21393 comm="syz.0.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 365.241731][ T29] audit: type=1326 audit(1730831453.268:24084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21393 comm="syz.0.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 365.272316][ T29] audit: type=1326 audit(1730831453.390:24085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21393 comm="syz.0.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 365.296052][ T29] audit: type=1326 audit(1730831453.390:24086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21393 comm="syz.0.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 365.348790][ T29] audit: type=1326 audit(1730831453.418:24087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21393 comm="syz.0.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 365.372418][ T29] audit: type=1326 audit(1730831453.446:24088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21393 comm="syz.0.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 365.396227][ T29] audit: type=1326 audit(1730831453.446:24089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21393 comm="syz.0.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 366.230864][T21430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.242750][T21430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.247814][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.435640][T21443] syz.3.6597[21443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.435679][T21443] syz.3.6597[21443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.447244][T21443] syz.3.6597[21443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.569883][T21446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.590587][T21446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.857871][T21461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.866347][T21461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.572244][T21516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.590064][T21519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.598493][T21516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.610912][T21519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.738277][T21526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.746838][T21526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.933222][T21526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.942194][T21526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.201249][T21529] pim6reg1: entered promiscuous mode [ 369.206619][T21529] pim6reg1: entered allmulticast mode [ 370.512011][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 370.512025][ T29] audit: type=1326 audit(1730831458.305:24235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21577 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 370.614559][ T29] audit: type=1326 audit(1730831458.333:24236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21577 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 370.638443][ T29] audit: type=1326 audit(1730831458.333:24237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21577 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 370.639177][T21584] netlink: 'syz.5.6654': attribute type 4 has an invalid length. [ 370.662044][ T29] audit: type=1326 audit(1730831458.333:24238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21577 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 370.662070][ T29] audit: type=1326 audit(1730831458.333:24239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21577 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 370.662090][ T29] audit: type=1326 audit(1730831458.343:24240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21577 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 370.740643][ T29] audit: type=1326 audit(1730831458.343:24241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21577 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 370.759531][T21592] xt_hashlimit: size too large, truncated to 1048576 [ 370.764226][ T29] audit: type=1326 audit(1730831458.343:24242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21577 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73a029d0b0 code=0x7ffc0000 [ 370.794595][ T29] audit: type=1326 audit(1730831458.343:24243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21577 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f73a029ff47 code=0x7ffc0000 [ 370.818257][ T29] audit: type=1326 audit(1730831458.343:24244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21577 comm="syz.3.6653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 370.857251][T21585] netlink: 'syz.5.6654': attribute type 4 has an invalid length. [ 371.437768][T21606] pim6reg1: entered promiscuous mode [ 371.443175][T21606] pim6reg1: entered allmulticast mode [ 371.686013][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.280381][T21639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.288961][T21639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.784701][T21659] syz.4.6685[21659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.784870][T21659] syz.4.6685[21659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.796449][T21659] syz.4.6685[21659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.887199][T21669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.907109][T21669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.528803][T21695] bridge_slave_1: left allmulticast mode [ 373.534597][T21695] bridge_slave_1: left promiscuous mode [ 373.540426][T21695] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.751897][T21702] block device autoloading is deprecated and will be removed. [ 373.759611][T21702] +}[@: attempt to access beyond end of device [ 373.759611][T21702] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 374.176039][T21707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.184692][T21707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.313255][T21711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.322234][T21711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.068418][T21742] loop0: detected capacity change from 0 to 512 [ 375.075136][T21742] EXT4-fs: Ignoring removed mblk_io_submit option [ 376.309752][T21742] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 376.481303][T21742] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.6717: corrupted in-inode xattr: e_value out of bounds [ 376.498411][T21742] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.6717: couldn't read orphan inode 15 (err -117) [ 376.511417][T21742] EXT4-fs mount: 42 callbacks suppressed [ 376.511429][T21742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.541502][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 376.541516][ T29] audit: type=1400 audit(1730831463.932:24340): avc: denied { mount } for pid=21733 comm="syz.0.6717" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 376.725197][T20000] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.918745][ T29] audit: type=1400 audit(1730831464.222:24341): avc: denied { write } for pid=21756 comm="syz.4.6724" path="socket:[75186]" dev="sockfs" ino=75186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 377.146743][T21783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.169616][T21785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.171964][T21783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.178146][T21785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.676705][ T29] audit: type=1326 audit(1730831464.990:24342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21792 comm="syz.4.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 377.700456][ T29] audit: type=1326 audit(1730831464.990:24343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21792 comm="syz.4.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 377.724087][ T29] audit: type=1326 audit(1730831464.990:24344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21792 comm="syz.4.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 377.747758][ T29] audit: type=1326 audit(1730831464.999:24345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21792 comm="syz.4.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 377.771448][ T29] audit: type=1326 audit(1730831464.999:24346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21792 comm="syz.4.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 377.795290][ T29] audit: type=1326 audit(1730831464.999:24347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21792 comm="syz.4.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 377.818917][ T29] audit: type=1326 audit(1730831464.999:24348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21792 comm="syz.4.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 377.842635][ T29] audit: type=1326 audit(1730831464.999:24349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21792 comm="syz.4.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 377.871308][ T2947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.958542][T21801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.967047][T21801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.037964][T21806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.048666][T21806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.295131][T21813] futex_wake_op: syz.3.6744 tries to shift op by 32; fix this program [ 378.449502][T21821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.458013][T21821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.543002][T21825] loop0: detected capacity change from 0 to 512 [ 378.549814][T21825] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 379.709635][T21849] loop0: detected capacity change from 0 to 128 [ 379.803879][T21849] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 380.701058][T21863] loop0: detected capacity change from 0 to 256 [ 380.715928][T21866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.738889][T21863] FAT-fs (loop0): codepage cp1251 not found [ 380.749210][T21866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.068784][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x1 [ 382.076352][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.083795][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.088464][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 382.088559][ T29] audit: type=1326 audit(1730831469.128:24404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21916 comm="syz.4.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 382.091266][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.097297][ T29] audit: type=1326 audit(1730831469.128:24405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21916 comm="syz.4.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 382.120870][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x2 [ 382.120895][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.128276][ T29] audit: type=1326 audit(1730831469.128:24406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21916 comm="syz.4.6784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f65ce719 code=0x7ffc0000 [ 382.151846][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.197660][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.205077][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.212577][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x4 [ 382.219990][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.227464][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.234855][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x2 [ 382.242271][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.249754][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.256269][T21919] loop0: detected capacity change from 0 to 2048 [ 382.257130][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.257154][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.278321][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.285731][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.293226][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.300636][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.308034][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.315454][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.322891][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.330306][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.337813][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.345314][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.352727][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.360181][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.367658][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.375045][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.382519][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.389996][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.397396][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.404933][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.412361][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 382.440226][T21931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.458772][T21931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.468667][T21919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.481005][ T9] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz0 [ 382.528463][T20000] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.636040][T21954] bridge0: port 2(erspan0) entered blocking state [ 382.642572][T21954] bridge0: port 2(erspan0) entered disabled state [ 382.649730][T21954] erspan0: entered allmulticast mode [ 382.655565][T21954] erspan0: entered promiscuous mode [ 382.673901][T21954] bridge0: port 2(erspan0) entered blocking state [ 382.676309][ T29] audit: type=1326 audit(1730831469.671:24407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21950 comm="syz.0.6797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 382.680437][T21954] bridge0: port 2(erspan0) entered forwarding state [ 382.685151][T21957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.704063][ T29] audit: type=1326 audit(1730831469.671:24408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21950 comm="syz.0.6797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 382.704117][ T29] audit: type=1326 audit(1730831469.671:24409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21950 comm="syz.0.6797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 382.714402][T21957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.719166][ T29] audit: type=1326 audit(1730831469.671:24410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21950 comm="syz.0.6797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f83e719 code=0x7ffc0000 [ 382.798538][T21955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6795'. [ 382.973889][T21961] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 383.046870][ T29] audit: type=1400 audit(1730831470.026:24411): avc: denied { name_bind } for pid=21962 comm="syz.4.6800" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 383.317360][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.562156][T21971] loop1: detected capacity change from 0 to 512 [ 383.585274][ T29] audit: type=1400 audit(1730831470.541:24412): avc: denied { setopt } for pid=21976 comm="syz.5.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 383.617616][T21971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.630709][T21971] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.643127][ T29] audit: type=1400 audit(1730831470.588:24413): avc: denied { write } for pid=21970 comm="syz.1.6803" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 383.699558][T21984] loop0: detected capacity change from 0 to 512 [ 383.700818][T18756] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.820008][T21984] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 383.831639][T21984] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 383.841828][T21984] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.6809: Corrupt directory, running e2fsck is recommended [ 383.897930][T21984] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 383.923969][T21984] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.6809: corrupted in-inode xattr: invalid ea_ino [ 383.971790][T21984] EXT4-fs (loop0): Remounting filesystem read-only [ 384.034451][T21984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.055596][T21984] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 384.062556][T21984] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.100635][T21998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.118290][T21998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.135783][T22004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.144475][T22004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.565393][T22012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.574386][T22012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.737207][T22018] syzkaller0: entered promiscuous mode [ 384.742905][T22018] syzkaller0: entered allmulticast mode [ 384.775917][T22024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.784529][T22024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.543387][T22041] loop1: detected capacity change from 0 to 512 [ 385.550988][T22041] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.560160][T22041] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 385.655591][T22047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.664536][T22047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.784768][T22063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.792308][T22065] loop0: detected capacity change from 0 to 512 [ 385.793241][T22063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.828456][T22065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.841108][T22065] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.876181][T20000] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.935414][T22071] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.942636][T22071] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.952315][T22071] bridge_slave_1: left allmulticast mode [ 385.958060][T22071] bridge_slave_1: left promiscuous mode [ 385.963744][T22071] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.971764][T22071] bridge_slave_0: left allmulticast mode [ 385.977498][T22071] bridge_slave_0: left promiscuous mode [ 385.983093][T22071] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.191785][T22088] loop0: detected capacity change from 0 to 2048 [ 386.597773][T22092] loop3: detected capacity change from 0 to 512 [ 386.629527][T22088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.643730][T22092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.656359][T22092] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.728046][T22102] loop1: detected capacity change from 0 to 512 [ 386.747432][T20000] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.788575][T22102] EXT4-fs (loop1): invalid inodes per group: 8388896 [ 386.788575][T22102] [ 387.014520][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.239177][T22134] bridge_slave_0: entered promiscuous mode [ 388.048214][T22169] loop3: detected capacity change from 0 to 2048 [ 388.068140][T22169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.117949][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 388.117963][ T29] audit: type=1400 audit(1730831474.782:24536): avc: denied { append } for pid=22168 comm="syz.3.6880" path="/127/file0/cpuacct.usage_sys" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.231996][T22169] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 388.302465][T22169] EXT4-fs (loop3): Remounting filesystem read-only [ 388.328881][ T29] audit: type=1400 audit(1730831474.857:24537): avc: denied { map } for pid=22168 comm="syz.3.6880" path="/127/file0/cpuacct.usage_sys" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.422063][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.465408][ T29] audit: type=1326 audit(1730831475.100:24538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22173 comm="syz.3.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 388.489089][ T29] audit: type=1326 audit(1730831475.100:24539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22173 comm="syz.3.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 388.512761][ T29] audit: type=1326 audit(1730831475.100:24540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22173 comm="syz.3.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 388.536311][ T29] audit: type=1326 audit(1730831475.100:24541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22173 comm="syz.3.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 388.559964][ T29] audit: type=1326 audit(1730831475.100:24542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22173 comm="syz.3.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 388.583625][ T29] audit: type=1326 audit(1730831475.100:24543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22173 comm="syz.3.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 388.607488][ T29] audit: type=1326 audit(1730831475.100:24544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22173 comm="syz.3.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 388.631125][ T29] audit: type=1326 audit(1730831475.100:24545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22173 comm="syz.3.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a029e719 code=0x7ffc0000 [ 389.022405][T22196] loop3: detected capacity change from 0 to 512 [ 389.292926][T22196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.363051][T22205] loop0: detected capacity change from 0 to 256 [ 389.374483][T22205] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 389.420717][T22196] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.463818][ T368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.666794][T22208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.735841][T22208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.758223][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.780896][T22212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.789355][T22212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.901244][T22217] loop1: detected capacity change from 0 to 256 [ 390.540957][T22222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.550087][T22222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.540964][T22248] vhci_hcd: invalid port number 0 [ 392.062761][T22265] dummy0: entered promiscuous mode [ 392.715299][T22278] loop0: detected capacity change from 0 to 1024 [ 392.748381][T22260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6913'. [ 392.770548][T22278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.785114][T22293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6920'. [ 392.789591][T22278] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.6916: missing EA_INODE flag [ 392.794176][T22293] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6920'. [ 392.822067][T22278] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.6916: error while reading EA inode 11 err=-117 [ 392.838034][T22263] chnl_net:caif_netlink_parms(): no params data found [ 392.921337][T22263] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.928553][T22263] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.981479][T20000] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.990934][T22263] bridge_slave_0: entered allmulticast mode [ 393.012726][T22263] bridge_slave_0: entered promiscuous mode [ 393.048186][T22263] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.049359][T22306] loop0: detected capacity change from 0 to 256 [ 393.055309][T22263] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.089856][T22263] bridge_slave_1: entered allmulticast mode [ 393.102152][T22306] FAT-fs (loop0): codepage cp936 not found [ 393.105730][T22263] bridge_slave_1: entered promiscuous mode [ 393.144476][T22263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.169333][T22263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.217303][T22263] team0: Port device team_slave_0 added [ 393.238089][T22263] team0: Port device team_slave_1 added [ 393.282832][T22263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.289803][T22263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.315756][T22263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.326964][T22263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.333921][T22263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.359898][T22263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.416467][T22263] hsr_slave_0: entered promiscuous mode [ 393.426207][T22263] hsr_slave_1: entered promiscuous mode [ 393.428800][T22319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.441144][T22263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.445641][T22319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.448927][T22263] Cannot create hsr debugfs directory [ 393.514351][T22263] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.573177][T22263] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.656451][T22325] loop0: detected capacity change from 0 to 512 [ 393.721798][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 393.721815][ T29] audit: type=1400 audit(1730831479.959:24747): avc: denied { create } for pid=22320 comm="syz.0.6929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 393.748875][ T29] audit: type=1400 audit(1730831479.987:24748): avc: denied { create } for pid=22314 comm="syz.1.6927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 393.769240][ T29] audit: type=1400 audit(1730831479.987:24749): avc: denied { write } for pid=22314 comm="syz.1.6927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 393.789489][ T29] audit: type=1400 audit(1730831479.987:24750): avc: denied { nlmsg_write } for pid=22314 comm="syz.1.6927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 393.879853][T22263] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.904488][T22325] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.6929: corrupted xattr block 255: invalid header [ 393.918190][T22325] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 393.926672][T22325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.939714][ T29] audit: type=1400 audit(1730831480.221:24751): avc: denied { name_bind } for pid=22330 comm="syz.3.6932" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 393.939810][T22325] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #2: comm syz.0.6929: corrupted xattr block 255: invalid header [ 393.961730][ T29] audit: type=1400 audit(1730831480.221:24752): avc: denied { node_bind } for pid=22330 comm="syz.3.6932" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 393.977753][T22325] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 394.006441][T22263] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.017602][T22325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.077887][T22263] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 394.086775][T22263] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 394.095707][T22263] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 394.104386][T22263] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 394.152047][T22263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.166492][T22263] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.177066][ T1860] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.177178][T22335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.184189][ T1860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.192649][T22335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.216612][T22335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.220934][T22263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.233960][ T29] audit: type=1400 audit(1730831480.493:24753): avc: denied { create } for pid=22334 comm="syz.4.6933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.235557][T22263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.266451][T22335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.275134][ T29] audit: type=1400 audit(1730831480.540:24754): avc: denied { read } for pid=22334 comm="syz.4.6933" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 394.298004][ T29] audit: type=1400 audit(1730831480.540:24755): avc: denied { open } for pid=22334 comm="syz.4.6933" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 394.361809][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.368949][ T1860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.389246][T22339] syz.0.6934[22339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.389340][T22339] syz.0.6934[22339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.409922][T22339] syz.0.6934[22339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.437587][ T29] audit: type=1400 audit(1730831480.699:24756): avc: denied { write } for pid=22338 comm="syz.0.6934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 394.453136][T22343] loop1: detected capacity change from 0 to 2048 [ 394.475119][T22263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.492784][T22343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.503428][T22350] loop0: detected capacity change from 0 to 512 [ 394.511627][T22343] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.534486][T18756] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.548635][T22350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.561300][T22350] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.586674][T20000] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.782613][T22263] veth0_vlan: entered promiscuous mode [ 394.843880][ T1860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.883069][T22263] veth1_vlan: entered promiscuous mode [ 395.039575][T22263] veth0_macvtap: entered promiscuous mode [ 395.052839][T22263] veth1_macvtap: entered promiscuous mode [ 395.065164][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.075689][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.085547][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.096016][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.110084][T22263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.130943][T22377] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 395.132350][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.151104][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.161038][T22263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.171526][T22263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.189309][T22263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.193493][T22376] IPVS: stopping master sync thread 22377 ... [ 395.198382][T22263] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.211546][T22263] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.220392][T22263] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.229109][T22263] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.533839][T22393] loop1: detected capacity change from 0 to 512 [ 395.546033][T22393] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 395.618249][T22393] EXT4-fs (loop1): 1 truncate cleaned up [ 395.632301][T22393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.128237][T22408] loop3: detected capacity change from 0 to 1024 [ 396.159373][T22408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.173471][T22408] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.6949: missing EA_INODE flag [ 396.190384][T22408] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz.3.6949: error while reading EA inode 11 err=-117 [ 396.217905][T22412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.228182][T22412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.249468][T20156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.299094][T22415] syz.0.6952[22415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.299149][T22415] syz.0.6952[22415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.312338][T22415] syz.0.6952[22415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.350922][T22421] loop0: detected capacity change from 0 to 512 [ 396.369376][T22421] EXT4-fs: Ignoring removed bh option [ 396.375073][T22421] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 396.386785][T22421] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.6954: bad orphan inode 17 [ 396.398362][T22421] EXT4-fs (loop0): Remounting filesystem read-only [ 396.405000][T22421] ext4_test_bit(bit=16, block=4) = 1 [ 396.410356][T22421] is_bad_inode(inode)=0 [ 396.414591][T22421] NEXT_ORPHAN(inode)=1048336 [ 396.419180][T22421] max_ino=32 [ 396.422369][T22421] i_nlink=0 [ 396.427546][T22393] ================================================================== [ 396.433687][T22421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.435630][T22393] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 396.435664][T22393] [ 396.435670][T22393] read-write to 0xffff888100422eb8 of 4 bytes by task 22400 on cpu 1: [ 396.447718][T22421] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 396.456960][T22393] __writeback_single_inode+0x1f4/0x850 [ 396.456987][T22393] writeback_single_inode+0x16c/0x3f0 [ 396.457004][T22393] sync_inode_metadata+0x5c/0x90 [ 396.459756][T22421] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.467443][T22393] generic_buffers_fsync_noflush+0xd8/0x120 [ 396.467470][T22393] ext4_sync_file+0x1ff/0x6c0 [ 396.467496][T22393] vfs_fsync_range+0x116/0x130 [ 396.514023][T22393] ext4_buffered_write_iter+0x326/0x370 [ 396.519583][T22393] ext4_file_write_iter+0x293/0xe10 [ 396.524801][T22393] iter_file_splice_write+0x5f1/0x980 [ 396.530190][T22393] direct_splice_actor+0x160/0x2c0 [ 396.535306][T22393] splice_direct_to_actor+0x302/0x670 [ 396.540679][T22393] do_splice_direct+0xd7/0x150 [ 396.545453][T22393] do_sendfile+0x39b/0x970 [ 396.549866][T22393] __x64_sys_sendfile64+0x110/0x150 [ 396.555096][T22393] x64_sys_call+0xed5/0x2d60 [ 396.559687][T22393] do_syscall_64+0xc9/0x1c0 [ 396.564190][T22393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.570087][T22393] [ 396.572407][T22393] read to 0xffff888100422eb8 of 4 bytes by task 22393 on cpu 0: [ 396.580029][T22393] generic_buffers_fsync_noflush+0x83/0x120 [ 396.585919][T22393] ext4_sync_file+0x1ff/0x6c0 [ 396.590606][T22393] vfs_fsync_range+0x116/0x130 [ 396.595379][T22393] ext4_buffered_write_iter+0x326/0x370 [ 396.600943][T22393] ext4_file_write_iter+0x293/0xe10 [ 396.606145][T22393] iter_file_splice_write+0x5f1/0x980 [ 396.611514][T22393] direct_splice_actor+0x160/0x2c0 [ 396.616625][T22393] splice_direct_to_actor+0x302/0x670 [ 396.621994][T22393] do_splice_direct+0xd7/0x150 [ 396.626754][T22393] do_sendfile+0x39b/0x970 [ 396.631185][T22393] __x64_sys_sendfile64+0x110/0x150 [ 396.636401][T22393] x64_sys_call+0xed5/0x2d60 [ 396.640992][T22393] do_syscall_64+0xc9/0x1c0 [ 396.645491][T22393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.651390][T22393] [ 396.653702][T22393] value changed: 0x00000022 -> 0x00000000 [ 396.659404][T22393] [ 396.661717][T22393] Reported by Kernel Concurrency Sanitizer on: [ 396.667856][T22393] CPU: 0 UID: 0 PID: 22393 Comm: syz.1.6944 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 396.678609][T22393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 396.688655][T22393] ================================================================== [ 396.712927][T18756] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.081734][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration